Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (50 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-79864 1 Hpe 1 Aos 2026-10-23 9.6 Critical
No description provided
CVE-2026-79870 1 Hpe 1 Aos 2026-10-23 9.6 Critical
No description provided
CVE-2026-79872 1 Hpe 1 Aos 2026-10-23 9.4 Critical
No description provided
CVE-2026-79873 1 Hpe 1 Aos 2026-10-23 9.3 Critical
No description provided
CVE-2026-79880 1 Hpe 1 Aos 2026-10-23 8.7 High
No description provided
CVE-2026-79881 1 Hpe 1 Aos 2026-10-23 8.5 High
No description provided
CVE-2026-79885 1 Hpe 1 Aos 2026-10-23 8.2 High
No description provided
CVE-2026-79886 1 Hpe 1 Aos 2026-10-23 8.2 High
No description provided
CVE-2026-79887 1 Hpe 1 Aos 2026-10-23 8.1 High
No description provided
CVE-2026-79894 1 Hpe 1 Aos 2026-10-23 7.5 High
No description provided
CVE-2026-95706 1 Hpe 1 Aos 2026-10-23 7.2 High
No description provided
CVE-2026-95710 1 Hpe 1 Aos 2026-10-23 7.1 High
No description provided
CVE-2026-95712 1 Hpe 1 Aos 2026-10-23 7.1 High
No description provided
CVE-2026-73750 2 Hewlett Packard Enterprise (hpe), Hpe 157 Aos-cx, Aruba Cx 10000-48y6c \(r8p13a\), Aruba Cx 10000-48y6c \(r8p14a\) and 154 more 2026-09-15 8.8 High
Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could result in a Denial-of-Service or potential remote code execution with elevated privileges.
CVE-2026-73751 2 Hewlett Packard Enterprise (hpe), Hpe 157 Aos-cx, Aruba Cx 10000-48y6c \(r8p13a\), Aruba Cx 10000-48y6c \(r8p14a\) and 154 more 2026-09-15 8.8 High
An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system.
CVE-2026-73753 2 Hewlett Packard Enterprise (hpe), Hpe 157 Aos-cx, Aruba Cx 10000-48y6c \(r8p13a\), Aruba Cx 10000-48y6c \(r8p14a\) and 154 more 2026-09-10 8.8 High
Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2026-73763 2 Hewlett Packard Enterprise (hpe), Hpe 157 Aos-cx, Aruba Cx 10000-48y6c \(r8p13a\), Aruba Cx 10000-48y6c \(r8p14a\) and 154 more 2026-09-10 7.1 High
A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility.
CVE-2026-73778 2 Hewlett Packard Enterprise (hpe), Hpe 157 Aos-cx, Aruba Cx 10000-48y6c \(r8p13a\), Aruba Cx 10000-48y6c \(r8p14a\) and 154 more 2026-09-10 8.1 High
A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providing a predictable factory-default password. Successful exploitation could result in full administrative control of the affected device during the initial setup process.
CVE-2026-73764 2 Hewlett Packard Enterprise (hpe), Hpe 157 Aos-cx, Aruba Cx 10000-48y6c \(r8p13a\), Aruba Cx 10000-48y6c \(r8p14a\) and 154 more 2026-09-04 7.1 High
Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of affected services.
CVE-2026-73762 2 Hewlett Packard Enterprise (hpe), Hpe 157 Aos-cx, Aruba Cx 10000-48y6c \(r8p13a\), Aruba Cx 10000-48y6c \(r8p14a\) and 154 more 2026-09-04 6.6 Medium
A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to management functionality that should be restricted by the configured access control policy.