PT-2026-123413

Name of the Vulnerable Software and Affected Versions Pyrus Sync for Windows affected versions not specified Description A local privilege escalation issue exists due to missing authorization controls in the PyrusSyncService Windows service. This allows an attacker with unprivileged access to...

CVE-2025-20348

A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device. This vulnerability exists because of...

CVE-2025-20347

Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller (NDFC) have missing authorization controls on certain REST API endpoints. An authenticated, low-privileged attacker could view sensitive information or upload/modify files via crafted API requests, potentially executing limited Administr...