HPE Aruba

CVE-2026-63455: EdgeConnect Orchestrator Web Authentication Bypass Rated CVSS 9.8 EdgeConnect Orchestrator authentication bypass flaws CVE-2026-63455 and CVE-2026-63456 rated CVSS 9.8

EdgeConnect Orchestrator authentication bypass flaws CVE-2026-63455 and CVE-2026-63456 rated CVSS 9.8

CVE-2026-63455: EdgeConnect Orchestrator Web Authentication Bypass Rated CVSS 9.8

Do Son August 13, 2026

TL;DR HPE Aruba Networking patched two critical flaws in its SD-WAN EdgeConnect Orchestrator. Both carry a CVSS...

HPE Aruba Patches High-Severity Credential Theft Flaw CVE-2024-26305 _ CVE-2025-23058 Aruba 5G Core Open Redirect

CVE-2024-26305 _ CVE-2025-23058 Aruba 5G Core Open Redirect

HPE Aruba Patches High-Severity Credential Theft Flaw

Do Son April 10, 2026

HPE Aruba Networking has issued an important software update to address a high-severity security flaw in its...

Critical 9.8 CVSS Bypass Unearthed in HPE Aruba AOS-CX Switches CVE-2024-42509 & CVE-2024-47460 HPE Aruba Fabric Composer CVE-2026-23592 Aruba AOS-CX CVE-2026-23813

CVE-2024-42509 & CVE-2024-47460 HPE Aruba Fabric Composer CVE-2026-23592 Aruba AOS-CX CVE-2026-23813

Critical 9.8 CVSS Bypass Unearthed in HPE Aruba AOS-CX Switches

Do Son March 11, 2026

HPE Aruba Networking has officially released software patches for its AOS-CX platform to address a series of...

Hardcoded Credentials & Command Injection Found in HPE Aruba Instant On Access Points HPE Aruba, Critical Vulnerability

HPE Aruba, Critical Vulnerability

Hardcoded Credentials & Command Injection Found in HPE Aruba Instant On Access Points

Do Son July 9, 2025

HPE Aruba Networking has issued a critical security advisory for its Instant On Access Points, urging users...

HPE Aruba Networking Patches Sensitive Data Exposure Vulnerability in Private 5G Core Platform HPE Aruba, 5G Security

HPE Aruba, 5G Security

HPE Aruba Networking Patches Sensitive Data Exposure Vulnerability in Private 5G Core Platform

Do Son June 11, 2025

HPE Aruba Networking has released a security update addressing a high-severity vulnerability in its Private 5G Core...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-59309CVSS 9.8
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to...
Admin intel📅 Updated: Aug 15, 2026
CVE-2026-65400CVSS 9.8
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS...
Admin intel📅 Updated: Aug 15, 2026
CVE-2026-15826CVSS 9.8
The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up...
Admin intel📅 Updated: Aug 15, 2026
CVE-2026-72898CVSS 10.0
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator...
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-20349CVSS 8.6
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-68820CVSS 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-63077CVSS 9.8
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
CISA KEV📅 Added to KEV: Aug 5, 2026
CVE-2026-34486CVSS 7.5
Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of...
CISA KEV📅 Added to KEV: Aug 4, 2026