Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Found 129,770 fresh security advisories
Page 193 of 5,408

A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code on an affected device. Successful exploita...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79876 CRITICAL 9.3

A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79875 CRITICAL 9.3

A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitat...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79874 CRITICAL 9.3

An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain admini...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79873 CRITICAL 9.3

Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allo...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79872 CRITICAL 9.4

A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79871 CRITICAL 9.6

A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could a...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79870 CRITICAL 9.6

An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allo...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79869 CRITICAL 9.6

Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79868 CRITICAL 9.6

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could ...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79867 CRITICAL 9.6

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on t...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79866 CRITICAL 9.6

An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent attacker to read, modify, an...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79865 CRITICAL 9.6

A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow an attacker...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79864 CRITICAL 9.6

Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated adjacent attacker to perform command injection. Successful exploitation could allow an a...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79863 CRITICAL 9.6

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affecte...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79862 CRITICAL 9.6

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affecte...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79861 CRITICAL 9.8

There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability r...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79860 CRITICAL 9.8

Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's acce...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79859 CRITICAL 9.8

Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary ...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79858 CRITICAL 9.8

An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sensitive information i...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79853 CRITICAL 9.8

Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affected system. Successful...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79846 CRITICAL 10.0

Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions...

📅 2026-10-22 Inspect Dossier →

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cro...

📅 2026-10-22 Inspect Dossier →

Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in different execution ...

📅 2026-10-22 Inspect Dossier →
Showing Page 193 of 5,408 • 129,770 newly disclosed advisories