/
ttps_attack:T1190 × latest_source_host:sec.cloudapps.cisco.com × limpar

Resultados

6 casos · pág. 1/1

sec.cloudapps.cisco.com · medium

Cisco patches authenticated blind SQL injection in Unified Intelligence Center web management interface (CVE-2026-20327)

Cisco disclosed CVE-2026-20327, a blind SQL injection vulnerability in the web-based management interface of Cisco Unified Intelligence Center. An authenticated, local attacker could send a crafted request and read the contents of the device's internal database. Cisco rates the Security Impact as Medium. Software updates are available and…

sec.cloudapps.cisco.com · high

Cisco Finesse unauthenticated SSRF vulnerability (CVE-2026-20362) allows limited information disclosure

Cisco disclosed CVE-2026-20362, a server-side request forgery (SSRF) vulnerability in the web-based management interface of Cisco Finesse. An unauthenticated, remote attacker could exploit it by sending a crafted HTTP request to an affected device. Successful exploitation could expose limited sensitive information from services associated…

sec.cloudapps.cisco.com · critical

Cisco Catalyst SD-WAN Manager API authentication bypass (CVE-2026-76504) gives unauthenticated attackers admin access

Cisco disclosed a critical authentication bypass, CVE-2026-76504, in the API session-based authentication management of Cisco Catalyst SD-WAN Manager. An unauthenticated, remote attacker can send a crafted HTTP request and gain access to the API with the privileges of the admin user. Cisco has released software updates and states that no …

sec.cloudapps.cisco.com · critical

Cisco patches unauthenticated root RCE flaws in NX-OS NGOAM on Nexus 3000 and 9000 switches (CVE-2026-76485, -76486, -76501)

Cisco disclosed multiple critical vulnerabilities in the Next Generation OAM (NGOAM) feature of Cisco NX-OS Software, affecting Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an affected device. The flaws ar…

sec.cloudapps.cisco.com · critical

Cisco NX-OS NX-API unauthenticated RCE as root and DoS flaw (CVE-2026-76471) patched, no workarounds

Cisco disclosed a critical vulnerability, CVE-2026-76471, in the NX-API feature of Cisco NX-OS Software. An unauthenticated, remote attacker could use it to execute arbitrary code with root privileges or to cause a denial of service on an affected device. Cisco rates the Security Impact as Critical. Software updates are available and no w…

sec.cloudapps.cisco.com · critical

Cisco patches critical unauthenticated RCE in NX-OS MPLS OAM affecting Nexus 3000 and 9000 switches (CVE-2026-76465)

Cisco disclosed a critical vulnerability, CVE-2026-76465, in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an af…