TL;DR HPE has patched 46 security flaws in HPE Networking Fabric Composer, also known as AFC. The worst of these HPE Fabric Composer vulnerabilities, CVE-2026-95731, scores 9.8 on CVSS v3.1. It lets an unauthenticated attacker log in with hardcoded credentials and gain admin access. HPE's advisory HPESBNW05172 covers three critical, 20 high, 18 medium and five low-severity bugs. They affect Fabric Composer 7.4.0 and below and 7.3.4 and below.

TL;DR CISA published two advisories on October 15, 2026, covering nine flaws. Six dcm4chee vulnerabilities could expose patient data or wipe medical images, and J4Care has a fix. However, three EseeCloud IP camera flaws, including a CVSS 9.8 hard-coded credentials bug, remain unpatched. Why It Matters dcm4chee-arc-light is an open-source DICOM archive. Hospitals and clinics use it to store and share medical images such as X-rays and scans.

TL;DR CISA published advisory ICSA-26-272-07 on September 29, 2026, covering two flaws in the Viidure dashcam app for Android. The worst, CVE-2026-96587, scores a maximum CVSS 10.0 for hardcoded cloud credentials. Viidure did not respond to CISA, and no fix is available. Why the Viidure Dashcam App Flaws Matter Drivers use the app to view and download footage from their dashcams.