Kwetsbaarheid verholpen in Cisco Crosswork Network Controller

Cisco has identified a vulnerability in the Cisco Crosswork Network Controller. This vulnerability involves a denial-of-service attack that can be exploited by unauthorized external attackers. The attack involves overwhelming the system with a large number of connection requests, causing services...

The vulnerability of the server function of the Cisco IOS XE operating system’s secure copying protocol allows a attacker to trigger a service failure.

The vulnerability of the server function of the Cisco IOS XE operating system’s secure copying protocol is related to the improper handling of additional parameters. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability in the web interface for controlling the Cisco Unity Connection integrated messaging system allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Cisco IOS XE operating system, which allows a perpetrator to access confidential information

The vulnerability of the Cisco IOS XE operating system is related to the transmission of critical information in plaintext. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

The vulnerability of the Cisco IOS XE operating system’s command-line interface allows a hacker to trigger a service failure.

The vulnerability of the Cisco IOS XE operating system’s command-line interface is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the web interface of the Cisco IOx software platform allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability in the Cisco IOx software platform’s web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a remote attacker to perform cross-site scripting attacks XSS...

The vulnerability of the Cisco IoT Field Network Director software interface allows a intruder to trigger a service failure.

The vulnerability of the Cisco IoT Field Network Director software interface is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Cisco IOS XE operating system’s loader allows a hacker to execute arbitrary code.

The vulnerability of the Cisco IOS XE operating system loader is related to a violation of the initial buffer boundary. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Cisco IoT Field Network Director software interface allows a hacker to escalate their privileges.

The vulnerability of the Cisco IoT Field Network Director software interface is related to exceptions handling deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of the Cisco IOS XE operating system’s TLS library allows attackers to trigger memory exhaustion or service failure.

The vulnerability of the Cisco IOS XE operating system’s TLS library is related to the absence of references to an active, allocated resource. Exploiting this vulnerability can allow a malicious actor to induce memory exhaustion or service failure from a remote perspective...

The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager allows a attacker to perform cross-site scripting attacks (XSS).

The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Cisco IoT Field Network Director software interface allows a hacker to gain access to confidential information or cause service failures.

The vulnerability of the Cisco IoT Field Network Director software interface is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...

The vulnerability in the web interface of the Cisco IOS XE operating system allows attackers to enhance their privileges and gain access to the management API.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and gain access to the management API...

Cisco Prime Infrastructure Information Disclosure (cisco-sa-pi-unauth-infodiscl-LFnLgmey)

The version of Cisco Prime Infrastructure installed on the remote host is prior to Migrate to a fixed release.. It is, therefore, affected by a vulnerability as referenced in the cisco-sa-pi-unauth-infodiscl-LFnLgmey advisory. - A vulnerability in the log file download functionality of Cisco Prim...

The vulnerability of Cisco IOS and Cisco IOS XE operating system HTTP servers allows attackers to induce service failures.

The vulnerability of Cisco IOS and Cisco IOS XE operating systems’ HTTP servers is related to incorrect processing of syntaxically incorrect structures. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

📄 Cisco ISE 2.2 Remote Code Execution

This Metasploit module exploits an unauthorized file upload vulnerability in Cisco ISE. A ZIP file containing a JSP file with a manipulated path path traversal is uploaded. The webshell is then extracted to the webapps folder...

Exploit for Deserialization of Untrusted Data in Cisco Secure_Firewall_Management_Center

🚨 CVE-2026-20131 | Cisco FMC Critical RCE Unauthenticat...

Cisco Expressway Series Remote Code Execution Vulnerability (regreSSHion) (cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Expressway Series is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Expressway Series due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after...

PT-2026-39471

CVE-2026-2710 - CVE-2022-1234: Cisco Webex Meeting Server Authentication Bypass CVE ID :CVE-2026-2710 Published : May 7, 2026, 11:16 p.m. | 58 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for...

PT-2026-39333

CVE-2026-6278 - CVE-2019-1905: Cisco WebEx Meeting Center Unvalidated Redirect CVE ID :CVE-2026-6278 Published : May 6, 2026, 11:16 p.m. | 51 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for...