CVE-2026-73753 Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface

Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-19766

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...

EUVD-2026-69476

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

CVE-2026-73740 Local Privilege Escalation in HPE Networking Fabric Composer

A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying host to elevate their user privileges to those of a higher role. A successful exploit allows the attacker to change the state of certain settings of the...

CVE-2026-73720 Authenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer API

Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73720

HPE Networking Fabric Composer contains insecure file operations in its API that could allow an authenticated remote attacker to achieve remote code execution . Successful exploitation permits an attacker to execute arbitrary commands as a privileged user on the underlying operating system, resul...

CVE-2026-73701

CVE-2026-73701 is a critical unauthenticated remote code execution (RCE) vulnerability in the underlying operating system of HPE Networking Fabric Composer . The vulnerability requires certain preconditions outside the attacker's control to be met, which is reflected in the high attack complexity...

EUVD-2026-69579

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...

CVE-2026-19766 Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...

CVE-2026-56143

CVE-2026-56143 is a Denial of Service vulnerability in Elasticsearch caused by Allocation of Resources Without Limits or Throttling (CWE-770) . An attacker with elevated privileges can submit a specially crafted request that triggers excessive memory allocation (CAPEC-130) , potentially rendering...

CVE-2025-57520-Stored-XSS-in-Decap-CMS-3.8.3-

CVE-2025-57520 – Decap CMS 단계 1. 기여자/편집자낮은 권한로 로그인합니다. 2. 새 블로그 항목을 생성합니다. 3. 취약한 필드예: 제목 중 하나에 페이로드를 삽입합니다. 4. 항목을 저장합니다. 5. 관리자높은 권한로 로그인합니다. 6. 미리보기에서 항목을 엽니다. 7. 페이로드가 관리자의 브라우저 컨텍스트에서 실행됩니다. 스크린샷...

PT-2026-84405

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...

CVE-2026-34213

CVE-2026-34213 Docmost의 권한이 낮은 사용자가 피해자의 attachmentId를 일반 업로드 엔드포인트에 제공하고 동일한 워크스페이스 내 다른 페이지의 저장된 첨부 파일을 덮어쓸 수 있습니다. 소개 저는 Docmost오픈소스 협업 문서화 플랫폼에서 High 심각도의 인가 결함을 식별하고, 책임감 있게 공개했으며, 재현했습니다. Docmost의 공식 사이트는 이 플랫폼을 300만 회 이상 다운로드 된 엔터프라이즈급 온프레미스 위키로 소개하며, Vilnius City , Bechtle , 호주 정부 , 적십자 ,...

Linux Distros Unpatched Vulnerability : CVE-2026-58301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connectio...

CVE-2026-82634

Frappe Framework development builds contain an authorization flaw in the render_jinja_template endpoint (file: print_format_generator.py). Low-privileged users with print permission on any document can supply raw Jinja template strings, enabling arbitrary SELECT statements against unrelated table...

CVE-2021-32160

..| XSS para usuário privilegiado |.. Descrição : Explorando um ataque de Cross-Site Scripting XSS refletido para criar um usuário privilegiado por meio do recurso de adição de usuários do Webmin e, em seguida, obtendo um shell reverso por meio do recurso de processos em execução do Webmin Versão...

CVE-2026-82236 File Browser 2.63.6 through 2.63.23 Share Link Exposure via File Deletion

File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes another user's shared file. Attackers can access the surviving share link to retrieve new unrelated content uploaded to the same path without authentication...

CVE-2026-81625

CVE-2026-81625 is a stack buffer overflow in Greenbone OS and openvas-scanner . A remote attacker with user privileges can execute a malicious or compromised NASL vulnerability test (VT) to trigger the overflow, potentially gaining full access to the system. The vulnerability is rated HIGH with a...

CVE-2026-81625 Stack buffer overflow in Greenbone OS and openvas-scanner

A remote attacker with user privileges may use a malicious or compromised NASL vulnerability test VT on the affected products to trigger a stack buffer overflow and gain full access on the compromised system...

EUVD-2026-66771

LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create and manage their own survey can store malicious JavaScript in a quota message. This issue affects LimeSurvey: 7.0.5...