CVE-2026-20311: Buffer Over-read

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient error handling in the web-based management...

CVE-2026-20308: Improper Privilege Management

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service DoS attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could...

CVE-2026-20301: Unchecked Input for Loop Condition

A vulnerability in the Extensible Messaging Client Protocol XMCP, also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability ...

CVE-2026-20263: Undefined Security Weakness

A vulnerability in the Blocks Extensible Exchange Protocol BEEP feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling when parsing a specific BEEP SOAP...

CVE-2026-20267: Improper Access Control

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

PT-2026-68238

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description Insufficient control flow management issues were identified during an internal security review. These issues fall under the Common Weakness Enumeration CWE Pillar CWE-691, which...

ios-notification (0.0.4) potentially affected by CVE-2026-15307 via django (1.11.1)

django PYPI version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ios-notification 0.0.4 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

ios-notification (0.0.4) potentially affected by CVE-2026-15830 via django (1.11.1)

django PYPI version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ios-notification 0.0.4 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

ios-notification (0.0.4) potentially affected by CVE-2026-15830 via django (1.11.1)

django PYPI version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ios-notification 0.0.4 Source cves: CVE-2026-15830 Source advisory: OSV:PYSEC-2026-3717...

Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS

An unknown Chinese-speaking threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit. Attack surface management platform Censys said it identified the threat actor running more than 100 web properties, most ...

Exploit for NULL Pointer Dereference in Pgbouncer

--- CVE-2026-6666 – XPC Service NSKeyedUnarchiver Deserializ...

SNMP Cisco IOS Config Hints

Fingerprints Cisco IOS via SNMP and checks for config-copy MIB / image strings read-only subset of NSE snmp-ios-config; does not push config to TFTP. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco IOS SNMP config/info NSE snmp-ios-config inspired, read-only.""" from kittysploit import from...

Chromium: CVE-2026-17724 Race in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17822 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17826 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17830 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17917 Policy bypass in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17703 Policy bypass in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17669 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17912 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...