https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T15:16:55.437357+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-05134 bdu:2021-05134 2026-10-09T15:16:55.441621+00:00 bdu:2021-05134 https://cve.radiocsirt.org/vuln/cisco-sa-iosxe-h323alg-bypass-4vy2mp2q cisco-sa-iosxe-h323alg-bypass-4vy2MP2Q — Cisco IOS XE Software H.323 Application Level Gateway Bypass Vulnerability 2026-10-09T15:16:55.441656+00:00

A vulnerability in the H.323 application level gateway (ALG) used by the Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass the ALG. This vulnerability is due to insufficient data validation of traffic that is traversing the ALG. An attacker could exploit this vulnerability by sending crafted traffic to a targeted device. A successful exploit could allow the attacker to bypass the ALG and open connections that should not be allowed to a remote device located behind the ALG. Note: This vulnerability has been publicly discussed as NAT Slipstreaming ["https://samy.pl/slipstream/"]. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of the September 2021 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: September 2021 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication. ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-74581"]

 https://cve.radiocsirt.org/vuln/euvd-2026-200118 EUVD-2026-200118 2026-10-09T15:16:55.441695+00:00 EUVD-2026-200118 https://cve.radiocsirt.org/vuln/fkie_cve-2021-1616 fkie_cve-2021-1616 2026-10-09T15:16:55.441709+00:00

A vulnerability in the H.323 application level gateway (ALG) used by the Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass the ALG. This vulnerability is due to insufficient data validation of traffic that is traversing the ALG. An attacker could exploit this vulnerability by sending crafted traffic to a targeted device. A successful exploit could allow the attacker to bypass the ALG and open connections that should not be allowed to a remote device located behind the ALG. Note: This vulnerability has been publicly discussed as NAT Slipstreaming.

 https://cve.radiocsirt.org/vuln/ghsa-gh89-2x3x-p7j7 GHSA-gh89-2x3x-p7j7 2026-10-09T15:16:55.441733+00:00

A vulnerability in the H.323 application level gateway (ALG) used by the Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass the ALG. This vulnerability is due to insufficient data validation of traffic that is traversing the ALG. An attacker could exploit this vulnerability by sending crafted traffic to a targeted device. A successful exploit could allow the attacker to bypass the ALG and open connections that should not be allowed to a remote device located behind the ALG. Note: This vulnerability has been publicly discussed as NAT Slipstreaming.

 https://cve.radiocsirt.org/vuln/gsd-2021-1616 gsd-2021-1616 2026-10-09T15:16:55.441750+00:00 gsd-2021-1616