Lucene search
K

188 matches found

RedhatCVE
RedhatCVE
added 2026/04/13 7:23 p.m.2 views

CVE-2026-21919

An Incorrect Synchronization vulnerability in the management daemon mgd of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low privileges to cause a complete Denial-of-Service DoS of the management plane. When NETCONF sessions are quickly established and...

7.1CVSS5.7AI score0.00051EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/10 12:30 a.m.2 views

EUVD-2026-21082

An Incorrect Synchronization vulnerability in the management daemon mgd of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low privileges to cause a complete Denial-of-Service DoS of the management plane. When NETCONF sessions are quickly established and...

7.1CVSS5.8AI score0.00051EPSS
Exploits0References2
NVD
NVD
added 2026/04/09 10:16 p.m.3 views

CVE-2026-21919

An Incorrect Synchronization vulnerability in the management daemon mgd of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low privileges to cause a complete Denial-of-Service DoS of the management plane. When NETCONF sessions are quickly established and...

7.1CVSS0.00051EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/09 9:26 p.m.1 views

CVE-2026-21919 Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability

An Incorrect Synchronization vulnerability in the management daemon mgd of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low privileges to cause a complete Denial-of-Service DoS of the management plane. When NETCONF sessions are quickly established and...

7.1CVSS5.7AI score0.00051EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/09 9:26 p.m.14 views

CVE-2026-21919 Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability

An Incorrect Synchronization vulnerability in the management daemon mgd of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low privileges to cause a complete Denial-of-Service DoS of the management plane. When NETCONF sessions are quickly established and...

7.1CVSS0.00051EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.1 views

PT-2026-31746

An Incorrect Synchronization vulnerability in the management daemon mgd of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low privileges to cause a complete Denial-of-Service DoS of the management plane. When NETCONF sessions are quickly established and...

7.1CVSS5.8AI score0.00051EPSS
Exploits0References3
GithubExploit
GithubExploit
added 2026/03/06 7:6 a.m.188 views

Exploit for CVE-2026-20131

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-...

10CVSS6AI score0.54797EPSS
Exploits12
GithubExploit
GithubExploit
added 2026/03/05 2:40 a.m.149 views

Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager

CVE-2026‑20127 – Remote Authentication Bypass for Cisco Cataly...

10CVSS6.5AI score0.54797EPSS
Exploits9
GithubExploit
GithubExploit
added 2026/03/04 1:20 a.m.132 views

Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-...

10CVSS7.3AI score0.54797EPSS
Exploits9
RedhatCVE
RedhatCVE
added 2026/02/26 10:34 p.m.4 views

CVE-2026-20127

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected syste...

10CVSS5.8AI score0.54797EPSS
Exploits9References1
The Hacker News
The Hacker News
added 2026/02/26 6:13 a.m.16 views

Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access

A newly disclosed maximum-severity security flaw in Cisco Catalyst SD-WAN Controller formerly vSmart and Catalyst SD-WAN Manager formerly vManage has come under active exploitation in the wild as part of malicious activity that dates back to 2023. The vulnerability, tracked as CVE-2026-20127 CVSS...

10CVSS7.2AI score0.54797EPSS
Exploits10
OSV
OSV
added 2026/02/25 5:25 p.m.1 views

CVE-2026-20127

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected syste...

10CVSS5.8AI score0.54797EPSS
Exploits9References2
Cvelist
Cvelist
added 2026/02/25 4:14 p.m.23 views

CVE-2026-20127 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected syste...

10CVSS0.54797EPSS
Exploits9References1
ATTACKERKB
ATTACKERKB
added 2026/02/25 4:14 p.m.4 views

CVE-2026-20127

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected syste...

10CVSS7.8AI score0.54797EPSS
In wildExploits10References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/25 4:14 p.m.5 views

CVE-2026-20127 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected syste...

10CVSS5.8AI score0.54797EPSS
Exploits9References1
VulnCheck KEV
VulnCheck KEV
added 2026/02/25 12:0 a.m.2 views

VulnCheck KEV: CVE-2026-20127

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected syste...

10CVSS5.9AI score0.54797EPSS
In wildExploits9References15
RedhatCVE
RedhatCVE
added 2025/12/10 6:13 p.m.3 views

CVE-2025-26489

Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and reboot the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0...

6.5CVSS6.8AI score0.0015EPSS
Exploits0References1
OSV
OSV
added 2025/12/08 9:15 a.m.2 views

CVE-2025-26489

Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and reboot the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0...

6.5CVSS5.8AI score0.0015EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/08 8:56 a.m.1 views

CVE-2025-26489 Improper input validation in Netconf service in Infinera MTC-9

Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and reboot the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0...

6.5CVSS6.4AI score0.0015EPSS
Exploits0References1
CVE
CVE
added 2025/12/08 8:56 a.m.6 views

CVE-2025-26489

The CVE-2025-26489 entry concerns Infinera MTC-9, where the Netconf service suffers from improper input validation. The root cause is input validation flaws in the Netconf interface, allowing remote authenticated users to crash the service and reboot the appliance, causing a DoS. Affected version...

6.5CVSS6.4AI score0.0015EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder