CVE-2023-20178

CVE-2023-20178 Questa è una PoC per la vulnerabilità di eliminazione arbitraria di file in Cisco Secure Client testata su 5.0.01242 e Cisco AnyConnect testata su 4.10.06079. Quando un utente si connette alla VPN, il processo vpndownloader.exe viene avviato in background e crea una directory in...

CVE-2026-20131

CVE-2026-20131 — Cisco Secure FMC Remote Code Execution Java-Deserialisierung Schweregrad: Kritisch CVSS 3.1: 10.0 CWE: CWE-502 — Deserialisierung nicht vertrauenswürdiger Daten Betroffen: Cisco Secure Firewall Management Center FMC Software Advisory: cisco-sa-fmc-rce-NKhnULJh Bug-ID: CSCwt14636...

CVE-2026-20079

🚨 CVE-2026-20079 "Zero-Day critique Cisco FMC" Contournement d'authentification critique menant à une exécution de code à distance RCE en tant que root dans Cisco Secure Firewall Management Center 📋 Aperçu CVE-2026-20079 est une vulnérabilité critique dans l'interface web du logiciel Cisco Secure...

CVE-2025-20393

CVE-2025-20393 📌 Überblick CVE-2025-20393 ist eine kritische Schwachstelle zur Remote-Codeausführung RCE , die Cisco Secure Email Gateway SEG - und Cisco Secure Email and Web Manager SEWM -Appliances betrifft, die Cisco AsyncOS ausführen. Die Schwachstelle existiert aufgrund unsachgemäßer...

cisco-CVE-2023-20075

Informazioni Ricercatore di sicurezza: ly1g3, ly1g3attuta.io Impronta GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Panoramica: Escalation dei privilegi locali e shell escape CVE: CVE-2023-20075 Cronologia: Scoperto - ly1g3 Segnalato - ly1g3 Risolto ...

cisco-CVE-2023-20009

Informazioni Ricercatore di sicurezza: ly1g3, ly1g3attuta.io Impronta GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Panoramica: Remote Code Execution - RCE dal file di configurazione CVE: CVE-2023-20009 Cronologia: Scoperto - ly1g3 Segnalato - ly1g3...

EUVD-2026-62943

In versions below 2.4.5 of the Cisco Secure Malware Analytics app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive sample password by invoking the detonate file action, because the action's samplepassword parameter is not masked and is shown in...

CVE-2026-76378

In versions below 2.4.5 of the Cisco Secure Malware Analytics app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive sample password by invoking the detonate file action, because the action's samplepassword parameter is not masked and is shown in...

CVE-2026-76378 Information Disclosure through Action Parameters in Cisco Secure Malware Analytics app for Splunk SOAR

In versions below 2.4.5 of the Cisco Secure Malware Analytics app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive sample password by invoking the detonate file action, because the action's samplepassword parameter is not masked and is shown in...

CVE-2026-76378

In Cisco Secure Malware Analytics app for Splunk SOAR versions below 2.4.5, the detonate file action's sample_password parameter is not marked as a password type, causing it to display in cleartext in the UI. Any user with action-run permissions can read the sensitive password. CVSS 3.1 scores th...

CVE-2026-20319

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20318

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20231

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20317

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20315

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20319 Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20319

CVE-2026-20319 is a buffer management vulnerability (CWE-119) in Cisco Secure Workload , affecting both SaaS and on-premises deployments. The flaw involves buffer overflows and out-of-bounds writes , discovered during Cisco's internal security review. The CVSS 3.1 score is 7.5 (High) with a vecto...

EUVD-2026-62572

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20315 Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20315

CVE-2026-20315 is a set of improper access control vulnerabilities (CWE-284) in Cisco Secure Workload , affecting both SaaS and on-premises deployments. The flaws span authorization, authentication, privilege escalation, and access control bypasses, carrying a CVSS 10.0 rating. They were discover...