CVE-2026-20311

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient error handling in the web-based management...

CVE-2026-20311 Cisco IOS XE Software Web UI Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient error handling in the web-based management...

CVE-2026-20288

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. This vulnerability is due to improper...

CVE-2026-20288 Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. This vulnerability is due to improper...

CVE-2026-20288 Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. This vulnerability is due to improper...

EUVD-2026-53461

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service DoS attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could...

CVE-2026-20308 Cisco IOS XE Software Web-Based Management Interface Vulnerability

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service DoS attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could...

CVE-2026-20308

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service DoS attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could...

CVE-2026-20308

CVE-2026-20308 : A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privilege attacker to perform a DoS against an affected device. The issue stems from insufficient input validation in the web UI; sending crafted input can cause the w...

CVE-2026-20308 Cisco IOS XE Software Web-Based Management Interface Vulnerability

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service DoS attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could...

CVE-2026-20200

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. This vulnerability is due to improper...

CVE-2026-20198

The CVE-2026-20198 involves Cisco Integrated Management Controller (IMC) web-based management interface. Affected component: IMC web UI; vulnerability: cross-site scripting (XSS) due to insufficient input validation. Exploitation requires user interaction (phishing-style crafted link) by an authe...

CVE-2026-20198 Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An...

EUVD-2026-53448

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An...

Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service DoS attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could...

EUVD-2026-53030

A security vulnerability has been detected in H3C NX15 V100R017. Affected is the function service.add of the file /api/esps of the component Web API. Such manipulation leads to exposed dangerous routine. The attack may be launched remotely. The exploit has been disclosed publicly and may be used...

PT-2026-68232

Name of the Vulnerable Software and Affected Versions Cisco IMC affected versions not specified Description An issue in the web-based management interface allows an authenticated remote attacker with low privileges to execute arbitrary commands on the underlying operating system and elevate...

PT-2026-68241

Name of the Vulnerable Software and Affected Versions Cisco IMC affected versions not specified Description An issue in the web-based management interface allows an authenticated remote attacker with Admin privileges to execute arbitrary commands on the underlying operating system and elevate...

EUVD-2026-52925

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the built-in knowledge search path in backend/openwebui/tools/knowledgefs.py and backend/openwebui/tools/builtin.py let a chat participant choose a pattern used to grep knowledge files...

CVE-2026-70490

Open WebUI (self-hosted AI platform) versions 0.8.8–0.11.0 contain a flaw where the terminal WebSocket route in backend/open_webui/routers/terminals.py authenticates its own first-message JWT and omits the verified-user role gate enforced on HTTP terminal routes. As a result, accounts with pendin...