CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-Day CVE-2026-20127 wird seit 2023 für den Admin-Zugriff ausgenutzt. Dieses Repository enthält einen funktionierenden Proof-of-Concept-Exploit für CVE-2026-20127, eine kritische Pre-Authentifizierungs-Schwachstelle im Cisco Catalyst SD-WA...

CVE-2021-24006-Fortimanager-Exploit

CVE-2021-24006 – FortiManager Improper Access Control Exploit PoC PoC Proof of Concept – Nur für Bildungszwecke Exploit für unbefugten Zugriff auf den SD-WAN Orchestrator in FortiManager, der eine Schwachstelle in der Zugriffskontrolle CWE-284 ausnutzt. Beschreibung Die Schwachstelle CVE-2021-240...

CVE-2021-24006

CVE-2021-24006 – Exploit di Controllo di Accesso Inappropriato di FortiManager PoC PoC Proof of Concept - Solo a scopo educativo Exploit di accesso non autorizzato all'Orchestrator SD-WAN su FortiManager, sfruttando un difetto di controllo degli accessi CWE-284. Descrizione La vulnerabilità...

CVE-2026-20262-Cisco-Catalyst-SD-WAN-Manager-Arbitrary-File-Write-

CVE-2026-20262 - Cisco Catalyst SD-WAN Manager Beliebiges Schreiben von Dateien Path Traversal -orange 📋 Beschreibung CVE-2026-20262 ist eine Path-Traversal-Schwachstelle CWE-22 in der Weboberfläche von Cisco Catalyst SD-WAN Manager früher SD-WAN vManage. Sie ermöglicht es einem authentifizierten...

CVE-2026-20127-Exploit-Extension

Zusammenfassung Der CVE-2026-20127 Defensive Companion ist eine erstklassige, Enterprise-taugliche Browser-Erweiterung, die für proaktive Threat Intelligence und defensive Analyse entwickelt wurde. Dieses Werkzeug bündelt maßgebliche technische Forschungserkenntnisse zu der...

CVE-2026-20224---XXE-Injection-en-Cisco-Catalyst-SD-WAN-Manager

CVE-2026-20224 - Iniezione XXE in Cisco Catalyst SD-WAN Manager ⚠️ DICHIARAZIONE DI NON RESPONSABILITÀ QUESTO STRUMENTO È ESCLUSIVAMENTE PER SCOPI EDUCATIVI E DI RICERCA Questo exploit è destinato esclusivamente a operazioni di red team autorizzate, test di penetrazione e ricerca sulla sicurezza s...

CVE-2018-14083

CVE-2018-14083...

CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit

CVE-2026-20245 - Exploit di escalation dei privilegi Cisco SD-WAN ⚠️ AVVERTENZA Questo codice è SOLO per scopi educativi e test di sicurezza autorizzati. 📋 Descrizione CVE-2026-20245 è una vulnerabilità di escalation dei privilegi nella CLI di Cisco Catalyst SD-WAN Controller vSmart, Cisco Catalys...

CVE-2025-54322

CVE-2025-54322 - XSpeeder SXZOS Pre-Auth-RCE-Scanner Ein multi-threaded Schwachstellenscanner für CVE-2025-54322, eine nicht authentifizierte Remote-Code-Ausführungssicherheitslücke in der XSpeeder SXZOS-Firmware, die weltweit etwa 70.000+ Hosts betrifft. 📋 Inhaltsverzeichnis Über die Schwachstel...

CVE-2026-20245

🚨 CVE-2026-20245 - Escalatione dei Privilegi in Cisco Catalyst SD-WAN Manager Escalation dei privilegi autenticata tramite caricamento di file creato ad hoc Una vulnerabilità che colpisce Cisco Catalyst SD-WAN Manager e consente a utenti autenticati con privilegi amministrativi di eseguire comand...

CVE-2022-20818

CVE-2022-20818: Escalation dei privilegi locali tramite lettura parziale di file in Cisco SD-WAN La funzione “config - load” della shell SSH di Viptela utilizza “wget” per recuperare file “command” remoti tramite FTP. Ospitando un server FTP dannoso e sostituendo i file locali creati da wget con...

CVE-2026-20182

CVE-2026-20182 — Cisco Catalyst SD-WAN Controller / Manager Bypass di Autenticazione Un proof-of-concept di exploit per CVE-2026-20182 , un bypass critico CVSS 10.0 dell'autenticazione nel servizio vdaemon DTLS UDP/12346 su Cisco Catalyst SD-WAN Controller vSmart e Manager vManage. Divulgato: 14...

CVE-2026-20127

🛡️ CVE-2026-20127 — Cisco Catalyst SD-WAN प्रमाणीकरण बायपास 📌 अवलोकन CVE-2026-20127 एक गंभीर प्रमाणीकरण बायपास भेद्यता है जो Cisco Catalyst SD-WAN घटकों, जिसमें नियंत्रक और प्रबंधन प्रणालियाँ शामिल हैं, को प्रभावित करती है। एक दूरस्थ अप्रमाणित हमलावर SD-WAN नियंत्रण तल में अनुचित प्रमाणीकरण सत्याप...

sdwan-cve-2021-1480

Exploit per CVE-2021-1480 SD-WAN Materiali PoC per sfruttare la CVE-2021-1480 su Cico SD-WAN. La pubblicazione completa è disponibile sul sito XMCO: https://blog.xmco.fr/wp-content/uploads/2021/08/XMCO-SDWANReport-CVE-2021-1480.pdf Uso: 1. Aggiornare le righe 173 e 176 per impostare l'uid...

MAL-008

MAL-008: SSHtranger Things CVE-2019-6111, CVE-2019-6110 su Cisco SD-WAN Cisco SD-WAN v20.4.2.1 utilizza una vecchia versione di SSH OpenSSH7.6p1 suscettibile all'attacco “SSHtranger Things”. Se una vittima tenta di connettersi a un server SSH dannoso/compromesso, questo attacco può essere...

Cisco SD-WAN vManage Software - Local File Inclusion

Cisco SD-WAN vManage Software in the application data endpoints is vulnerable to local file inclusion which could allow an unauthenticated, remote attacker to gain access to sensitive information. id: CVE-2020-26073 info: name: Cisco SD-WAN vManage Software - Local File Inclusion author: madrobot...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...