moonv
16 credited records · 16 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
17Monitor | CVE-2026-71172No exploit | Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery (SSRF) vulnerability.dell · cloud disaster recovery · CWE-918 | Medium4.3 | — | 0.2% | Aug 26, 2026 |
28Monitor | CVE-2026-44879No exploit | Authenticated Command Injection allows arbitrary command execution in CLI Interfacehewlett packard enterprise (hpe) · edgeconnect sd-wan gateway (ecos) · CWE-77 | High7.2 | — | 1.4% | Jul 21, 2026 |
28Monitor | CVE-2026-44878No exploit | Authenticated Path Traversal allows Unauthorized Access in Web Interfacehewlett packard enterprise (hpe) · edgeconnect sd-wan gateway (ecos) · CWE-377 | High7.2 | — | 0.5% | Jul 21, 2026 |
28Monitor | CVE-2026-63454No exploit | Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CXhpe · arubaos-cx · CWE-22 | High7.2 | — | 0.8% | Jul 21, 2026 |
35Monitor | CVE-2026-44880No exploit | Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CXhpe · arubaos-cx · CWE-120 | High8.8 | — | 0.7% | Jul 21, 2026 |
35Monitor | CVE-2026-44866No exploit | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10arubanetworks · arubaos · CWE-77 | High8.8 | — | 0.8% | May 12, 2026 |
28Monitor | CVE-2026-44865No exploit | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10arubanetworks · arubaos · CWE-77 | High7.2 | — | 0.9% | May 12, 2026 |
28Monitor | CVE-2026-23821No exploit | Inconsistent input filtering allows Authenticated Command Injection in AOS-10 CLIarubanetworks · arubaos · CWE-78 | High7.2 | — | 0.6% | May 12, 2026 |
28Monitor | CVE-2026-23820No exploit | Inconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and AOS-10 CLIarubanetworks · arubaos · CWE-78 | High7.2 | — | 0.5% | May 12, 2026 |
35Monitor | CVE-2026-23816No exploit | Authenticated Command Injection found in admin AOS-CX CLI commandhpe · arubaos-cx · CWE-78 | High8.8 | — | 1.2% | Mar 11, 2026 |
28Monitor | CVE-2026-23815No exploit | Authenticated Command Injection found in AOS-CX Administrative CLI Commandhpe · arubaos-cx · CWE-77 | High7.2 | — | 0.9% | Mar 11, 2026 |
39Monitor | CVE-2026-23813Proof of concept | Authentication Bypass in Web Interface allows Unauthenticated Admin Password Resethpe · arubaos-cx · CWE-287 | Critical9.8 | — | 0.7% | Mar 11, 2026 |
28Monitor | CVE-2025-37183No exploit | Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interfacearubanetworks · edgeconnect sd-wan orchestrator · CWE-89 | High7.2 | — | 0.4% | Jan 14, 2026 |
28Monitor | CVE-2025-37182No exploit | Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interfacearubanetworks · edgeconnect sd-wan orchestrator · CWE-89 | High7.2 | — | 0.4% | Jan 14, 2026 |
28Monitor | CVE-2025-37181No exploit | Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interfacearubanetworks · edgeconnect sd-wan orchestrator · CWE-89 | High7.2 | — | 0.4% | Jan 14, 2026 |
28Monitor | CVE-2025-37173No exploit | Improper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI)arubanetworks · arubaos · CWE-20 | High7.2 | — | 0.4% | Jan 13, 2026 |
- CVE-2026-7117217Monitor
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery (SSRF) vulnerability.
MediumCVSS 4.3No exploitEPSS 0%dell · cloud disaster recoveryAug 26, 2026
- CVE-2026-4487928Monitor
Authenticated Command Injection allows arbitrary command execution in CLI Interface
HighCVSS 7.2No exploitEPSS 1%hewlett packard enterprise (hpe) · edgeconnect sd-wan gateway (ecos)Jul 21, 2026
- CVE-2026-4487828Monitor
Authenticated Path Traversal allows Unauthorized Access in Web Interface
HighCVSS 7.2No exploitEPSS 0%hewlett packard enterprise (hpe) · edgeconnect sd-wan gateway (ecos)Jul 21, 2026
- CVE-2026-6345428Monitor
Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX
HighCVSS 7.2No exploitEPSS 0%hpe · arubaos-cxJul 21, 2026
- CVE-2026-4488035Monitor
Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
HighCVSS 8.8No exploitEPSS 0%hpe · arubaos-cxJul 21, 2026
- CVE-2026-4486635Monitor
Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
HighCVSS 8.8No exploitEPSS 0%arubanetworks · arubaosMay 12, 2026
- CVE-2026-4486528Monitor
Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
HighCVSS 7.2No exploitEPSS 0%arubanetworks · arubaosMay 12, 2026
- CVE-2026-2382128Monitor
Inconsistent input filtering allows Authenticated Command Injection in AOS-10 CLI
HighCVSS 7.2No exploitEPSS 0%arubanetworks · arubaosMay 12, 2026
- CVE-2026-2382028Monitor
Inconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and AOS-10 CLI
HighCVSS 7.2No exploitEPSS 0%arubanetworks · arubaosMay 12, 2026
- CVE-2026-2381635Monitor
Authenticated Command Injection found in admin AOS-CX CLI command
HighCVSS 8.8No exploitEPSS 1%hpe · arubaos-cxMar 11, 2026
- CVE-2026-2381528Monitor
Authenticated Command Injection found in AOS-CX Administrative CLI Command
HighCVSS 7.2No exploitEPSS 0%hpe · arubaos-cxMar 11, 2026
- CVE-2026-2381339Monitor
Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset
CriticalCVSS 9.8Proof of conceptEPSS 0%hpe · arubaos-cxMar 11, 2026
- CVE-2025-3718328Monitor
Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
HighCVSS 7.2No exploitEPSS 0%arubanetworks · edgeconnect sd-wan orchestratorJan 14, 2026
- CVE-2025-3718228Monitor
Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
HighCVSS 7.2No exploitEPSS 0%arubanetworks · edgeconnect sd-wan orchestratorJan 14, 2026
- CVE-2025-3718128Monitor
Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
HighCVSS 7.2No exploitEPSS 0%arubanetworks · edgeconnect sd-wan orchestratorJan 14, 2026
- CVE-2025-3717328Monitor
Improper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI)
HighCVSS 7.2No exploitEPSS 0%arubanetworks · arubaosJan 13, 2026