<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-05T11:27:30.910080+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2021-00708</id>
    <title>bdu:2021-00708</title>
    <updated>2026-10-05T11:27:30.914039+00:00</updated>
    <content>bdu:2021-00708</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2021-00708"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cisco-sa-ucs-invcert-eoprvckh</id>
    <title>cisco-sa-ucs-invcert-eOpRvCKH — Cisco Unified Computing System Central Software Improper Certificate Validation Vulnerability</title>
    <updated>2026-10-05T11:27:30.914078+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager (UCSM).

This vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to the registration API. A successful exploit could allow the attacker to register a rogue Cisco UCSM and gain access to Cisco UCS Central Software data and Cisco UCSM inventory data.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-invcert-eOpRvCKH ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-invcert-eOpRvCKH"]</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/cisco-sa-ucs-invcert-eoprvckh"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-200599</id>
    <title>EUVD-2026-200599</title>
    <updated>2026-10-05T11:27:30.914140+00:00</updated>
    <content>EUVD-2026-200599</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-200599"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2021-1354</id>
    <title>fkie_cve-2021-1354</title>
    <updated>2026-10-05T11:27:30.914167+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager (UCSM). This vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to the registration API. A successful exploit could allow the attacker to register a rogue Cisco UCSM and gain access to Cisco UCS Central Software data and Cisco UCSM inventory data.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2021-1354"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-grv9-44cv-g58h</id>
    <title>GHSA-grv9-44cv-g58h</title>
    <updated>2026-10-05T11:27:30.914223+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager (UCSM). This vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to the registration API. A successful exploit could allow the attacker to register a rogue Cisco UCSM and gain access to Cisco UCS Central Software data and Cisco UCSM inventory data.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-grv9-44cv-g58h"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2021-1354</id>
    <title>gsd-2021-1354</title>
    <updated>2026-10-05T11:27:30.914240+00:00</updated>
    <content>gsd-2021-1354</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2021-1354"/>
  </entry>
</feed>
