CVE-2024-26304-RCE-exploit

CVE-2024-26304 - ArubaOS 원격 코드 실행 취약점 개요 CVE-2024-26304 는 ArubaOS 의 L2/L3 관리 서비스 버퍼 오버플로우로 인한 치명적인 원격 코드 실행RCE 취약점입니다. 공격자는 PAPIProcess Application Programming Interface UDP 포트 8211 로 특수하게 조작된 패킷을 전송하여 이 취약점을 악용할 수 있으며, 이로 인해 상승된 권한으로 임의 코드가 실행됩니다. CVSS 점수: 9.8 치명적 공격 벡터 : 네트워크 공격 복잡성 : 낮음 필요 권한 ...

CVE-2026-76730

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to circumvent certain existing authentication...

CVE-2026-76730 Improper PAPI Packet handling leads to unauthorized access in HPE Networking Instant ON APs

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to circumvent certain existing authentication...

CVE-2026-76730 Improper PAPI Packet handling leads to unauthorized access in HPE Networking Instant ON APs

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to circumvent certain existing authentication...

EUVD-2026-89349

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to circumvent certain existing authentication...

CVE-2026-76730

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs due to improper packet handling. This flaw allows an unauthenticated adjacent attacker to circumvent existing authentication controls and send unauthorized network traffic to the target device. Spe...

CVE-2026-76724

A command injection vulnerability exists in the Command Line Interface (CLI) of HPE Networking Instant ON APs when accessed via the PAPI protocol . An unauthenticated adjacent attacker can exploit this by sending specially crafted packets to perform command injection. Successful exploitation allo...

CVE-2026-76724 Unauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI Protocol

A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform command injection by sending specially crafted packets. Successful exploitation could allow an attacker to execute arbitrary commands as a...

CVE-2026-76724 Unauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI Protocol

A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform command injection by sending specially crafted packets. Successful exploitation could allow an attacker to execute arbitrary commands as a...

CVE-2026-13159

The Real Estate Papi WordPress theme through 1.0.5 does not perform capability or CSRF checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to install a fixed set of companion from the WordPress.org repository. Where the request runs in the session of a user w...

WordPress Real Estate Papi theme <= 1.0.5 - Subscriber+ Plugin Installation vulnerability

Subscriber+ Plugin Installation vulnerability discovered by Huynh Kien Minh in WordPress Theme Real Estate Papi versions = 1.0.5...

CVE-2026-13159 Real Estate Papi <= 1.0.5 - Subscriber+ Plugin Installation

The Real Estate Papi WordPress theme through 1.0.5 does not perform capability or CSRF checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to install a fixed set of companion from the WordPress.org repository. Where the request runs in the session of a user w...

CVE-2026-13159 Real Estate Papi <= 1.0.5 - Subscriber+ Plugin Installation

The Real Estate Papi WordPress theme through 1.0.5 does not perform capability or CSRF checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to install a fixed set of companion from the WordPress.org repository. Where the request runs in the session of a user w...

CVE-2026-13159

The Real Estate Papi WordPress theme (versions through 1.0.5 ) is vulnerable to an unauthorized plugin installation due to a lack of capability or CSRF checks on one of its AJAX actions . This flaw allows any authenticated user, such as a subscriber , to install a fixed set of companion plugins f...

EUVD-2026-72061

The Real Estate Papi WordPress theme through 1.0.5 does not perform capability or CSRF checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to install a fixed set of companion from the WordPress.org repository. Where the request runs in the session of a user w...

CVE-2026-13159: Missing Authorization

The Real Estate Papi WordPress theme through 1.0.5 does not perform capability or CSRF checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to install a fixed set of companion from the WordPress.org repository. Where the request runs in the session of a user w...

PT-2026-86481

The Real Estate Papi WordPress theme through 1.0.5 does not perform capability or CSRF checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to install a fixed set of companion from the WordPress.org repository. Where the request runs in the session of a user w...

EUVD-2026-29849

Command injection vulnerabilities exist in the command line interface CLI service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying...

CVE-2026-44871

Command injection vulnerabilities exist in the command line interface CLI service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying...

CVE-2026-44871

CVE-2026-44871 affects the CLI service used via the PAPI protocol on AOS-8 and AOS-10 operating systems. The issue enables an authenticated remote attacker to execute arbitrary commands on the underlying OS by exploiting command-injection in the CLI, with network access required, low attack compl...