Critical Alert 1 Active Exploit Detected Today

CVE-2026-104286 — Fortinet FortiMail Path Traversal Vulnerability →

Powered by CVE Watchtower

×

HPE Networking

HPE Patches 18 Instant ON Access Point Vulnerabilities, Five Rated Critical HPE Instant ON vulnerabilities in access points, including critical RCE flaws CVE-2026-76721 and CVE-2026-76722

HPE Instant ON vulnerabilities in access points, including critical RCE flaws CVE-2026-76721 and CVE-2026-76722

HPE Patches 18 Instant ON Access Point Vulnerabilities, Five Rated Critical

Do Son September 30, 2026

TL;DR HPE Networking disclosed 18 HPE Instant ON vulnerabilities on September 29, 2026, in its Instant ON...

Critical HPE ALE Vulnerabilities Allow Complete Server Takeover Diagram illustrating critical HPE ALE vulnerabilities and system takeover risks

Diagram illustrating critical HPE ALE vulnerabilities and system takeover risks

Critical HPE ALE Vulnerabilities Allow Complete Server Takeover

Do Son September 23, 2026

TL;DR On September 22, 2026, Hewlett Packard Enterprise addressed 10 flaws in its location analytics platform. These...

CVE-2026-73749: Unauth RCE in HPE Networking AOS-CX Scores 9.8 HPE AOS-CX vulnerability CVE-2026-73749 unauthenticated remote code execution CVSS 9.8 switch advisory diagram

HPE AOS-CX vulnerability CVE-2026-73749 unauthenticated remote code execution CVSS 9.8 switch advisory diagram

CVE-2026-73749: Unauth RCE in HPE Networking AOS-CX Scores 9.8

Do Son September 3, 2026

TL;DR HPE Networking patched 31 vulnerabilities in AOS-CX switch software on September 1, 2026. The most severe...

HPE Aruba Patches High-Severity DoS and Data Leak Flaws in Instant On Devices HPE Aruba Private 5G Vulnerability CVE-2026-23595 HPE Instant On Vulnerability CVE-2025-37166 CVE-2024-31466 & CVE-2024-31467 HPE Aruba Networking, vulnerability

HPE Aruba Private 5G Vulnerability CVE-2026-23595 HPE Instant On Vulnerability CVE-2025-37166 CVE-2024-31466 & CVE-2024-31467 HPE Aruba Networking, vulnerability

HPE Aruba Patches High-Severity DoS and Data Leak Flaws in Instant On Devices

Do Son January 15, 2026

HPE Networking has released a critical software patch for its popular Instant On series of access points...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-100382CVSS 10.0
Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
Admin intel📅 Updated: Oct 1, 2026
CVE-2026-104286CVSS 9.8
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
CISA KEV📅 Added to KEV: Oct 1, 2026
CVE-2026-76504CVSS 9.8
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
CVE-2026-86950CVSS 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
CVE-2026-88772
Memory overflow vulnerability leading to remote code execution or denial of service.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-88771
Remote code execution due to improper input validation that can allow an unauthenticated attacker to execute arbitrary commands.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-65660CVSS 8.8
Improper control of generation of code (\'code injection\') in Microsoft Office SharePoint allows an authorized attacker to execute...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 25, 2026
CVE-2026-5430CVSS 10.0
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
CISA KEV📅 Added to KEV: Sep 24, 2026

CVE-2026-95102CVSS 9.4
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit...
Admin intel📅 Updated: Oct 2, 2026
CVE-2026-104480CVSS 9.4
Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an...
📅 Updated: Oct 2, 2026
CVE-2026-19445CVSS 9.2
A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its...
📅 Updated: Oct 2, 2026
CVE-2026-96658CVSS 9.9
A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution (RCE)...
📅 Updated: Oct 2, 2026
CVE-2026-96659CVSS 9.1
A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause...
📅 Updated: Oct 2, 2026
CVE-2026-86345CVSS 9.0
A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client...
📅 Updated: Oct 2, 2026
CVE-2024-23564CVSS 9.1
HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application...
📅 Updated: Oct 2, 2026
CVE-2026-103764CVSS 9.3
Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read...
📅 Updated: Oct 1, 2026