CVE-2026-73462

CVE-2026-73462 affects the IGMP snooping agent in Arista EOS . An adjacent, unauthenticated attacker can send malformed packets to trigger an out-of-bounds read (CWE-125) , crashing the agent and causing multicast traffic to flood all ports on the affected VLAN. Repeated exploitation may lead to ...

CVE-2026-92473

A use-after-free vulnerability was identified in the GPAC multimedia framework (version 26.08-DEV), specifically in the function gf_sg_command_del within src/scenegraph/commands.c , part of the BIFS Handler component. An attacker with local access can trigger the flaw, resulting in a low availabi...

CVE-2026-73457

CVE-2026-73457 affects Arista EOS platforms with the gRPC Network Packet Sampling Interface (gNPSI) enabled. When the EosRpcAuth trace facility is explicitly activated on the Gnpsi agent, client credentials (username and password) are written in clear text to local or remote accounting logs, acce...

CVE-2026-91106

HP has identified and remediated multiple externally reported vulnerabilities in HP Linux Imaging and Printing (HPLIP) software. The findings affect several software components and could potentially enable remote code execution , privilege escalation , denial of service , information disclosure ,...

CVE-2026-73456

Arista EOS platforms with the gNPSI (gRPC Network Packet Sampling Interface) enabled are vulnerable to unauthenticated arbitrary code execution via crafted gNPSI requests (CWE-94, code injection), granting full administrative control of the switch. CVSS 3.1 score: 10.0 . Exploitation requires gNP...

CVE-2026-91105

The HP Linux Imaging and Printing (HPLIP) software contains multiple vulnerabilities in several software components. These flaws could potentially allow a remote attacker to achieve remote code execution , privilege escalation , denial of service , information disclosure , or unauthorized file mo...

CVE-2026-91104

HP has remediated multiple externally reported vulnerabilities in HPLIP (HP Linux Imaging and Printing) , a software suite for Linux printing. The findings affect several software components and could potentially enable remote code execution, privilege escalation, denial of service, information d...

CVE-2026-91103

The HPLIP (HP Linux Imaging and Printing) software suite is affected by multiple vulnerabilities that could enable remote code execution , privilege escalation , denial of service , information disclosure , or unauthorized file modification . Technical analysis identifies the underlying cause as ...

CVE-2026-86043

Skipper (an HTTP router and reverse proxy) has a vulnerability in the opaAuthorizeRequestWithBody filter prior to version 0.27.37 . The truncated_body signal is derived from the Content-Length header rather than the actual read result. When a body is truncated at maxBodyBytes, the header is not u...

CVE-2026-91102

The HP Linux Imaging and Printing (HPLIP) software is affected by multiple vulnerabilities, including CVE-2026-91102 , which involves a Download Without Integrity Check (CWE-78 / CWE-494). Specifically, the HPLIP Printer Application (PAPPL-based web interface) allows attackers to download and exe...

CVE-2026-73442

CVE-2026-73442 affects Arista EOS switches with VRRP configured (any version; authentication not required). The root cause is CWE-532 : peer device VRRP authentication credentials are written in cleartext to agent trace logs on the switch. An authenticated user with sufficient privileges (or a sy...

CVE-2026-91101

The HP Linux Imaging and Printing (HPLIP) software contains multiple vulnerabilities in several components. These flaws could allow a remote attacker to achieve remote code execution , privilege escalation , denial of service , information disclosure , or unauthorized file modification under cert...

CVE-2026-81876

HAPI FHIR (a Java implementation of the HL7 FHIR healthcare standard) is vulnerable to a denial of service in versions prior to 6.9.12 . The flaw is in SHCParser , where processing a Smart Health Card JWT with a zip: "DEF" header and an empty or truncated raw-DEFLATE payload causes Inflater.infla...

CVE-2026-91100

The HP Linux Imaging and Printing (HPLIP) software contains multiple vulnerabilities across several components. These flaws could potentially allow a remote attacker to achieve remote code execution , privilege escalation , denial of service , information disclosure , or unauthorized file modific...

CVE-2026-73443

Arista EOS is vulnerable to a VRRPv2 IP-AH authentication capture-replay attack (CWE-294). An unauthenticated attacker on the same layer 2 segment can replay a legitimate authenticated VRRP advertisement to advertise stale state, preventing a backup router from assuming the virtual gateway role a...

CVE-2026-91099

Several vulnerabilities exist within the HP Linux Imaging and Printing (HPLIP) software across multiple components. These flaws could potentially allow a local attacker to achieve local code execution , escalate privileges, cause a denial of service (DoS) , disclose sensitive information, or perf...

CVE-2026-92472

A use-after-free vulnerability in GPAC 26.08-DEV , specifically in the function gf_node_deactivate_ex within src/scenegraph/base_scenegraph.c of the MP4Box component, can be triggered locally to impact availability (low impact, no confidentiality or integrity loss). A proof-of-concept exploit has...

CVE-2026-81875

HAPI FHIR (a Java HL7 FHIR interoperability library) is vulnerable to a denial-of-service via its SHCParser component. When processing attacker-controlled Smart Health Card JWTs containing a zip: "DEF" header with a small raw-DEFLATE payload, the inflate() and decompress() methods accumulate deco...

CVE-2026-91098

HP has identified and remediated multiple vulnerabilities within the HPLIP (HP Linux Imaging and Printing) software. These flaws affect several components and could potentially allow a remote attacker to achieve remote code execution , privilege escalation , denial of service , information disclo...

CVE-2026-77360

oRPC is a tool for building type-safe APIs adhering to OpenAPI standards. Prior to 1.14.8 , the @orpc/server CORS plugin (packages/server/src/plugins/cors.ts) copies a client's incoming Vary request header into the response instead of controlling Vary as a response-only header and using Origin fo...