Search vulnerabilities

Expected end of text, found ':' (at char 29), (line:1, col:30)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,880

CVE-2026-79796

Authentication Bypass Vulnerabilities in ClearPass Policy Manager

Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Hewlett Packard Enterprise (hpe)
Products
Clearpass Policy Manager (cppm)
CVE-2026-105745

Docling: Plugin entry points are imported before the allow_external_plugins check

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.27.0 until 2.131.0, Docling plugin factories in docling/models/factories/base_factory.py call load_setuptools_entrypoints() before applying the allow_external_plugins setting, so every module registered in the Docling entry-point group is imported even when external plugins are disabled. An installed third-party or compromised package can therefore execute import-time code when Docling starts, while the subsequent namespace filter misleadingly reports that the plugin was not loaded. This issue is fixed in 2.131.0.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Docling Docling-project
Products
Docling Docling
CVE-2026-97720

Apache Impala: Impala Executor Webserver Auth Bypass

Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows attacked to access resources served by the executor's webserver when that webserver is configured to accept JWT/OAuth tokens.  Bearer token (JWT) signatures are not validated resulting in the webserver accepting any valid JWT. Users are recommended to either disable JWT/OAuth auth for Impala executors or upgrade to version 4.5.3, which fixes this issue.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Apache
Products
Impala
CVE-2026-79811

Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API

A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to execute arbitrary database commands.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Hewlett Packard Enterprise (hpe)
Products
Clearpass Policy Manager (cppm)
CVE-2026-79809

Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Hewlett Packard Enterprise (hpe)
Products
Clearpass Policy Manager (cppm)
CVE-2026-79807

Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on the local system.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Hewlett Packard Enterprise (hpe)
Products
Clearpass Policy Manager (cppm)
CVE-2026-79806

Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent

A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit allows a malicious user to escalate to root privileges on the affected Linux client.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Hewlett Packard Enterprise (hpe)
Products
Clearpass Policy Manager (cppm)
CVE-2026-79805

Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager

An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Hewlett Packard Enterprise (hpe)
Products
Clearpass Policy Manager (cppm)
CVE-2026-79802

Command Injection Vulnerability in the ClearPass Policy Manager Client Software

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Hewlett Packard Enterprise (hpe)
Products
Clearpass Policy Manager (cppm)
CVE-2026-79800

Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Hewlett Packard Enterprise (hpe)
Products
Clearpass Policy Manager (cppm)
CVE-2026-79799

Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Hewlett Packard Enterprise (hpe)
Products
Clearpass Policy Manager (cppm)
CVE-2026-79798

Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed
Vendors
Hewlett Packard Enterprise (hpe)
Products
Clearpass Policy Manager (cppm)
CVE-2026-79797

Improper Access Control in HPE Networking ClearPass Android Client Application

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to obtain sensitive information from the affected user.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Hewlett Packard Enterprise (hpe)
Products
Clearpass Policy Manager (cppm)
CVE-2026-79794

Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Hewlett Packard Enterprise (hpe)
Products
Clearpass Policy Manager (cppm)
CVE-2026-76753

Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Hewlett Packard Enterprise (hpe)
Products
Clearpass Policy Manager (cppm)
CVE-2026-46438

wger: Cross-User Data Corruption via Missing Ownership Check on WorkoutLog.slot_entry

wger is a free, open-source workout and fitness manager. Prior to version 2.6, an authenticated attacker can inject arbitrary workout log entries into any other user's `SlotEntry` by supplying the victim's `slot_entry` ID in a `POST /api/v2/workoutlog/` request. The `slot_entry` foreign key is not included in the ownership verification performed by `WorkoutLogViewSet.get_owner_objects()`, so the server accepts and persists the cross-user reference without error. Because `SlotEntry.get_config_data()` retrieves associated logs via `self.workoutlog_set.all()` with no user filter, the attacker's injected data is silently folded into the victim's progressive-overload calculations, corrupting their auto-generated weight and repetition targets. Version 2.6 contains a patch.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Wger-project
Products
Wger
CVE-2026-20038

Cisco Nexus 9000 Series Fabric Switches in ACI Mode Policy-Based Redirect Endpoint Group Contract Bypass Vulnerability

A vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an improper control with EPG contracts. An attacker could exploit this vulnerability by sending IPv4 or IPv6 packets using UDP source and destination ports that are assigned to&nbsp;DHCP traffic through an affected device. A successful exploit could allow the attacker to bypass EPG contracts on the affected device.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Cisco
Products
Cisco Nx-os System Software In Aci Mode
CVE-2026-19572

FlexNet Publisher lmadmin SOAP Authentication Bypass Vulnerability

A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session without providing valid credentials.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Flexera
Products
Flexnet Publisher
CVE-2026-19396

Predictable PRNG Seed Enables Unauthenticated Control of ASUS Router Settings

A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and read or modify router settings via observed values from an administrator-initiated IFTTT pairing session.Refer to the ' Security Update for ASUS Router Firmware  ' section on the ASUS Security Advisory for more information.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Asus
Products
Router