CVE-2026-76721 Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APs

Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underlying host. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the...

CVE-2026-100287

Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to permanently delete or restore vault attachments via a crafted API request...

Server-Side Request Forgery

Apache Shiro is vulnerable to Server-Side Request Forgery. The vulnerability is due to insufficient validation of the form‑resubmit target in the Jakarta EE integration module, where the server will initiate an outbound connection to a URL supplied in a crafted HTTP request and transmit...

PT-2026-102868

Name of the Vulnerable Software and Affected Versions HPE Networking Instant ON APs affected versions not specified Description A command injection issue exists in the CLI of the affected devices. An unauthenticated adjacent attacker can execute arbitrary commands as a privileged user on the...

PT-2026-102872

Name of the Vulnerable Software and Affected Versions HPE Networking Instant ON APs affected versions not specified Description A server-side request forgery SSRF issue exists in the API endpoint of the device. An authenticated remote attacker with high privileges can exploit this to execute...

CVE-2026-76728: Server-Side Request Forgery (SSRF)

A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery SSRF attack. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the...

CVE-2026-76727: Improper Neutralization of Special Elements used in a Command

Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

PT-2026-102871

🚨 CVE-2026-76727 Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a...

CVE-2026-76724: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform command injection by sending specially crafted packets. Successful exploitation could allow an attacker to execute arbitrary commands as a...

PT-2026-102865

Name of the Vulnerable Software and Affected Versions HPE Networking Instant ON affected versions not specified Description A buffer overflow occurs in the affected interface, which may allow an unauthenticated remote attacker to execute arbitrary code on the underlying host. Successful...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-116)

The version of kernel installed on the remote host is prior to 5.15.220-153.252. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-116 advisory. In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption...

CVE-2026-98007

A flaw was found in the Linux kernel. A privileged local user can cause a Denial of Service DoS by loading a specially crafted BPF Berkeley Packet Filter program that passes a pointer value instead of a scalar number as the loop iteration count to the bpfloop function. Because the kernel's BPF...

CVE-2026-93272

A flaw was found in the Linux kernel's Qualcomm Wireless Connectivity Subsystem WCNSS remoteproc driver. When initializing hardware configurations that lack power domain regulators, an incorrect pointer calculation shifts past the bounds of the regulator array. A local privileged user could trigg...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for plane updates CVE-2026-64098 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialize...

CVE-2026-101064

Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows privileged users to specify arbitrary URLs without destination validation. Attackers with Power User or higher roles can coerce Obot to make requests to internal services and clo...

CVE-2026-53627

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a low-privileged authenticated user can use the new API v2 to perform update operations that the same user is normally forbidden to perform through the user interface. The API update flow does not consistently...

CVE-2026-55217 GLPI: Unallowed modfication of knowbase items comments and translations

GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and 11.0.8, a low-privileged authenticated user can create, update, or delete knowledge base comments and translations without the required authorization for the affected content. This issue is fixed in versions 11.0...

CVE-2026-53627 GLPI: Unexpected access to update operations through the API

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a low-privileged authenticated user can use the new API v2 to perform update operations that the same user is normally forbidden to perform through the user interface. The API update flow does not consistently...

CVE-2026-93662

The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search when a caller supplies their own owner value, letting a low-privileged user read other accounts' unpublished, pending or trashed event and venue content, including full street...

EUVD-2026-85809

The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search when a caller supplies their own owner value, letting a low-privileged user read other accounts' unpublished, pending or trashed event and venue content, including full street...