ttps_attack:T1059 × latest_source_host:sec.cloudapps.cisco.com × limpar

Resultados

2 casos · pág. 1/1

sec.cloudapps.cisco.com · há 1d medium

Cisco NX-OS Python sandbox escape (CVE-2026-20032) lets low-privileged local users run OS commands

Cisco disclosed CVE-2026-20032, a Medium-rated vulnerability in the Python interpreter of Cisco NX-OS Software. An authenticated local attacker with low privileges and Python execution rights can escape the Python sandbox and reach the underlying operating system of the device. The flaw stems from insufficient validation of user-supplied …

CVE-2026-20032

sec.cloudapps.cisco.com · há 1d medium

Cisco APIC API command injection flaw (CVE-2026-20321) allows authenticated root command execution

Cisco disclosed CVE-2026-20321, a command injection vulnerability in the web-based management API of Cisco Application Policy Infrastructure Controller (APIC). An authenticated, remote attacker with valid administrative credentials could execute arbitrary commands as root on the underlying operating system. Cisco rates the Security Impact…

CVE-2026-20321