CVE-2026-95721

A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service...

CVE-2026-95717

A stored cross-site scripting XSS vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with high privileges to inject malicious scripts. Successful exploitation could allow an attacker to execute arbitrary script code in the context o...

CVE-2026-95711

An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are...

CVE-2026-95704

A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary commands on the underlying operating system, potentially...

CVE-2026-79884

A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentication controls and access sensitive information. Successful exploitation could allow an attacker to gain access to some data in a cleartext format possibly...

CVE-2026-79852

A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-95721

CVE-2026-95721 involves an Authenticated Local Memory Corruption Vulnerability within the AOS-8 Web-Based Management Interface . Technical details regarding the specific root cause, affected versions, and practical impact are not provided in the documents. No information regarding exploits or rem...

CVE-2026-95717

The provided documents identify CVE-2026-95717 as an Authenticated Stored Cross-Site Scripting (XSS) vulnerability located within the AOS Web-Based Management Interface . While the title specifies the vulnerability type and the affected component, the provided documentation does not include speci...

CVE-2026-95711

Technical details are not publicly available in the provided documents for CVE-2026-95711 . Action: monitor for updates.

CVE-2026-95704

Technical details for CVE-2026-95704 are not publicly available in the provided documents. While the title suggests an Authenticated Remote Code Execution vulnerability in a Wireless Network Management Interface allowing unauthorized system control, the provided documentation contains no specific...

CVE-2026-79884

Technical details regarding the root cause, specific affected versions, or remediation for CVE-2026-79884 are not publicly available in the provided documents. While the title suggests an Authentication Bypass leading to Sensitive Information Disclosure in AOS-8 , no further technical specifics a...

CVE-2026-79852

CVE-2026-79852 involves an unauthenticated SQL Injection vulnerability within the AOS Web-Based Management Interface . This security flaw can lead to Remote Code Execution (RCE) by an attacker. While the provided documents confirm the vulnerability type and potential impact, specific software ver...

Cisco License (Smart Software Manager) On-Prem Multiple Vulnerabilities (cisco-sa-ssm-access-nttb2dhE)

According to its self-reported version, Cisco License On-Prem formerly Cisco Smart Software Manager On-Prem is affected by multiple vulnerabilities, including: - A vulnerability in the web-based management interface of Cisco License On-Prem could allow an unauthenticated, remote attacker to gain...

Vulnerabilities in Cisco License On-Prem

Cisco has identified several vulnerabilities in Cisco License On-Prem. These vulnerabilities reside in the web-based management interface and API endpoints of Cisco License On-Prem. Unauthorized attackers can reset passwords, write files, or create DoS conditions. Authorized attackers with...

CVE-2026-76452

A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to conduct SQL injection attacks against an affected application. This vulnerability is due to insufficient...

CVE-2026-20328

A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to gain unauthorized access to an affected application. This vulnerability is due to improper checks during th...

CVE-2026-20362

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker cou...

CVE-2026-76437

A vulnerability in the web-based user interface of Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem) allows an authenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges . The root cause is the improper validation of us...

CVE-2026-76437 Cisco Smart Software Manager On-Prem Command Injection Vulnerability

A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of...

CVE-2026-20362 Cisco Finesse Server-Side Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker cou...