<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-12T07:12:48.254261+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2020-04607</id>
    <title>bdu:2020-04607</title>
    <updated>2026-10-12T07:12:48.259449+00:00</updated>
    <content>bdu:2020-04607</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2020-04607"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2020-avi-603</id>
    <title>certfr-2020-avi-603 — De multiples vulnérabilités ont été découvertes dans certains produits
Cisco. Elles permettent à un attaquant de provoq…</title>
    <updated>2026-10-12T07:12:48.259478+00:00</updated>
    <content>certfr-2020-avi-603</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2020-avi-603"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cisco-sa-webui-auth-bypass-6j2byuc7</id>
    <title>cisco-sa-webui-auth-bypass-6j2BYUc7 — Cisco IOS XE Software Web UI Authorization Bypass Vulnerability</title>
    <updated>2026-10-12T07:12:48.259496+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to utilize parts of the web UI for which they are not authorized.

The vulnerability is due to insufficient authorization of web UI access requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web UI. A successful exploit could allow the attacker to utilize parts of the web UI for which they are not authorized. This could allow a Read-Only user to perform actions of an Admin user.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.



This advisory is part of the September 24, 2020, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 25 Cisco Security Advisories that describe 34 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: September 2020 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-74268"].</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/cisco-sa-webui-auth-bypass-6j2byuc7"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-201263</id>
    <title>EUVD-2026-201263</title>
    <updated>2026-10-12T07:12:48.259530+00:00</updated>
    <content>EUVD-2026-201263</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-201263"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2020-3400</id>
    <title>fkie_cve-2020-3400</title>
    <updated>2026-10-12T07:12:48.259542+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to utilize parts of the web UI for which they are not authorized.The vulnerability is due to insufficient authorization of web UI access requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web UI. A successful exploit could allow the attacker to utilize parts of the web UI for which they are not authorized. This could allow a Read-Only user to perform actions of an Admin user.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2020-3400"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-wpmp-jhx9-xgq5</id>
    <title>GHSA-wpmp-jhx9-xgq5</title>
    <updated>2026-10-12T07:12:48.259564+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to utilize parts of the web UI for which they are not authorized.The vulnerability is due to insufficient authorization of web UI access requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web UI. A successful exploit could allow the attacker to utilize parts of the web UI for which they are not authorized. This could allow a Read-Only user to perform actions of an Admin user.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-wpmp-jhx9-xgq5"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2020-3400</id>
    <title>gsd-2020-3400</title>
    <updated>2026-10-12T07:12:48.259581+00:00</updated>
    <content>gsd-2020-3400</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2020-3400"/>
  </entry>
</feed>
