Lucene search
+L

819 matches found

Kitploit
Kitploit
•added 2026/10/01 6:31 p.m.•11 views

CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE

CVE-2026-20127 — Удалённое выполнение кода до аутентификации в Cisco SD-WAN Обзор Этот репозиторий содержит эксплойт proof-of-concept PoC для CVE-2026-20127 — критической уязвимости удалённого выполнения кода RCE до аутентификации , затрагивающей развёртывания Cisco Catalyst SD-WAN Controller ран...

10CVSS8.5AI score0.88476EPSS
SaveExploits10
Kitploit
Kitploit
•added 2026/10/01 6:23 p.m.•20 views

CVE-2026-20131-POC

CVE-2026-20131---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-Day CVE-2026-20131 эксплуатируется с 2023 года для получения административного доступа. Этот репозиторий содержит рабочий proof-of-concept эксплойт для CVE-2026-20131 — критической уязвимости до аутентификации в Cisco Catalyst SD-WAN...

10CVSS8.6AI score0.43166EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/10/01 6:12 p.m.•15 views

cve-2026-20127

Сканер CVE-2026-20127 Обзор Этот проект представляет собой инструмент сетевого сканирования для Windows, написанный на C++, который пытается выявить потенциальные сервисы Cisco SD-WAN / vManage и выполнить проверку уязвимости по указанной проблеме с идентификатором CVE-2026-20127. Возможности...

10CVSS8.3AI score0.88476EPSS
SaveExploits10
Kitploit
Kitploit
•added 2026/10/01 5:18 p.m.•13 views

sdwan-scanner-CVE-2026-20127

Cisco SD-WAN Exposure Scanner CVE-2026-20127 Специализированный инструмент пассивной идентификации, предназначенный для обнаружения доступных из интернета экземпляров Cisco SD-WAN vManage / Viptela. Этот инструмент помогает специалистам по безопасности и системным администраторам управлять своей...

10CVSS8.8AI score0.88476EPSS
SaveExploits10
Metasploit
Metasploit
•added 2026/05/07 12:00 a.m.•389 views

Cisco Catalyst SD-WAN Controller vHub Authentication Bypass

This module exploits an authentication bypass vulnerability CVE-2026-20182 in the Cisco Catalyst SD-WAN Controller. The vdaemon DTLS control-plane service performs no certificate or credential verification for connecting peers that claim to be a vHub device type 2. The vbondprocchallengeack...

10CVSS8.2AI score0.91522EPSS
SaveExploits4
Rapid7 Blog
Rapid7 Blog
•added 2026/03/11 3:52 p.m.•20 views

Rapid7 Analysis: CVE-2026-20127

CVE-2026-20127: Cisco Catalyst SD-WAN Authentication Bypass Overview On 25th February 2026, Cisco published an advisory for CVE-2026-20127, a critical authentication bypass vulnerability in the vdaemon service of Cisco Catalyst SD-WAN formerly Viptela. The flaw allows an unauthenticated, remote...

10CVSS8.5AI score0.88476EPSS
SaveExploits10
GithubExploit
GithubExploit
•added 2026/03/07 9:39 a.m.•178 views

Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager

CVE-2026-20127-Cisco SD-WAN Pre-Authentication Remote Code Exe...

10CVSS6.3AI score0.88476EPSS
SaveExploits10
GithubExploit
GithubExploit
•added 2026/03/06 7:06 a.m.•289 views

Exploit for CVE-2026-20131

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-...

10CVSS8.2AI score0.88476EPSS
SaveExploits13
VulnCheck KEV
VulnCheck KEV
•added 2026/03/05 12:00 a.m.•9 views

VulnCheck KEV: CVE-2026-20122

Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow...

5.4CVSS7.8AI score0.24978EPSS
SaveIn wildExploits0References6
RedhatCVE
RedhatCVE
•added 2026/02/26 10:34 p.m.•16 views

CVE-2026-20128

A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An...

7.5CVSS7.5AI score0.07064EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/25 6:31 p.m.•22 views

EUVD-2026-8673

A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This...

5.4CVSS5.8AI score0.24978EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/02/25 6:31 p.m.•18 views

EUVD-2026-8676

A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker to gain DCA user privileges on an affected system. To exploit this vulnerability, the attacker must have valid vmanage credentials on the affected system. This...

7.5CVSS5.5AI score0.07064EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/25 5:25 p.m.•19 views

CVE-2026-20128

A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An...

7.5CVSS0.07064EPSS
SaveExploits0References2
OSV
OSV
•added 2026/02/25 5:25 p.m.•15 views

CVE-2026-20128

A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker to gain DCA user privileges on an affected system. To exploit this vulnerability, the attacker must have valid vmanage credentials on the affected system. This...

7.5CVSS5.8AI score0.07064EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/25 4:14 p.m.•141 views

CVE-2026-20122 Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This...

5.4CVSS0.24978EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/25 4:14 p.m.•9 views

CVE-2026-20122

A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This...

5.4CVSS5.8AI score0.24978EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/02/25 4:14 p.m.•11 views

CVE-2026-20128

A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An...

7.5CVSS7.5AI score0.07064EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/02/25 4:14 p.m.•138 views

CVE-2026-20128 Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An...

7.5CVSS0.07064EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/25 12:00 a.m.•24 views

PT-2026-21952

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Manager affected versions not specified Description An issue in the API of Cisco Catalyst SD-WAN Manager, specifically within the Data Collection Agent DCA service, results from improper file handling and the incorrect us...

7.5CVSS7.5AI score0.24978EPSS
SaveExploits0References65
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/25 12:00 a.m.•1 views

CVE-2026-20122: Incorrect Use of Privileged APIs

A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This...

5.4CVSS7.8AI score0.24978EPSS
SaveExploits0References2
Rows per page
Query Builder