Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.8 HIGH
CVE-2026-79800 — Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Po…

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to e…

Remote | Path Traversal
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
8.8 HIGH
CVE-2026-79799 — Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manag…

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an admin…

Remote | Cross-Site Scripting
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
9.9 CRITICAL
CVE-2026-79798 — Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Managem…

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the…

Remote | Injection
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
8.8 HIGH
CVE-2026-79797 — Improper Access Control in HPE Networking ClearPass Android Client Application

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Suc…

Remote | Authorization
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
9.8 CRITICAL
CVE-2026-79796 — Authentication Bypass Vulnerabilities in ClearPass Policy Manager

Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication contro…

Remote | Authentication
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
9.1 CRITICAL
CVE-2026-79794 — Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Managemen…

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Pol…

Remote | Injection
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
9.8 CRITICAL
CVE-2026-76754 — Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass P…

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Suc…

Remote | Injection
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
9.8 CRITICAL
CVE-2026-76753 — Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploita…

Remote | Memory Corruption
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
9.8 CRITICAL
CVE-2026-76752 — Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Un…

Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote at…

Remote | Authentication
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
9.8 CRITICAL
CVE-2026-76751 — Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Un…

A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary co…

Remote | Authentication
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
9.8 CRITICAL
CVE-2026-76750 — Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web…

Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to exec…

Remote | Injection
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
6.5 MEDIUM
CVE-2026-76749 — Unauthenticated Sensitive Information Disclosure in AOS-S

A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated remote attacker to access sensitive information.

Remote | Information Disclosure
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
8.8 HIGH
CVE-2026-76748 — Authenticated Privilege Escalation Vulnerability in the API of AOS-S

A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileges and gain administrative access to the…

Remote | Authorization
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
9.1 CRITICAL
CVE-2026-76747 — Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory contents and cause a denial…

Remote | Memory Corruption
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
9.3 CRITICAL
CVE-2026-76746 — Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure …

An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of se…

| Memory Corruption
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
9.6 CRITICAL
CVE-2026-76745 — Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Executi…

Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code.

| Memory Corruption
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
9.8 CRITICAL
CVE-2026-76744 — Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code.

Remote | Memory Corruption
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
9.8 CRITICAL
CVE-2026-76743 — Authentication Bypass Vulnerability in the Management Interface of AOS-S

A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain pre…

Remote | Authentication
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
9.8 CRITICAL
CVE-2026-76742 — Authentication Bypass in the Web Management Interface of AOS-S

Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affecte…

Remote | Authentication
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
6.5 MEDIUM
CVE-2026-76741 — Authenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-S

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to cause a denial-of-service condition on the affected s…

Remote | Memory Corruption
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
Showing 20 of 14842 Results