CVE-2026-73733

Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to circumvent existing authentication controls. Successful exploitation could allow an attacker to retain limited access to the affected system after that access should ha...

CVE-2026-73743

HPE Networking Fabric Composer has a vulnerability in its web-based management interface that allows an unauthenticated remote attacker to access data in a cleartext format . A successful exploit could expose network infrastructure data to further compromise. The CVSS 3.1 score is 3.7 (LOW) , ref...

CVE-2026-73737

An unauthenticated path traversal vulnerability affects the API endpoint of HPE Networking Fabric Composer . A successful exploit allows an adjacent, unauthenticated attacker with high complexity and user interaction to manipulate user-generated files, potentially causing unauthorized changes to ...

CVE-2026-73735

CVE-2026-73735 is an access control vulnerability in the API of HPE Networking Fabric Composer that allows an authenticated low-privilege operator user to read or modify data beyond the scope of their assigned permissions. The impact is rated MEDIUM (CVSS 3.1: 5.4) with low confidentiality and in...

CVE-2026-73731

A reflected cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer allows an unauthenticated remote attacker to execute arbitrary script code in a victim's browser. The attack requires user interaction (e.g., clicking a crafted link) and r...

CVE-2026-73727

HPE Networking Fabric Composer contains an information disclosure vulnerability in its API that allows an authenticated low-privilege operator user to access sensitive data beyond their authorized privilege level. A successful exploit could be leveraged to gain further access to network services ...

CVE-2026-73722

CVE-2026-73722 affects the web-based management interface of HPE Networking Fabric Composer . Command injection vulnerabilities allow an authenticated remote attacker to execute arbitrary commands as a privileged user on the underlying operating system, leading to full compromise of confidentiali...

EUVD-2026-69443

A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful...

CVE-2026-73745

HPE Networking Fabric Composer has an unauthenticated information disclosure vulnerability in its API endpoint . A remote attacker with no prior access can view limited information handled by the system, potentially revealing details about internal services and workflows . The CNA-assigned CVSS 3...

CVE-2026-73701

CVE-2026-73701 is a critical unauthenticated remote code execution (RCE) vulnerability in the underlying operating system of HPE Networking Fabric Composer . The vulnerability requires certain preconditions outside the attacker's control to be met, which is reflected in the high attack complexity...

HPESBNW05134 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking ArubaOS-CX (AOS-CX)

Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba CX 10000 Switch Series - Please refer to Vulnerability Summary for Impacted Versions Aruba CX 4100i Switch Series - Please refer to Vulnerability Summary for Impacted...

CVE-2026-63455

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

CVE-2026-63456

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

EUVD-2026-52790

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

EUVD-2015-5390

Malware in sbrugna...

EUVD-2025-20682

Malicious code in bioql PyPI...

EUVD-2025-20683

Malicious code in bioql PyPI...

CVE-2025-37103

Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing anyone with knowledge of it to bypass normal device authentication. Successful exploitation could allow a remote attacker to gain administrative access to the system...

CVE-2025-37102

An authenticated command injection vulnerability exists in the Command line interface of HPE Networking Instant On Access Points. A successful exploitation could allow a remote attacker with elevated privileges to execute arbitrary commands on the underlying operating system as a highly privilege...

CVE-2025-37103

Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing anyone with knowledge of it to bypass normal device authentication. Successful exploitation could allow a remote attacker to gain administrative access to the system...