PT-2026-107603

Name of the Vulnerable Software and Affected Versions Cisco networking software affected versions not specified Description Buffer management issues were identified during an internal security review. These issues fall under the category of CWE-119, which refers to improper restriction of...

PT-2026-107606

Name of the Vulnerable Software and Affected Versions Cisco networking software affected versions not specified Description Improper input validation occurs within the software, which is categorized under the Common Weakness Enumeration CWE Pillar CWE-20. This issue was identified during an...

PT-2026-107610

Name of the Vulnerable Software and Affected Versions Cisco networking software affected versions not specified Description An issue exists involving the improper neutralization of special elements, which falls under the Common Weakness Enumeration CWE Pillar CWE-74. This was identified during an...

PT-2026-107605

Name of the Vulnerable Software and Affected Versions Cisco networking software affected versions not specified Description An issue exists involving improper control of a resource through its lifetime. This relates to CWE-664, which describes a weakness where a software system does not properly...

PT-2026-107607

Name of the Vulnerable Software and Affected Versions Cisco networking software affected versions not specified Description Insufficient control flow management issues were identified during an internal security review. These issues are categorized under CWE-691, which refers to a failure to...

PT-2026-107608

Name of the Vulnerable Software and Affected Versions Cisco networking software affected versions not specified Description An internal security review identified issues related to incorrect calculations, which fall under the Common Weakness Enumeration CWE Pillar CWE-682. Recommendations At the...

CVE-2026-20118

A vulnerability in the handling of an Egress Packet Network Interface EPNI Aligner interrupt in Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series with NC57 line cards and Cisco NCS 5700 Routers and Cisco IOS XR Software for Third Party Software could allow an...

The vulnerability of Cisco IOS XE SD-WAN software, related to information disclosure, allows attackers to bypass existing security restrictions and expose sensitive information.

The vulnerability of Cisco IOS XE SD-WAN software is related to the exposure of information. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and expose the protected information...

CVE-2025-20340

Cisco IOS XR Software contains an ARP processing vulnerability that can be triggered by an unauthenticated, adjacent attacker sending excessive ARP traffic to the management interface, causing a broadcast storm and DoS. Affected behavior includes degraded device performance, loss of management co...

Cisco IOS XE SD-WAN Software 信息泄露漏洞

Cisco IOS XE SD-WAN Software is a Cisco software for network management software-defined networking applied to the Cisco IOS XE network operating system. An information disclosure vulnerability exists in Cisco IOS XE SD-WAN Software that stems from an improper traffic filtering condition, which...

Russian organizations targeted by backdoor masquerading as secure networking software updates

As we were looking into a cyberincident in April 2025, we uncovered a rather sophisticated backdoor. It targeted various large organizations in Russia, spanning the government, finance, and industrial sectors. While our investigation into the attack associated with the backdoor is still ongoing, ...

ALSA-2025:3833 Important: gvisor-tap-vsock security update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fixes:...

CVE-2025-20143

A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load unverified software on an affected device. To exploit this vulnerability, the attacker must have root-system privileges o...

Cisco IOS XE Software 安全漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software that stems from...

Cisco IOS XE Software 安全漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software that originates from...

The vulnerability of the Lab Handler component in the EVE-NG multi-user networking emulation software allows a attacker to perform XSS attacks.

The vulnerability of the Lab Handler component in the EVE-NG multi-user networking emulator exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the HTTP-based client profiling function in Cisco IOS XE allows a hacker to trigger a service failure.

The vulnerability of the HTTP-based client profiling function in Cisco IOS XE exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ROS-20230324-01

Vulnerability of Samba networking software package is related to errors in symbolic links processing. links. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to the server's server file system Vulnerability of unwrapdes and unwrapdes3 functions of GSSAPI...

HumHub Cross-Site Scripting Vulnerability (CNVD-2022-82657)

HumHub is a set of open source social networking software written on the Yii PHP framework. HumHub suffers from a cross-site scripting vulnerability that could be exploited by attackers to insert malicious javascript into the space name...

VulnCheck KEV: CVE-2017-12231

A vulnerability in the implementation of Network Address Translation NAT functionality in Cisco IOS could allow an unauthenticated, remote attacker to cause a denial of service...