cisco-CVE-2023-20009

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - RCE from config file CVE: CVE-2023-20009 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...

CVE-2026-20127

🛡️ CVE-2026-20127 — Cisco Catalyst SD-WAN Authentication Bypass 📌 Overview CVE-2026-20127 is a critical authentication bypass vulnerability affecting Cisco Catalyst SD-WAN components, including controllers and management systems. A remote unauthenticated attacker can exploit improper authenticatio...

CVE-2025-20352

CVE-2025-20352 SNMP Exposure Check onesixtyone + parser Fast, safe black-box exposure check for Cisco IOS/IOS XE devices related to CVE-2025-20352 SNMP subsystem: 1. Scan your subnets for SNMP using onesixtyone with default communities. 2. Parse sysDescr.0 banners with a small Python script to fl...

cisco-CVE-2023-31488

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Email to zero click RCE as root - Remote Code Execution/Memory Corruption/ROP-chain CVE: CVE-2023-31488 Timeline: Discovered - ly1g3...

Cisco-ASA-vulnerability-research

LINAFULLRE — Full-Coverage Reverse Engineering of lina Created: 2026-08-12 Target: labasav9-12-4-67/lina ASAv 9.12467, ELF x86-64, PIE; Ghidra image base 0x100000; 112,687 functions , 167 MB mapped, 642,707 symbols Track goal: systematic, complete RE coverage of the lina binary — complementing th...

patch-CVE-2026-19843

Patch: CVE-2026-19843 Vulnerability Details CVE : CVE-2026-19843 Product : Cisco IOS XE Description : Privilege escalation via web UI Severity : High Patch Status: DEPLOYED...

CVE-2026-20079

CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...

CVE-2026-20182

CVE-2026-20182 — Cisco Catalyst SD-WAN Controller / Manager Authentication Bypass A proof-of-concept exploit for CVE-2026-20182 , a critical CVSS 10.0 authentication bypass in the vdaemon DTLS service UDP/12346 on Cisco Catalyst SD-WAN Controller vSmart and Manager vManage. Disclosed: May 14, 202...

EUVD-2026-78214

A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued...

The vulnerability of the email analysis mechanism of the Cisco AsyncOS operating system for Cisco Secure Email protection tools allows for the execution of arbitrary commands.

The vulnerability of the email analysis mechanism of Cisco AsyncOS operating system in Cisco Secure Email protection solutions is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with roo...

CVE-2026-20127

CVE-2026-20127 — Bypass de Autenticación en Cisco SD-WAN CVSS 10.0 Tabla de Contenidos...

CVE-2026-76442

creationtimestamp| type| source ---|---|--- 2026-09-14 20:45:13+00:00| seen| https://www.acn.gov.it/portale/w/cisco-sfuttamento-in-rete-della-cve-2026-76461-relativa-a-secure-email-gateway 2026-09-15 12:05:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvkliblu3e23...

CVE-2023-20198

CVE-2023-20198 Exploit PoC for CVE-2023-20198 Description CVE-2023-20198 is characterized by improper path validation to bypass Nginx filtering to reach the webuiwsmahttp web endpoint without requiring authentication. By bypassing authentication to the endpoint, an attacker can execute arbitrary...

Vulnerability exposure in Cisco Secure Email Gateway

Cisco has identified a vulnerability in Cisco Secure Email Gateway. This vulnerability lies in the processing of email messages within the Cisco AsyncOS software for Cisco Secure Email Gateway. It arises due to insufficient validation of incoming email messages. An unauthorized malicious actor ca...

CVE-2026-20127_EXP

CVE-2026-20127EXP Exploit EXP para la vulnerabilidad de omisión de autenticación en Cisco Catalyst SD-WAN CVE-2026-20127 Uso básico python scan.py -f targets.txt Mostrar información detallada python scan.py -f targets.txt -v Ajustar el número de hilos y guardar resultados python scan.py -f...

CVE-2026-76461

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...

CVE-2026-76442

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76440

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-20353

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2017-3881

CVE-2017-3881 Cisco IOS remote code execution This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp Description...