Export limit exceeded: 367751 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 367751 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 367751 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (367751 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-73723 | 2 Arubanetworks, Hewlett Packard Enterprise (hpe) | 2 Fabric Composer, Fabric Composer | 2026-09-02 | 7.1 High |
| A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorization on the platform. | ||||
| CVE-2026-73724 | 2 Arubanetworks, Hewlett Packard Enterprise (hpe) | 2 Fabric Composer, Fabric Composer | 2026-09-02 | 7.1 High |
| Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system. | ||||
| CVE-2026-73725 | 2 Arubanetworks, Hewlett Packard Enterprise (hpe) | 2 Fabric Composer, Fabric Composer | 2026-09-02 | 7 High |
| A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges, leading to a complete compromise of the affected host. | ||||
| CVE-2026-73726 | 2 Arubanetworks, Hewlett Packard Enterprise (hpe) | 2 Fabric Composer, Fabric Composer | 2026-09-02 | 6.8 Medium |
| A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unauthenticated adjacent actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data. | ||||
| CVE-2026-73727 | 2 Arubanetworks, Hewlett Packard Enterprise (hpe) | 2 Fabric Composer, Fabric Composer | 2026-09-02 | 6.5 Medium |
| Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive information. A successful exploit allows an attacker to access data beyond what is authorized by the user's existing privilege level, which could be used to potentially gain further access to network services supported by HPE Networking Fabric Composer. | ||||
| CVE-2026-73744 | 2 Arubanetworks, Hewlett Packard Enterprise (hpe) | 2 Fabric Composer, Fabric Composer | 2026-09-02 | 3.5 Low |
| A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Successful exploitation could allow an attacker to disrupt the availability of the affected interface. | ||||
| CVE-2026-73746 | 2 Arubanetworks, Hewlett Packard Enterprise (hpe) | 2 Fabric Composer, Fabric Composer | 2026-09-02 | 3.1 Low |
| A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service. | ||||
| CVE-2026-73749 | 1 Hewlett Packard Enterprise (hpe) | 1 Aos-cx | 2026-09-02 | 9.8 Critical |
| Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code execution with elevated privileges. | ||||
| CVE-2026-73750 | 1 Hewlett Packard Enterprise (hpe) | 1 Aos-cx | 2026-09-02 | 8.8 High |
| Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could result in a Denial-of-Service or potential remote code execution with elevated privileges. | ||||
| CVE-2026-73751 | 1 Hewlett Packard Enterprise (hpe) | 1 Aos-cx | 2026-09-02 | 8.8 High |
| An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system. | ||||
| CVE-2026-73752 | 1 Hewlett Packard Enterprise (hpe) | 1 Aos-cx | 2026-09-02 | 8.8 High |
| An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution. | ||||
| CVE-2026-73753 | 1 Hewlett Packard Enterprise (hpe) | 1 Aos-cx | 2026-09-02 | 8.8 High |
| Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system. | ||||
| CVE-2026-73755 | 1 Hewlett Packard Enterprise (hpe) | 1 Aos-cx | 2026-09-02 | 5.7 Medium |
| A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilege operator user, after a required user action, to access sensitive information from the vulnerable system. | ||||
| CVE-2026-73756 | 1 Hewlett Packard Enterprise (hpe) | 1 Aos-cx | 2026-09-02 | 5.9 Medium |
| A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive information via a man-in-the-middle attack. Successful exploitation allows an attacker to retrieve data which could be used to further compromise the confidentiality of the affected system. | ||||
| CVE-2026-73757 | 1 Hewlett Packard Enterprise (hpe) | 1 Aos-cx | 2026-09-02 | 6.4 Medium |
| A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery (SSRF) attack. A successful exploit allows an attacker to enumerate information about the internal structure of the AOS-CX host, leading to potential disclosure and limited modification of sensitive information. | ||||
| CVE-2026-73758 | 1 Hewlett Packard Enterprise (hpe) | 1 Aos-cx | 2026-09-02 | 6.5 Medium |
| A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system. | ||||
| CVE-2026-73760 | 1 Hewlett Packard Enterprise (hpe) | 1 Aos-cx | 2026-09-02 | 6.5 Medium |
| An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to read arbitrary files from the web-based management interface of the underlying operating system, which could lead to remote unauthorized access to files. | ||||
| CVE-2026-73762 | 1 Hewlett Packard Enterprise (hpe) | 1 Aos-cx | 2026-09-02 | 6.6 Medium |
| A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to management functionality that should be restricted by the configured access control policy. | ||||
| CVE-2026-73763 | 1 Hewlett Packard Enterprise (hpe) | 1 Aos-cx | 2026-09-02 | 7.1 High |
| A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility. | ||||
| CVE-2026-73764 | 1 Hewlett Packard Enterprise (hpe) | 1 Aos-cx | 2026-09-02 | 7.1 High |
| Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of affected services. | ||||