CVE Notifier

CVE-2026-20309 CWE-79 6.1

Cisco Identity Services Engine Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the…

cve.org Cisco:Cisco · Identity · Services 6 hari lalu

CVE-2026-76428 CWE-89 4.9

Cisco ISE Profiler SQL Injection Vulnerability

A vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the session database. This vulnerability is due to certain paramet…

cve.org Cisco:Cisco · Identity · Services 6 hari lalu

CVE-2026-76433 CWE-22 5.3

Cisco Identity Services Engine Information Disclosure Vulnerability

A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected files on an affected device. This vulnerability is due to …

cve.org Cisco:Cisco · Identity · Services 6 hari lalu

CVE-2026-76439 CWE-306 5.3

Cisco Identity Services Engine Event Injection Vulnerability

A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status events into the endp…

cve.org Cisco:Cisco · Identity · Services 6 hari lalu

CVE-2026-20248 CWE-195 6.8

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability

A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attack…

cve.org Cisco:Cisco · Secure · Firewall 6 hari lalu

CVE-2026-20342 CWE-639 7.7

Cisco Secure Firewall Management Center Software Low Privileged Arbitrary File Download Vulnerability

A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability exists because user in…

cve.org Cisco:Cisco · Secure · Firewall 6 hari lalu

CVE-2026-20282 CWE-641 4.9

Cisco Identity Services Engine Authenticated Write Vulnerability

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-…

cve.org Cisco:Cisco · Identity · Services 6 hari lalu

CVE-2026-20323 CWE-295 8.3

Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Unauthorized Authentication Bypass Vulnerability

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to impersonate the peer device and obtain a…

cve.org Cisco:Cisco · Secure · Firewall 6 hari lalu

CVE-2026-76412 CWE-264 8.5

Cisco Secure Firewall Management Center Software Authenticated Privilege Escalation to Root Vulnerability

A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service. This vulnerability is due to an error wh…

cve.org Cisco:Cisco · Secure · Firewall 6 hari lalu

CVE-2026-20283 CWE-78 6.5

Cisco Identity Services Engine IPSec Open API Command Injection Vulnerability

A vulnerability in the IPsec Open API endpoint of Cisco ISE could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system.  This vulnerability is due to insufficien…

cve.org Cisco:Cisco · Identity · Services 6 hari lalu

CVE-2026-92527 CWE-918 6.3

chatwoot Shopify OAuth callbacks_controller.rb server-side request forgery

A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the file callbacks_controller.rb of the component Shopify OAuth. The manipulation leads to server-side request forgery. Remote …

cve.org n/a:chatwoot 6 hari lalu

CVE-2026-20333 CWE-697 8.8

Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management C…

cve.org Cisco:Cisco · Secure · Firewall 6 hari lalu