43327 matches found
CVE-2026-73716: Improper Neutralization of Special Elements used in an OS Command
A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful...
CVE-2026-78592: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in Kibana can lead to the unauthorized deletion of privileged resources via Path Traversal CAPEC-126. A low-privileged user holding tag creation privileges could cause a subsequent administrative action in the tag...
CVE-2026-73766: Improper Neutralization of Special Elements used in a Command
Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject arbitrary commands. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating...
CVE-2026-73782: Use of Externally-Controlled Format String
A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...
PT-2026-84420
Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A remote code execution issue exists in the underlying operating system of the software. This flaw allows an unauthenticated remote attacker to execute arbitrary comman...
PT-2026-84426
Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description Command injection flaws in the web-based management interface allow an authenticated remote attacker to execute arbitrary commands as a privileged user on the underlyin...
PT-2026-84484
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description Command injection flaws in the API endpoint allow an authenticated remote attacker with administrative privileges to inject and execute arbitrary commands as a privileged user on the underlyin...
PT-2026-84487
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description An authenticated arbitrary file write issue allows an authenticated actor to create or modify files and execute arbitrary commands as a privileged user on the underlying operating system. This...
CVE-2026-73722: Improper Neutralization of Special Elements used in an OS Command
Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system. Successful exploitation could allow an attacker to execute arbitrary commands as a...
CVE-2026-73701: Improper Control of Generation of Code
An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...
CVE-2026-73753: Improper Neutralization of Special Elements used in an OS Command
Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system...
PT-2026-84469
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authenticated user with low-privileged access can execute arbitrary commands on the underlying operating system by submitting crafted input through the...
PT-2026-84471
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An authenticated low-privileged user can execute arbitrary commands as a privileged user on the underlying operating system through affected command-line...
PT-2026-84444
A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying host to elevate their user privileges to those of a higher role. A successful exploit allows the attacker to change the state of certain settings of the...
PT-2026-84405
An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...
PT-2026-84499
A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...
CVE-2026-19766: Improper Authentication
An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...
CVE-2026-73767: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system...
