CVE-2026-85488

Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance OVA...

CVE-2026-85488

Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance OVA...

EUVD-2026-94791

Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance OVA...

CVE-2026-85488

Brocade ASCG versions prior to 3.5.0 are susceptible to a hardcoded credential exposure. A well-known Brocade default password is embedded within a script distributed to every customer. A local authenticated user with read access to the installation path can discover these credentials. If default...

PT-2026-107857

Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance OVA...

Rockwell Automation Allen-Bradley Stratix 5950 Improper Input Validation (CVE-2018-0231)

A vulnerability in the Transport Layer Security TLS library of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service DoS condition...

Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco ThousandEyes Virtual Appliance. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of DHCP client configuration data. The issue results fro...

CVE-2026-20350

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface...

CVE-2026-20350

CVE-2026-20350 affects the web-based management interface of Cisco ThousandEyes Virtual Appliance , where improper validation of user-supplied input allows an authenticated attacker with administrative credentials to inject arbitrary operating system commands by saving configuration details conta...

CVE-2026-20350 Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface...

EUVD-2026-81117

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface...

CVE-2026-20350 Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface...

Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface...

CVE-2026-20350: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface...

PT-2026-93995

Name of the Vulnerable Software and Affected Versions Cisco ThousandEyes Virtual Appliance affected versions not specified Description An issue in the web-based management interface allows an authenticated remote attacker to perform operating system command injection. This occurs because the...

PT-2026-70907

Name of the Vulnerable Software and Affected Versions GMS Command-Line Interface CLI versions prior to 9.5.1 Build 9510.1044 Description An authenticated command injection issue exists in the GMS Virtual Appliance interface. This flaw allows a low-privileged local user to execute system commands...

The vulnerability of the SSL certificate processing function in the virtual machine for deploying the command-line interface of the Cisco ThousandEyes Virtual Appliance’s network analysis software allows a perpetrator to execute arbitrary commands.

The vulnerability of the SSL certificate processing function in the virtual machine for deploying the command-line interface of Cisco ThousandEyes Virtual Appliance software for network analysis involves the failure to take measures to neutralize special elements. Exploiting this vulnerability...

The vulnerability of the command-line interface (CLI) of the Cisco Umbrella Virtual Appliance allows a perpetrator to escalate their privileges and execute arbitrary commands.

The vulnerability of the CLI interface of the Cisco Umbrella Virtual Appliance lies in the lack of access control when using the vmadmin account. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary commands...

Cisco Umbrella Virtual Appliance < 3.8.5 Privilege Escalation (cisco-sa-umbrella-priv-esc-F4wJB7AU)

According to its self-reported version, Cisco Umbrella Insights Virtual Appliance is affected by a vulnerability. - A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability i...

CVE-2026-20246

A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied commands. An attacker with vmadmin privileges could exploit this...