2026

A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated d

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX. Successful exploitation o

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication

An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticat

A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input

Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation o

Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with admini

Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerab

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthen

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitr

Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitr

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of th

An authenticated user with low-privileged access could submit crafted input through the web-based management interface t

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenti

Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitra

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Kibana can lead to the unauth

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitatio

Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could a

A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Suc

Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL

Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to ac

An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an authenticat

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated r

A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that co

A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that c

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a

A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploit

Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitati

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbit

A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitati

Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to c

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adja

A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow

Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could a

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain li

An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low priv

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow a

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated a

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could

Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code exec

Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Exploiting Incorrectly Configured Acces

Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute a

Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with ne

Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Pyt

llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of s

llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.

llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a

An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the ims_registrar_pcsc

An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registr