CVEs published in September 2026
1,795 tracked CVEs from 27 vendors had their first vendor advisory published in September 2026: 291 critical, 1,082 high, 17 in CISA KEV. Newest first.
2,453 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-73781High
AOS-CX: vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface
Aruba · 1 advisory - Added
CVE-2026-73780High
AOS-CX: vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection
Aruba · 1 advisory - Added
CVE-2026-73779High
AOS-CX: Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls
Aruba · 1 advisory - Added
CVE-2026-73778High
Credential Manager Vulnerability Allows Unauthorized Administrative Access
Aruba · 1 advisory - Added
CVE-2026-73777High
AOS-CX: Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls
Aruba · 1 advisory - Added
CVE-2026-73776High
AOS-CX: signature verification bypass vulnerability exists in the command line interface of AOS-CX
Aruba · 1 advisory - Added
CVE-2026-73775High
AOS-CX: Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information
Aruba · 1 advisory - Added
CVE-2026-73774High
AOS-CX: buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the affected system
Aruba · 1 advisory - Added
CVE-2026-73773High
AOS-CX: unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX
Aruba · 1 advisory - Added
CVE-2026-73772Medium
AOS-CX: Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition by sending specially crafted packets to the affected device
Aruba · 1 advisory - Added
CVE-2026-73771High
AOS-CX: authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing
Aruba · 1 advisory - Added
CVE-2026-73770High
AOS-CX: authenticated arbitrary file write vulnerability exists in AOS-CX
Aruba · 1 advisory - Added
CVE-2026-73768High
AOS-CX: vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input
Aruba · 1 advisory - Added
CVE-2026-73767High
AOS-CX: Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX
Aruba · 1 advisory - Added
CVE-2026-73766High
AOS-CX: Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject arbitrary commands
Aruba · 1 advisory - Added
CVE-2026-73765High
AOS-CX: Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX
Aruba · 1 advisory - Added
CVE-2026-73764High
AOS-CX: Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls
Aruba · 1 advisory - Added
CVE-2026-73763High
Unauthenticated Remote Command Execution in Management Component
Aruba · 1 advisory - Added
CVE-2026-73762Medium
AOS-CX: vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls
Aruba · 1 advisory - Added
CVE-2026-73761Medium
AOS-CX: out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information disclosure by sending a specially crafted packet
Aruba · 1 advisory - Added
CVE-2026-73760Medium
AOS-CX: authenticated Path Traversal vulnerability exists in AOS-CX
Aruba · 1 advisory - Added
CVE-2026-73759Medium
AOS-CX: Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets
Aruba · 1 advisory - Added
CVE-2026-73758Medium
AOS-CX: privilege escalation vulnerability exists in the API endpoint of AOS-CX
Aruba · 1 advisory - Added
CVE-2026-73757Medium
AOS-CX: vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery (SSRF) attack
Aruba · 1 advisory - Added
CVE-2026-73756Medium
AOS-CX: vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive information via a man-in-the-middle attack
Aruba · 1 advisory - Added
CVE-2026-73755Medium
AOS-CX: privilege escalation vulnerability exists in the API endpoint of AOS-CX
Aruba · 1 advisory - Added
CVE-2026-73754Medium
AOS-CX: Denial-of-service vulnerabilities exist in the command line interface of AOS-CX
Aruba · 1 advisory - Added
CVE-2026-73753High
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
Aruba · 1 advisory - Added
CVE-2026-73752High
AOS-CX: unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX
Aruba · 1 advisory - Added
CVE-2026-73751High
Authenticated Remote Command Injection in AOS-CX Web-based Management Interface
Aruba · 1 advisory - Added
CVE-2026-73750High
Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution
Aruba · 1 advisory - Added
CVE-2026-73749Critical
AOS-CX: Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input
Aruba · 1 advisory - Added
CVE-2026-76658Critical
Fabric Composer: vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts
Aruba · 1 advisory - Added
CVE-2026-76657Critical
Fabric Composer: Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls
Aruba · 1 advisory - Added
Fabric Composer: vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access sensitive information in a cleartext format
Aruba · 1 advisory - Added
Fabric Composer: local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer
Aruba · 1 advisory - Added
Fabric Composer: denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service
Aruba · 1 advisory - Added
Fabric Composer: denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service
Aruba · 1 advisory - Added
Fabric Composer: vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to gain insight into some data handled by the affected interface
Aruba · 1 advisory - Added
CVE-2026-73742Medium
Fabric Composer: vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests
Aruba · 1 advisory - Added
CVE-2026-73741Medium
Fabric Composer: vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system files
Aruba · 1 advisory - Added
CVE-2026-73740Medium
Fabric Composer: local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying host to elevate their user privileges to those of a higher role
Aruba · 1 advisory - Added
CVE-2026-73739Medium
Fabric Composer: vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administrative privileges to access sensitive information in a cleartext format
Aruba · 1 advisory - Added
CVE-2026-73738Medium
Fabric Composer: vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to view sensitive information
Aruba · 1 advisory - Added
CVE-2026-73737Medium
Fabric Composer: unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73736Medium
Fabric Composer: vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files
Aruba · 1 advisory - Added
CVE-2026-73735Medium
Fabric Composer: Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access some information beyond their privilege level
Aruba · 1 advisory - Added
CVE-2026-73734Medium
Fabric Composer: vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to redirect users to an arbitrary URL
Aruba · 1 advisory - Added
CVE-2026-73733Medium
Fabric Composer: Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to circumvent existing authentication controls
Aruba · 1 advisory - Added
CVE-2026-73732Medium
Fabric Composer: vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to obtain sensitive information
Aruba · 1 advisory - Added
CVE-2026-73731Medium
Fabric Composer: vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface
Aruba · 1 advisory - Added
CVE-2026-73730Medium
Fabric Composer: privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73729Medium
Fabric Composer: vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to upstream AFC dependencies to view sensitive information
Aruba · 1 advisory - Added
CVE-2026-73728Medium
Fabric Composer: Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service
Aruba · 1 advisory - Added
CVE-2026-73727Medium
Fabric Composer: Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive information
Aruba · 1 advisory - Added
CVE-2026-73726Medium
Fabric Composer: vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unauthenticated adjacent actor to circumvent existing authentication controls
Aruba · 1 advisory - Added
CVE-2026-73725High
Fabric Composer: local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73724High
Fabric Composer: Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73723High
Fabric Composer: privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73722High
Fabric Composer: Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system
Aruba · 1 advisory - Added
CVE-2026-73721High
Fabric Composer: Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE Networking Fabric Composer instance
Aruba · 1 advisory - Added
CVE-2026-73720High
Fabric Composer: Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution
Aruba · 1 advisory - Added
CVE-2026-73719High
Authenticated Arbitrary File Write Vulnerability leads to Remote Code Execution in HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73718High
Unauthenticated Information Disclosure in Web Interface allows Sensitive Data Exposure in HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73717High
Unauthenticated Command Injection Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface
Aruba · 1 advisory - Added
CVE-2026-73716High
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73715High
Unauthenticated Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73714High
Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API
Aruba · 1 advisory - Added
CVE-2026-73713High
Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73712High
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer API
Aruba · 1 advisory - Added
CVE-2026-73711High
Unauthenticated Privilege Escalation allows Administrative Access in HPE Networking Fabric Composer API
Aruba · 1 advisory - Added
CVE-2026-73710High
Unauthenticated Denial of Service Vulnerabilities in API Endpoint of HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73709High
Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Process
Aruba · 1 advisory - Added
CVE-2026-73708High
Fault in Business Logic allows Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73707High
Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API
Aruba · 1 advisory - Added
CVE-2026-73706High
Authentication Bypass in the API of HPE Networking Fabric Composer allows Data Exposure and Unauthorized Changes
Aruba · 1 advisory - Added
CVE-2026-73705High
Authenticated Arbitrary File Write leads to Remote Code Execution in HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73704High
Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API
Aruba · 1 advisory - Added
CVE-2026-73703High
Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface
Aruba · 1 advisory - Added
Fabric Composer: vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some information handled by the affected system
Aruba · 1 advisory - Added
CVE-2026-73702High
Authenticated Privilege Escalation Vulnerability in the API of HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73701Critical
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-73700Critical
Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface
Aruba · 1 advisory - Added
CVE-2026-19766Critical
Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer
Aruba · 1 advisory - Added
CVE-2026-77103High
CommServe Information Disclosure
Commvault · 1 advisory - Added
CVE-2026-77091High
DataCube Security Feature Bypass
Commvault · 1 advisory - Added
CVE-2026-77089Critical
Command Center API Authentication Bypass
Commvault · 1 advisory - Added
CVE-2026-77106High
Cvlaunchd Code Execution
Commvault · 1 advisory - Added
CVE-2026-77105High
CommServe Privilege Escalation
Commvault · 1 advisory - Added
CVE-2026-77104High
CommServe Path Traversal
Commvault · 1 advisory - Added
CVE-2026-77102High
CommServe Denial of Service
Commvault · 1 advisory - Added
CVE-2026-77101High
CommServe Stack-based Buffer Overflow
Commvault · 1 advisory - Added
CVE-2026-77098High
Private Metrics Server SQL Injection
Commvault · 1 advisory - Added
CVE-2026-77097High
Private Metrics Server Denial of Service
Commvault · 1 advisory - Added
CVE-2026-77092High
Content Extractor Privilege Escalation
Commvault · 1 advisory