CVE-2026-76428

A vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the session database. This vulnerability is due to certain parameters being concatenated directly into SQL clauses without parameterization. An...

CVE-2026-76448 Cisco Identity Services Engine SQL Injection Vulnerability

A vulnerability in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the...

CVE-2026-76450 Cisco Identity Services Engine SQL Injection Vulnerability

A vulnerability in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the...

EUVD-2026-81140

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafte...

EUVD-2026-81132

A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. This vulnerability is due to insufficient validation of user-supplied input in REST API calls. An attacker could exploit this vulnerability by sending crafted input to ...

Cisco Identity Services Engine Remote Code Execution Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit these vulnerabilities, the attacker must have valid administrative credentials. For more...

CVE-2026-71936

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vulnerability is caused by unsafe concatenation of split valueN data into a fixed-size buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service...

CVE-2026-71926

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitization of the username, password, and location fields before command execution. A remote attacker can trigger this vulnerability via crafted...

CVE-2026-71918

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the webBackupAction function. The vulnerability is caused by insufficient filtering of the option, key, pwencode, pathN, and valueN fields before command execution. A remote attacker can trigger this vulnerability vi...

CVE-2026-71915

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the jsonstatus function. The vulnerability is caused by insufficient filtering of the usescript, usefile, and option fields before command execution. A remote attacker can trigger this vulnerability via crafted input...

CVE-2026-71906

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerability is caused by insufficient validation of the lanIp and lanNetmask fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

CVE-2026-71908

Multiple DrayTek VigorAP models contain a command injection vulnerability in the meshstartspeedtest function. The vulnerability is caused by insufficient sanitization of the meshdeviceindex and meshdeviceip fields before command execution. A remote attacker can trigger this vulnerability via...

CVE-2026-71943 DrayTek VigorSwitch Multiple Models OS Command Injection via setDevNet

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

CVE-2026-71941 DrayTek VigorSwitch Multiple Models Buffer Overflow via diag_logmail

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diaglogmail function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this...

CVE-2026-71939

Multiple DrayTek VigorSwitch models contain a buffer overflow in the acl_general_setup Add ACE function, caused by copying the name field into a fixed-size buffer without length validation. A remote attacker with valid administrative credentials on the device's web management interface can trigge...

CVE-2026-71938

Multiple DrayTek VigorSwitch models contain a buffer overflow in the switch_lan_gvrp function, caused by unsafe copying of the portList field into an undersized buffer. A remote attacker with valid administrative credentials for the device's web management interface can trigger the vulnerability ...

EUVD-2026-64991

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input containing path traversal sequences to acce...

CVE-2026-71932

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function, caused by insufficient validation of the option field. A remote attacker with valid administrative credentials for the device's web management interface can supply crafted input containi...

CVE-2026-71928

Multiple DrayTek VigorSwitch models are affected by an OS command injection vulnerability in the fdftDevice function, caused by insufficient filtering of the username and password fields before command execution. A remote attacker with valid administrative credentials for the device's web managem...

CVE-2026-71917

Multiple DrayTek VigorSwitch models are affected by an OS command injection in the pingtrace function, caused by insufficient validation of the host field before command execution. An attacker with valid administrative credentials for the device's web management interface can supply crafted input...