Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-82223 medium 6.5 No Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.22 versions. 2026-09-02
CVE-2026-81770 high 7.1 No Unauthenticated Cross Site Scripting (XSS) in Interactive Geo Maps <= 1.6.30 versions. 2026-09-02
CVE-2026-81288 high 7.1 No Unauthenticated Cross Site Scripting (XSS) in Upsell Order Bump Offer for WooCommerce <= 3.1.5 versions. 2026-09-02
CVE-2026-73745 low 3.1 No A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some informatio... 2026-09-02
CVE-2026-73727 medium 6.5 No Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive in... 2026-09-02
CVE-2026-73726 medium 6.8 No A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an una... 2026-09-02
CVE-2026-73725 high 7.0 No A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerabil... 2026-09-02
CVE-2026-73724 high 7.1 No Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticate... 2026-09-02
CVE-2026-73723 high 7.1 No A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation... 2026-09-02
CVE-2026-73722 high 7.2 No Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remot... 2026-09-02
CVE-2026-73721 high 7.2 No Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks a... 2026-09-02
CVE-2026-73720 high 7.2 No Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code ex... 2026-09-02
CVE-2026-73719 high 7.2 No An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an authenticated administrative us... 2026-09-02
CVE-2026-73718 high 7.4 No A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to ac... 2026-09-02
CVE-2026-73708 high 8.3 No A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low... 2026-09-02
CVE-2026-73707 high 8.5 No Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticate... 2026-09-02
CVE-2026-73706 high 8.6 No A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system informa... 2026-09-02
CVE-2026-73705 high 8.8 No An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user... 2026-09-02
CVE-2026-73704 high 8.8 No A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low... 2026-09-02
CVE-2026-73703 high 8.8 No A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to... 2026-09-02