CVE-2026-112116

An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resulting in a complete compromise of the affected system. Refer to the ' Security...

EUVD-2026-116689

An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resulting in a complete compromise of the affected system. Refer to the ' Security...

CVE-2026-112116

The ASUS System Control Interface contains an exposed IOCTL with insufficient access control. This vulnerability allows a local, low-privileged user to perform arbitrary read and write operations on physical memory by sending crafted device control requests. If successfully exploited, this flaw c...

CVE-2026-79868

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or...

CVE-2026-79868

Technical details regarding CVE-2026-79868 are not publicly available in the provided documents. While the title suggests Authentication Bypass Vulnerabilities leading to Complete System Compromise in AOS-8 , the description contains no concrete technical details. Monitor for updates.

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from insufficient input validation at web interface endpoints; unauthenticated remote attackers can trigger a buffer overflow, potentially allowing arbitrary commands to be executed on the underlying operating system, resulting in a complet...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from insufficient input validation at web interface endpoints; unauthenticated remote attackers can trigger a buffer overflow, potentially allowing arbitrary commands to be executed on the underlying operating system, resulting in a complet...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a lack of boundary checks on endpoints within the device’s web interface. Unauthenticated remote attackers can exploit this flaw to trigger a buffer overflow, potentially allowing them to execute arbitrary commands on the underlying...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a remote code execution flaw in the underlying operating system. Unauthenticated neighboring attackers can execute arbitrary code on affected devices. Successful exploitation allows attackers to run arbitrary commands with privileged...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from an unauthenticated command injection flaw in the command-line interface. Attackers with physical access can exploit this vulnerability to execute arbitrary commands as a privileged user on the underlying operating system, leading to a...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from an authentication bypass flaw in the underlying operating system. Unauthenticated remote attackers can circumvent existing authentication mechanisms and exploit this vulnerability to execute arbitrary code as a privileged user on the O...

CVE-2026-76684 Authentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator API

Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading ...

CVE-2026-76673: Improper Authentication

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete...

CVE-2026-76688: Improper Authentication

Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative...

CVE-2026-73725

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges, leading to a complete compromise of the affected host...

CVE-2026-73711: Improper Privilege Management

A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to gain administrative privileges leading to complete compromise of the HPE Networking Fabric Composer host...

CVE-2026-76657: Improper Authentication

Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete...

CVE-2026-73701: Improper Control of Generation of Code

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...

CVE-2026-73716: Improper Neutralization of Special Elements used in an OS Command

A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful...

Cisco Smart Install Endpoints Exposure Detection

Cisco Smart Install endpoints were discovered. Exposure of SMI to untrusted networks could allow complete compromise of the switch. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Smart Install endpoints were discovered.""" import socket from kittysploit import from...