CVE Database

160723+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-79891
8.1 HIGH

A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the …

Oct 22, 2026
CVE-2026-79890
8.1 HIGH

There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this …

Oct 22, 2026
CVE-2026-79889
8.1 HIGH

Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. …

Oct 22, 2026
CVE-2026-79888
8.1 HIGH

A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could …

Oct 22, 2026
CVE-2026-79887
8.1 HIGH

A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete …

Oct 22, 2026
CVE-2026-79886
8.2 HIGH

An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of …

Oct 22, 2026
CVE-2026-79885
8.2 HIGH

An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to make limited modifications to …

Oct 22, 2026
CVE-2026-79884
8.2 HIGH

A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentication controls and access sensitive information. Successful …

Oct 22, 2026
CVE-2026-79883
8.3 HIGH

A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could …

Oct 22, 2026
CVE-2026-79882
8.3 HIGH

There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker sending …

Oct 22, 2026
CVE-2026-79881
8.3 HIGH

An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could …

Oct 22, 2026
CVE-2026-79880
8.7 HIGH

A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery (SSRF) …

Oct 22, 2026
CVE-2026-79879
8.8 HIGH

Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation could allow an …

Oct 22, 2026
CVE-2026-79878
8.8 HIGH

A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent …

Oct 22, 2026
CVE-2026-79877
8.8 HIGH

A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code on an affected …

Oct 22, 2026
CVE-2026-79876
9.3 CRITICAL

A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could …

Oct 22, 2026
CVE-2026-79875
9.3 CRITICAL

A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful …

Oct 22, 2026
CVE-2026-79874
9.3 CRITICAL

An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to …

Oct 22, 2026
CVE-2026-79873
9.3 CRITICAL

Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an …

Oct 22, 2026
CVE-2026-79872
9.4 CRITICAL

A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. …

Oct 22, 2026
CVE-2026-79871
9.6 CRITICAL

A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could …

Oct 22, 2026
CVE-2026-79870
9.6 CRITICAL

An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow …

Oct 22, 2026
CVE-2026-79869
9.6 CRITICAL

Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an …

Oct 22, 2026
CVE-2026-79868
9.6 CRITICAL

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an …

Oct 22, 2026
CVE-2026-79867
9.6 CRITICAL

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on …

Oct 22, 2026
CVE-2026-79866
9.6 CRITICAL

An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent attacker to read, …

Oct 22, 2026
CVE-2026-79865
9.6 CRITICAL

A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow …

Oct 22, 2026
CVE-2026-79864
9.6 CRITICAL

Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated adjacent attacker to perform command injection. Successful exploitation could allow …

Oct 22, 2026
CVE-2026-79863
9.6 CRITICAL

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted …

Oct 22, 2026
CVE-2026-79862
9.6 CRITICAL

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted …

Oct 22, 2026
CVE-2026-79861
9.8 CRITICAL

There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of …

Oct 22, 2026
CVE-2026-79860
9.8 CRITICAL

Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to …

Oct 22, 2026
CVE-2026-79859
9.8 CRITICAL

Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to …

Oct 22, 2026
CVE-2026-79858
9.8 CRITICAL

An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sensitive …

Oct 22, 2026
CVE-2026-79857
9.8 CRITICAL

There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that could lead to unauthenticated remote code execution …

Oct 22, 2026
CVE-2026-79856
9.8 CRITICAL

A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation …

Oct 22, 2026
CVE-2026-79855
9.8 CRITICAL

An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation allows an attacker …

Oct 22, 2026
CVE-2026-79854
9.8 CRITICAL

A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful exploitation …

Oct 22, 2026
CVE-2026-79853
9.8 CRITICAL

Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affected system. Successful …

Oct 22, 2026
CVE-2026-79852
9.8 CRITICAL

A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Successful …

Oct 22, 2026
CVE-2026-79851
10.0 CRITICAL

Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to …

Oct 22, 2026
CVE-2026-79850
10.0 CRITICAL

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing authentication controls and run arbitrary commands on the underlying …

Oct 22, 2026
CVE-2026-79849
10.0 CRITICAL

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation …

Oct 22, 2026
CVE-2026-79848
10.0 CRITICAL

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation …

Oct 22, 2026
CVE-2026-79847
10.0 CRITICAL

Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. …

Oct 22, 2026
CVE-2026-79846
10.0 CRITICAL

Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host …

Oct 22, 2026
CVE-2026-79844
10.0 CRITICAL

Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain …

Oct 22, 2026
CVE-2026-115519

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security …

Oct 22, 2026
CVE-2026-115517

Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors …

Oct 22, 2026
CVE-2026-115414
7.8 HIGH

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan …

Oct 22, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.