CVE-2026-20152

Cisco Secure Web Appliance (AsyncOS) authentication service is affected by CVE-2026-20152. The issue stems from improper validation of user-supplied authentication input in HTTP requests, allowing an unauthenticated, remote attacker to bypass authentication policy requirements. According to the p...

The vulnerability in the web interface of the Cisco AsyncOS operating system for Cisco Web Security Appliance allows a perpetrator to execute arbitrary commands or escalate their privileges.

The vulnerability in the Cisco AsyncOS operating system’s web interface of the Cisco Web Security Appliance lies in the lack of authentication for XML data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or gain increased privileges...

Threat Outbreak Alert RuleID22359: Email Messages Distributing Malicious Software on April 22, 2016

Medium Alert ID: 44808 First Published: 2016 April 25 13:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22359 may contain the following files: Name | Si...

CVE-2015-6290

Cisco Web Security Appliance WSA 8.0.7 allows remote HTTP servers to cause a denial of service memory consumption from stale TCP connections via crafted responses, aka Bug ID CSCuw10426...