/
attack_type:authentication_bypass × latest_source_host:gbhackers.com × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · critical

HPE patches 72 Aruba AOS-8/AOS-10 flaws, including CVE-2026-79855 SSH authentication bypass (CVSS 9.8) and CVSS 10 unauthenticated RCE

Hewlett Packard Enterprise (HPE) released security bulletin HPESBNW05162 on October 22, 2026, covering 72 vulnerabilities in Aruba AOS-8 and AOS-10. The most prominent is CVE-2026-79855, a CVSS 9.8 authentication bypass in the SSH daemon that lets a remote, unauthenticated attacker obtain administrative privileges and fully compromise a h…

CVE-2026-79855 CVE-2026-79860
gbhackers.com · critical

WP2Shell: CVE-2026-63030 and CVE-2026-60137 chained for unauthenticated RCE on default WordPress, exploitation observed

Researchers describe WP2Shell, a chain of two WordPress core flaws, CVE-2026-63030 and CVE-2026-60137, that lets unauthenticated attackers progress from public REST API endpoints to remote code execution. It affects default installations with no third-party plugin required. Public exploit code exists and exploitation attempts have been ob…

CVE-2026-63030 CVE-2026-60137