https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T02:40:17.290570+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06748 bdu:2023-06748 2026-10-08T02:40:17.381979+00:00 bdu:2023-06748 https://cve.radiocsirt.org/vuln/cisco-sa-rdocker-uatbukkn cisco-sa-rdocker-uATbukKn — Cisco IOx Application Hosting Environment Privilege Escalation Vulnerability 2026-10-08T02:40:17.382017+00:00

A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user. This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

 https://cve.radiocsirt.org/vuln/euvd-2026-270657 EUVD-2026-270657 2026-10-08T02:40:17.382051+00:00 EUVD-2026-270657 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20235 fkie_cve-2023-20235 2026-10-08T02:40:17.382064+00:00

A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user. This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.

 https://cve.radiocsirt.org/vuln/ghsa-j6h7-r25f-wgww GHSA-j6h7-r25f-wgww 2026-10-08T02:40:17.382089+00:00

A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user.

This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.

 https://cve.radiocsirt.org/vuln/gsd-2023-20235 gsd-2023-20235 2026-10-08T02:40:17.382108+00:00 gsd-2023-20235 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2568 WID-SEC-W-2023-2568 — Cisco IOS XE: Schwachstelle ermöglicht Erlangen von Administratorrechten 2026-10-08T02:40:17.382119+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco IOS XE ausnutzen, um Administratorrechte zu erlangen.