Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Found 130,243 fresh security advisories
Page 212 of 5,427

Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to ex...

📅 2026-10-22 Inspect Dossier →

A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafte...

📅 2026-10-22 Inspect Dossier →

A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code on an affected device. Successful exploita...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79876 CRITICAL 9.3

A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79875 CRITICAL 9.3

A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitat...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79874 CRITICAL 9.3

An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain admini...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79873 CRITICAL 9.3

Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allo...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79872 CRITICAL 9.4

A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79871 CRITICAL 9.6

A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could a...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79870 CRITICAL 9.6

An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allo...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79869 CRITICAL 9.6

Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79868 CRITICAL 9.6

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could ...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79867 CRITICAL 9.6

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on t...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79866 CRITICAL 9.6

An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent attacker to read, modify, an...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79865 CRITICAL 9.6

A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow an attacker...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79864 CRITICAL 9.6

Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated adjacent attacker to perform command injection. Successful exploitation could allow an a...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79863 CRITICAL 9.6

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affecte...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79862 CRITICAL 9.6

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affecte...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79861 CRITICAL 9.8

There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability r...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79860 CRITICAL 9.8

Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's acce...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79859 CRITICAL 9.8

Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary ...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79858 CRITICAL 9.8

An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sensitive information i...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79853 CRITICAL 9.8

Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affected system. Successful...

📅 2026-10-22 Inspect Dossier →
CVE-2026-79846 CRITICAL 10.0

Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions...

📅 2026-10-22 Inspect Dossier →
Showing Page 212 of 5,427 • 130,243 newly disclosed advisories