CVE-2026-76454 Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This...

EUVD-2026-94524

A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This...

CVE-2026-20321

A vulnerability exists in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) . Due to insufficient input validation of user-controlled command arguments, an authenticated remote attacker with valid administrative credentials can send crafted input to the AP...

CVE-2026-107206 LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...

CVE-2021-45232-RCE

Apache APISIX 대시보드 RCE usage: -h -u URL -p PORT -c CMD optional arguments: -h, --help show this help message and exit -u URL, --url URL target url e.g: http://127.0.0.1:9000 -p PORT, --port PORT apisix management port default: 9080 -c CMD, --cmd CMD command default: ifconfig 참고...

Amazon rabbitmq-aws 0.1.0 through 0.2.0 - Arbitrary File Read

Amazon rabbitmq-aws versions 0.1.0 through 0.2.0 contain active debug code in the ARN resolver. An authenticated RabbitMQ user with management API access can submit an arn:aws-debug:file ARN to the validation endpoint and read arbitrary files accessible to the RabbitMQ process. id: CVE-2026-9133...

UniFi Access - Broken Access Control

UniFi Access Application 3.3.22 through 3.4.31 contains a broken authentication caused by misconfiguration exposing management API without proper authentication, letting attackers on management network access management functions, exploit requires network access. id: CVE-2025-52665 info: name:...

Check-Point-Trusted-Access-Review

Check Point Trusted Access Review ベンダーのパッチは可能な限り迅速に適用してください。 信頼できるCheck Point Management APIコマンドを使用してCheck Point Trusted Access Reviewを実施するためのローカルWebアプリケーションです。ほとんどのチェックは確認のみです。利用可能な修復アクションには、明示的なオペレーターの承認が必要です。 このスキャナーは、CVE-2026-16232...

CVE-2025-54914-PoC

CVE-2025-54914 Azure 경로 익스플로잇 개요 이것은 CVE-2025-54914 Azure Networking 경로 익스플로잇의 개선된 구현입니다. 이 버전은 핵심 CVE 기능을 유지하면서 지속성, 회피, 다중 대상 스캐닝 및 오류 처리와 같은 추가 기능을 제공합니다. 기능 핵심 CVE 기능 경로 생성 : Azure 가상 네트워크에 악성 경로를 생성합니다. 경로 삭제 : 생성된 경로를 정리하기 위해 제거합니다. API 호환성 : Azure Management API 2025-09-01과 함께 작동합니다. 인증 :...

Command Injection in Security Certificate Management Subsystem

: An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution...

CheckPoint-CVE-Webscanner

CP VPN CVE 스캐너 Check Point CVE-2026-50751, CVE-2026-50752, CVE-2026-85102, CVE-2026-85103과 관련된 구성 마커를 스캔하고, Check Point Management API 명령을 통해 선택된 완화 조치를 적용하기 위한 승인 기반 로컬 웹앱입니다. 이 도구는 Check Point에서 만들거나 지원하지 않으며, 사용에 따른 책임은 사용자에게 있습니다. 완화 조치는 임시적입니다. Check Point는 Check Point Security Advisories에 각...

CVE-2026-67408

A flaw was found in rabbitmq-server. An authenticated user with access to a virtual host can cause a Denial of Service DoS by sending a specially crafted HTTP request to the stream management application programming interface API. The server allocates substantial memory to process stream binding...

RabbitMQ 4.1.x < 4.1.11 / 4.2.x < 4.2.9 / 4.3.x < 4.3.3 Super Stream Binding Keys Denial of Service

The version of RabbitMQ installed on the remote host is 4.1.x prior to 4.1.11, or 4.2.x prior to 4.2.9, or 4.3.x prior to 4.3.3. It is, therefore, affected by a denial of service vulnerability: - The stream management HTTP API handler for super stream creation PUT...

CVE-2026-20180

Cisco ISE RCE: 高度な悪用分析と修復 📋 目次 1. エグゼクティブサマリー 2. 攻撃対象領域の分析 3. 悪用ベクトル 4. 高度な回避技術 5. ゼロトラストアーキテクチャへのシステム的影響 6. 修復戦略 7. フォレンジック調査 8. 参考文献 🎯 エグゼクティブサマリー Cisco Identity Services Engine ISE...

BIT-RABBITMQ-2026-66074 RabbitMQ: ReDoS via management API ?name= filter

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, matchvalue/3 passes the user-supplied ?name= regular expression to re:run with no matchlimit option, and executes it once per resource in the result set. OTP's default 10M matchlimit caps ea...

CVE-2026-90441

A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user including a read-only or guest administrator account to crash the wgagent process and read arbitrary files accessible to the daemon by submitting a...

CVE-2026-86136

The Fireware OS is impacted by a missing authorization vulnerability in the wgagent management daemon 's session initialization function. An authenticated, low-privileged user, such as a guest administrator or read-only account, can submit a specially crafted management API request to crash the w...

CVE-2026-90441 Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B

A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user including a read-only or guest administrator account to crash the wgagent process and read arbitrary files accessible to the daemon by submitting a...

CVE-2026-86136 Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A

A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user including a read-only or guest administrator account to crash the wgagent process and read arbitrary files accessible to the daemon by submitting a...

CVE-2026-90441

The Fireware OS is affected by a missing authorization vulnerability in the wgagent management daemon's session initialization function. An authenticated, low-privileged user—such as a guest or read-only administrator—can submit a specially crafted management API request to crash the wgagent proc...