CVE-2026-76439

A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status events into the endpoint posture pipeline. This vulnerability is due to insufficient authenticati...

CVE-2026-20071

A vulnerability in the SSID bring-your-own-device BYOD onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker to hijack the onboarding session of another user and access protected 802.1X networks. This vulnerability is due to insufficient authentication checks that are...

CVE-2026-76439

Cisco Identity Services Engine (ISE) has an event injection vulnerability in the endpoint posture status reporting functionality of its guest portal web application. The root cause is insufficient authentication on an internal interface that is exposed through the guest portal. An unauthenticated...

CVE-2026-76439 Cisco Identity Services Engine Event Injection Vulnerability

A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status events into the endpoint posture pipeline. This vulnerability is due to insufficient authenticati...

EUVD-2026-81142

A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status events into the endpoint posture pipeline. This vulnerability is due to insufficient authenticati...

CVE-2026-22557-PoC

CVE-2026-22557 -- Traversée de chemin pré-authentification dans UniFi Network Application Traversée de chemin pré-authentifiée dans le portail invité de l'application réseau UniFi /guest/s/site/login. Le paramètre de requête pageerror est transmis à un chargeur de ressources sans validation,...

Exploit for CVE-2026-22557

CVE-2026-22557 -- UniFi Network Application Pre-Auth Path Trav...

EUVD-2017-15788

Malware in sbrugna...

EUVD-2021-13475

Malware in sbrugna...

EUVD-2017-3889

Malware in sbrugna...

EUVD-2015-6208

Malware in sbrugna...

EUVD-2023-24182

Malicious code in bioql PyPI...

CVE-2021-26682

A remote reflected cross-site scripting XSS vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the guest portal interface of ClearPass could allow a remote attacker to conduct a reflected cross-site scripting XSS atta...

The vulnerability of the CI/CD system’s TeamCity component, related to bypassing the authentication process through an alternative path or channel, allows a hacker to gain access to the guest portal without being authenticated.

The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain access to the gateway...

The vulnerability of the microprogramming software in Cisco Business Wireless Access Points allows a intruder to gain access to the guest portal without authentication.

The vulnerability of microprogrammed software in Cisco Business Wireless Access Points involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to gain access to the guest portal without being authenticated...

CVE-2023-20003

A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points APs could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login implementation. An...

CVE-2023-20003

A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points APs could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login implementation. An...

Authentication flaw

A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points APs could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login implementation. An...

CVE-2023-20003 Cisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability

A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points APs could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login implementation. An...

CVE-2023-20003

CVE-2023-20003 affects Cisco Business Wireless Access Points where the social login configuration for guest users can be bypassed by an unauthenticated adjacent attacker due to a logic error in the social login flow. Impact is guest portal access without authentication (high confidentiality and i...