NVD disclosure day

Published threat advisories for March 2, 2026

CVE advisoryKnown Exploit

CVE-2026-21385

Qualcomm chipsets could allow an external attacker to gain full device control.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

An external attacker could use a security flaw in Qualcomm chipsets to gain persistent, full control over a device. This could lead to unauthorized access to sensitive information and total compromise of the affected system.

• CISA KEV

CVE advisoryCRITICAL

CVE-2026-23600

HPE AutoPass License Server Remote Authentication Bypass

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A remote authentication bypass vulnerability exists in HPE AutoPass License Server, potentially allowing unauthorized access to its functions. This could impact license management services if the technology is in use and reachable. It is important to confirm its presence and assess potential exposure.