{"vulnerability": "CVE-2026-7378", "sightings": [{"uuid": "01893f69-95e7-46a7-89c1-08c41e86733a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73782", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muigam2zok2i", "content": "\ud83d\udfe0 CVE-2026-73782 - High (8.8)\n\nA format string vulnerability exists in the command line interface of AOS-CX that could lead to u...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73782/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T22:00:49.907681Z"}, {"uuid": "2a2ada02-1dc3-4f68-bd18-733713bdbb46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73780", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muiqunyxbn2m", "content": "CVE-2026-73780 - High CSRF vulnerability in AOS-CX switch web interface allows arbitrary input execution. CVSS 8.3. Restrict web UI access immediately. #CVE #Aruba #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-73780/", "creation_timestamp": "2026-09-02T01:11:00.066746Z"}, {"uuid": "0aaaa749-33c2-4bc0-a603-bbb50ae89582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73780", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117198779791972411", "content": "CVE-2026-73780 - High CSRF vulnerability in AOS-CX switch web interface allows arbitrary input execution. CVSS 8.3. Restrict web UI access immediately. #CVE #Aruba #infosec\nhttps://www.valtersit.com/cve/CVE-2026-73780/", "creation_timestamp": "2026-09-02T01:11:01.033248Z"}, {"uuid": "3ac2be8b-66e4-4635-bf88-f90f42a81779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73782", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muqkgpshxu2j", "content": "\ud83d\udccc CVE-2026-73782 - A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful expl... https://www.cyberhub.blog/cves/CVE-2026-73782", "creation_timestamp": "2026-09-05T03:37:10.297212Z"}, {"uuid": "b88522f5-5a8b-4d0c-99e6-573519a1d545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73781", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muqr5c4iiw2f", "content": "\ud83d\udccc CVE-2026-73781 - A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting ... https://www.cyberhub.blog/cves/CVE-2026-73781", "creation_timestamp": "2026-09-05T05:37:07.255955Z"}, {"uuid": "ca96f5c4-2f07-4e76-a0ed-eb253762e283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73781", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3muqr5cs55m2z", "content": "\ud83d\udccc CVE-2026-73781 - A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting ... https://www.potatohub.blog/cves/CVE-2026-73781", "creation_timestamp": "2026-09-05T05:37:07.886243Z"}, {"uuid": "66d9d891-172d-4dc9-95e6-2a494961cf56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73780", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muqsswyz6f25", "content": "\ud83d\udccc CVE-2026-73780 - A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protecti... https://www.cyberhub.blog/cves/CVE-2026-73780", "creation_timestamp": "2026-09-05T06:07:07.913801Z"}, {"uuid": "aa2af1c8-612d-43c9-8a56-0fe9084a16bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73780", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/aruba-products-multiple-vulnerabilities_20260907", "content": "", "creation_timestamp": "2026-09-07T04:46:09.466193Z"}, {"uuid": "a8725792-844c-4e78-ba06-be48c69044b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73782", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/aruba-products-multiple-vulnerabilities_20260907", "content": "", "creation_timestamp": "2026-09-07T04:46:13.802372Z"}, {"uuid": "f1db293d-83fc-4337-aefe-f64810d0853d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73781", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/aruba-products-multiple-vulnerabilities_20260907", "content": "", "creation_timestamp": "2026-09-07T04:46:11.626936Z"}, {"uuid": "8e4cffe4-3767-4b69-9d64-56049bac96b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73783", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/aruba-products-multiple-vulnerabilities_20260907", "content": "", "creation_timestamp": "2026-09-07T04:46:15.984665Z"}, {"uuid": "ae491402-8c43-44f0-8619-bafcded256cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73786", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4go22pr52v", "content": "\ud83d\udfe0 CVE-2026-73786 - High (7.5)\n\nA vulnerability in the web-based management interface of CPPM could allow an unauthenticated remo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73786/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T21:01:36.225095Z"}, {"uuid": "020b0ffc-e62b-422c-b7ba-850273f1c273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73786", "type": "seen", "source": "https://t.me/GithubRedTeam/101921", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-73786\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a promasu\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 10:11:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMight be used to share PoC and findings regarding CVE-2026-73786 in the future\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T12:00:04.470169Z"}, {"uuid": "d53208b5-6354-4120-9974-49224d589c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73786", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mv6gu7okxp2f", "content": "\ud83d\udd17 CVE : CVE-2026-73769, CVE-2026-73786, CVE-2026-73787, CVE-2026-73788, CVE-2026-73789", "creation_timestamp": "2026-09-10T16:10:21.638835Z"}, {"uuid": "fc9046d1-5c34-47c0-aa0d-d513fb7e6859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73787", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mv6gu7okxp2f", "content": "\ud83d\udd17 CVE : CVE-2026-73769, CVE-2026-73786, CVE-2026-73787, CVE-2026-73788, CVE-2026-73789", "creation_timestamp": "2026-09-10T16:10:21.687166Z"}, {"uuid": "80867807-2238-4a98-8b84-2adce1419d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73788", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mv6gu7okxp2f", "content": "\ud83d\udd17 CVE : CVE-2026-73769, CVE-2026-73786, CVE-2026-73787, CVE-2026-73788, CVE-2026-73789", "creation_timestamp": "2026-09-10T16:10:21.741536Z"}, {"uuid": "29761dc5-66d0-4939-b7a3-356a89d0de5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73789", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mv6gu7okxp2f", "content": "\ud83d\udd17 CVE : CVE-2026-73769, CVE-2026-73786, CVE-2026-73787, CVE-2026-73788, CVE-2026-73789", "creation_timestamp": "2026-09-10T16:10:21.795678Z"}, {"uuid": "e603f744-b07e-4ed6-9fb0-5e7a794f46b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73786", "type": "seen", "source": "Telegram/IahIDovOHUenK705G5amLwAL2bDi62zGVyXyTF_rKtdPZaM", "content": "", "creation_timestamp": "2026-09-10T23:00:04.406658Z"}, {"uuid": "cc387ff7-356c-4b0c-9521-2d4334e3cfce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73786", "type": "published-proof-of-concept", "source": "Telegram/IahIDovOHUenK705G5amLwAL2bDi62zGVyXyTF_rKtdPZaM", "content": "", "creation_timestamp": "2026-09-11T00:00:08.932418Z"}, {"uuid": "584af87d-1dcb-4bd7-883c-6bd7ce5e0047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73786", "type": "seen", "source": "https://t.me/GithubRedTeam/101921", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-73786\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a promasu\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 10:11:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMight be used to share PoC and findings regarding CVE-2026-73786 in the future\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:39.981117Z"}, {"uuid": "cd69af52-995c-4a52-9f1a-880a1cc8e59a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73784", "type": "seen", "source": "https://gist.github.com/ichintu/8790859bbfbdbc3eff56fbadf683426f", "content": "This threat intelligence digest covers critical vulnerabilities, emerging attack techniques, and enterprise security trends:\n\n* **Actively Exploited & High-Severity Vulnerabilities:** Mikrotik RouterOS and PaperCut face active exploitation requiring immediate patching. New CVEs reveal missing brute-force protection in Kingdom Communication intercoms (CVE-2026-89174) and SAML response tampering in HPE IceWall (CVE-2026-73784).\n* **Advanced Attack Techniques:** Threat actors are bypassing MFA using session/OAuth cookie replay and passkey-themed AiTM phishing to compromise Microsoft 365 accounts, often evading Entra ID detection. The Google Play Early Access program poses enterprise risks due to unvetted, potentially malicious apps that bypass public reviews.\n* **Enterprise & AI Shifts:** ServiceNow is transitioning to consumption-based pricing and integrating AI to unify ITSM and security, bolstered by its $7.75B Armis acquisition to fix flawed CMDBs and expand into OT/IoT.\n* **Research & Guidance:** Security researchers recommend parsing AD CS certificate flags bit-by-bit (rather than using static integers) to accurately identify ESC4\u2192ESC1 attack paths. The CSA also formalizes a continuous Zero Trust microsegmentation framework, emphasizing both topology-defined and connection-defined controls to reduce lateral movement and credential theft.\n\n**Bottom Line:** Immediate patching is critical for Mikrotik, PaperCut, Kingdom, and HPE products. Defenses should prioritize phishing-resistant MFA, strict app governance, and a hybrid segmentation model aligned with Zero Trust principles.", "creation_timestamp": "2026-09-11T12:01:56.636818Z"}]}