Security Bulletin: This Power System update is being released to address CVE-2026-18849

Summary Power Systems Firmware is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact...

Security Bulletin: This Power System update is being released to address CVE-2026-17028

Summary Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition undergoing iSCSI SAN network boot can prevent that partition from completing its boot sequence. Other partitions and...

MINI-3C5Q-CV4R-HQMV

Bulletin has no description...

CVE-2026-27871

Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...

CVE-2026-73673

Netis NC63 router firmware V3.0.0.3327 contains an unauthenticated firmware update vulnerability that allows unauthenticated attackers to submit unsigned firmware images by exploiting a missing authentication enforcement flaw in the Boa web server and netis.cgi CGI dispatcher. Attackers can send ...

CVE-2026-73673

Netis NC63 router firmware V3.0.0.3327 contains an unauthenticated firmware update vulnerability that allows unauthenticated attackers to submit unsigned firmware images by exploiting a missing authentication enforcement flaw in the Boa web server and netis.cgi CGI dispatcher. Attackers can send ...

EUVD-2026-58623

Netis NC63 router firmware V3.0.0.3327 contains an unauthenticated firmware update vulnerability that allows unauthenticated attackers to submit unsigned firmware images by exploiting a missing authentication enforcement flaw in the Boa web server and netis.cgi CGI dispatcher. Attackers can send ...

CVE-2026-73673

CVE-2026-73673 affects Netis NC63 router firmware V3.0.0.3327. An unauthenticated firmware update vulnerability arises from a missing authentication enforcement flaw in the Boa web server and netis.cgi dispatcher, allowing an attacker to upload unsigned images via multipart POST to /cgi-bin/uploa...

CVE-2026-73673 Netis NC63 V3.0.0.3327 Unauthenticated Firmware Update with Missing Cryptographic Firmware Authentication

Netis NC63 router firmware V3.0.0.3327 contains an unauthenticated firmware update vulnerability that allows unauthenticated attackers to submit unsigned firmware images by exploiting a missing authentication enforcement flaw in the Boa web server and netis.cgi CGI dispatcher. Attackers can send ...

PT-2026-72015

Name of the Vulnerable Software and Affected Versions Netis NC63 version V3.0.0.3327 Description An authentication enforcement flaw in the Boa web server and netis.cgi CGI dispatcher allows unauthenticated attackers to upload unsigned firmware images. The Boa web server grants access to any path...

CVE-2025-35973

A flaw was found in IntelR Processors within Ring 0, affecting the kernel, hypervisor, and bare metal operating systems. Improper handling of values may allow an authorized adversary with privileged user access to perform a local, high-complexity attack. This can lead to an escalation of privileg...

Philips Hue Bridge Pro

RISK EVALUATION The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...

Exploit for CVE-2021-43716

Epson EH-TW5350 Security Advisories B-BEAM-BOB Three vulner...

CVE-2026-12051

The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...

HPESBHF05107 rev.2 - HPE ProLiant DL/ML/XD/XL, Alletra, Apollo, Edgeline, and Synergy Server Using Certain Intel Processors, INTEL-SA-01437, Intel UEFI Firmware Advisory, Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to BIOS v1.8005-292026 HPE ProLiant Compute DL110 Gen12 - Prior to BIOS v1.8005-292026 HPE ProLiant Compute DL320 Gen12 - Prior to BI...

HPESBHF05099 rev.1 - HPE ProLiant DL/ML/XD, Alletra, and Synergy servers Using Certain Intel Processors, INTEL-SA-01428, Intel Processor Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to v1.5007-24-2026 HPE ProLiant Compute DL320 Gen12 - Prior to...

2026.3 IPU, Intel® Chipset Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Active Management Technology Intel® AMT and some Intel® Standard Manageability may allow denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details:...

Intel Chipset Firmware August 2026

Intel has informed HP of potential security vulnerabilities for some Intel® Converged Security and Management Engine Intel® CSME, which might allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the...

2026.2 IPU,  Intel® Trust Domain Extensions (Intel® TDX) module Advisory

Summary: A potential security vulnerability for some Intel® TDX modules may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31356 Description: Insufficient verification of data authenticity for some...

EUVD-2026-55855

The UpdateHub management subsystem subsys/mgmt/updatehub/updatehub.c drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds1. Access to ctx was not serialized, and preparef...