4 casos · pág. 1/1
Cisco disclosed CVE-2026-20321, a command injection vulnerability in the web-based management API of Cisco Application Policy Infrastructure Controller (APIC). An authenticated, remote attacker with valid administrative credentials could execute arbitrary commands as root on the underlying operating system. Cisco rates the Security Impact…
Cisco disclosed CVE-2026-20032, a Medium-rated vulnerability in the Python interpreter of Cisco NX-OS Software. An authenticated local attacker with low privileges and Python execution rights can escape the Python sandbox and reach the underlying operating system of the device. The flaw stems from insufficient validation of user-supplied …
Cisco disclosed CVE-2026-76488, a medium-severity vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC). An authenticated remote attacker with valid administrative credentials could read sensitive files from the underlying file system of an affected device. The files include key ma…
Cisco published a security advisory covering multiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem). A remote attacker could exploit them to gain unauthorized access, access sensitive information, cause a denial of service (DoS)…
