CVE Notifier

CVE-2026-63506 CWE-639 8.8

Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site

Tina is a headless content management system. Prior to @tinacms/auth 1.1.4 and next-tinacms-azure 15.0.1, isAuthorized accepts a request-controlled clientID and asks isUserAuthorized to validate the bearer token against …

cve.org tinacms:tinacms · @tinacms:auth · tinacms:next-tinacms-azure 6 hari lalu

CVE-2026-76426 CWE-89 4.9

Cisco ISE REST API SQL Injection Vulnerability

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the monitoring database. This vulnerability is due to insufficient …

cve.org Cisco:Cisco · Identity · Services 6 hari lalu

CVE-2026-20121 CWE-284 5.3

CIsco FTD Bypass Access List

A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could …

cve.org Cisco:Cisco · Secure · Firewall 6 hari lalu

CVE-2026-76431 CWE-22 4.9

Cisco Identity Services Engine Arbitrary File Deletion Vulnerability

A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to delete arbitrary files and directories on an affected …

cve.org Cisco:Cisco · Identity · Services 6 hari lalu

CVE-2026-76427 CWE-611 4.9

Cisco ISE XML External Entity Injection Vulnerability

A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files that are stored on an affected device. This vulnerability is due to the parsing o…

cve.org Cisco:Cisco · Identity · Services 6 hari lalu

CVE-2026-76447 CWE-306 5.3

Cisco Identity Services Engine Certificate Reload Vulnerability

A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to cause an administrative reload of the OCSP responder certificat…

cve.org Cisco:Cisco · Identity · Services 6 hari lalu

CVE-2026-20287 CWE-269 6.5

Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensiv…

cve.org Cisco:Cisco · Identity · Services 6 hari lalu

CVE-2026-20285 CWE-285 4.3

Cisco Identity Services Engine Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to modify parts of the config…

cve.org Cisco:Cisco · Identity · Services 6 hari lalu

CVE-2026-20286 CWE-285 4.3

Cisco Identity Services Engine Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Identify Services Engine (ISE) could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerabilit…

cve.org Cisco:Cisco · Identity · Services 6 hari lalu

CVE-2026-76438 CWE-863 6.5

Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. …

cve.org Cisco:Cisco · BroadWorks 6 hari lalu

CVE-2026-20072 CWE-863 4.9

ISE information disclosure

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users that are outside the security group that the attacker is…

cve.org Cisco:Cisco · Identity · Services 6 hari lalu

CVE-2026-76446 CWE-611 4.9

Cisco Identity Services Engine External Entity Injection Vulnerability

A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affected device. This vulnerability is due to…

cve.org Cisco:Cisco · Identity · Services 6 hari lalu