CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 17/02/2026 |
| CVE-2026-23597 | MEDIUM6.5 | Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well as to gain insight in | 17/02/2026 |
| CVE-2026-23596 | MEDIUM6.5 | A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability. | 17/02/2026 |
| CVE-2026-23595 | HIGH8.8 | An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or m | 17/02/2026 |
| CVE-2025-37164KEV | CRITICAL9.8 | A remote code execution issue exists in HPE OneView. | 16/12/2025 |
| CVE-2025-37107 | CRITICAL9.8 | An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18. | 16/07/2025 |
| CVE-2025-37106 | CRITICAL9.8 | An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18. | 16/07/2025 |
| CVE-2025-37105 | CRITICAL9.8 | An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18. | 16/07/2025 |
| CVE-2024-51770 | HIGH7.5 | An information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17. | 14/07/2025 |
| CVE-2024-51769 | HIGH7.5 | An information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17. | 14/07/2025 |
| CVE-2024-51768 | HIGH8.0 | An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17. | 14/07/2025 |
| CVE-2024-51767 | HIGH7.3 | An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17. | 14/07/2025 |
| CVE-2025-37099 | CRITICAL9.8 | A remote code execution vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646. | 01/07/2025 |
| CVE-2025-37098 | HIGH7.5 | A path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646. | 01/07/2025 |
| CVE-2025-37097 | HIGH7.5 | A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service | 01/07/2025 |
| CVE-2025-37096 | CRITICAL9.8 | A command injection remote code execution vulnerability exists in HPE StoreOnce Software. | 02/06/2025 |
| CVE-2025-37095 | CRITICAL9.8 | A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software. | 02/06/2025 |
| CVE-2025-37094 | CRITICAL9.1 | A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software. | 02/06/2025 |