3 casos · pág. 1/1
Cisco disclosed CVE-2026-20321, a command injection vulnerability in the web-based management API of Cisco Application Policy Infrastructure Controller (APIC). An authenticated, remote attacker with valid administrative credentials could execute arbitrary commands as root on the underlying operating system. Cisco rates the Security Impact…
Cisco disclosed CVE-2026-76488, a medium-severity vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC). An authenticated remote attacker with valid administrative credentials could read sensitive files from the underlying file system of an affected device. The files include key ma…
Cisco disclosed CVE-2026-20293, a high-severity UEFI Secure Boot bypass in the UEFI Shell of Cisco UCS Servers and UCS-based appliances. An authenticated attacker with a user or admin role, or an unauthenticated attacker with physical access, can bypass Secure Boot validation and execute unauthorized software. Cisco has released software …
