CVE-2026-79887Published
Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)
cve-program ·
Vendor product: ArubaOS (AOS)
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
415849 source statements · aliases may refer to the same vulnerabilityCVE-2026-79888Published
Unauthenticated Buffer Overflow allows Remote Code Execution in web interface
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79889Published
Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-101557Published
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netwo…
cve-program ·
Vendor product: Oracle Purchasing
CVE-2026-91093Published
HP One Agent Software – Security Update
cve-program ·
Vendor product: HP One Agent Software
CVE-2026-79890Published
Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-110447Published
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS c…
cve-program ·
https://apps.nextcloud.com: richdocumentscode
CVE-2026-101854Published
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netw…
cve-program ·
Vendor product: Oracle Product Hub
CVE-2026-101853Published
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netw…
cve-program ·
Vendor product: Oracle Product Hub
CVE-2026-101852Published
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netw…
cve-program ·
Vendor product: Oracle Product Hub
CVE-2026-101656Published
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Mobile Field Service
CVE-2026-101654Published
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Mobile Field Service
CVE-2026-101653Published
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Mobile Field Service
CVE-2026-101664Published
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Mobile Field Service
CVE-2026-101655Published
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Mobile Field Service
CVE-2026-101635Published
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: Oracle Mobile Field Service
CVE-2026-101692Published
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with networ…
cve-program ·
Vendor product: Oracle Mobile Field Service
CVE-2026-79891Published
Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-79892Published
Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-101813Published
Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with networ…
cve-program ·
Vendor product: Oracle Engineering
CVE-2026-101686Published
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileg…
cve-program ·
Vendor product: Oracle E-Business Suite Integrated SOA Gateway
CVE-2026-101685Published
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileg…
cve-program ·
Vendor product: Oracle E-Business Suite Integrated SOA Gateway
CVE-2026-101567Published
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with networ…
cve-program ·
Vendor product: Oracle Cost Management
CVE-2026-79956Published
Improper Sanitization leads to Command Injection in AOS-8 Web Interface
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95704Published
Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-83363Published
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low priv…
cve-program ·
Vendor product: Oracle Contract Lifecycle Management for Public Sector
CVE-2026-95705Published
Authenticated Command Injection Vulnerabilities in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95706Published
Authenticated Command Injection Vulnerabilities in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-115785Published
Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address
cve-program ·
Vendor product: Zimbra Collaboration Suite
CVE-2026-50056Published
Zimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument Injection
cve-program ·
Vendor product: Zimbra Collaboration Suite
CVE-2026-105014Published
Azure Pipelines Remote Code Execution Vulnerability
cve-program ·
Vendor product: Azure Pipelines
CVE-2026-95707Published
Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-108456Published
Azure AI Foundry Elevation of Privilege Vulnerability
cve-program ·
Vendor product: Azure AI Foundry
CVE-2026-95708Published
Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95709Published
Authenticated Command Injection Vulnerabilities in AOS-10
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95711Published
Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-95714Published
Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-96185Published
Microsoft Exchange Online Remote Code Execution Vulnerability
cve-program ·
Vendor product: Microsoft Exchange Online
CVE-2026-79852Published
Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface
cve-program ·
Vendor product: ArubaOS (AOS)
CVE-2026-50057Published
Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted Postfix Sudo Permissions
cve-program ·
Vendor product: Zimbra Collaboration Suite
CVE-2026-93640Published
Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo Configuration
cve-program ·
Vendor product: Zimbra Collaboration Suite
CVE-2026-75775Published
Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted parameters sent to the router while the device is in its factory-def…
cve-program ·
Vendor product: Router
CVE-2026-101809Published
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with netw…
cve-program ·
Vendor product: Workflow
CVE-2026-111497Published
Out-of-Bounds Write in Google Brotli Decoder
cve-program ·
Vendor product: github.com/google/brotli
CVE-2026-101736Published
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core). Supported versions that are affected are 21.12.0-21.12.17. Difficult to exploit vulnerability allows unauthenticated attacker with net…
cve-program ·
Vendor product: Primavera Unifier
CVE-2026-91504Published
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privile…
cve-program ·
Vendor product: Oracle WebCenter Content
CVE-2026-91503Published
Vulnerability in the VPD component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privileg…
cve-program ·
Vendor product: Oracle Database Server
A catalog match establishes published evidence, not applicability to your environment. Check resolved NuGet dependencies or open a Microsoft CVE for fixing KBs, releases and planning.