https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T19:22:38.248095+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08600 bdu:2023-08600 2026-10-09T19:22:38.344841+00:00 bdu:2023-08600 https://cve.radiocsirt.org/vuln/cisco-sa-asa-ssl-vpn-y88qom77 cisco-sa-asa-ssl-vpn-Y88QOm77 — Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Packet Validation Vulnerability 2026-10-09T19:22:38.344886+00:00

A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This vulnerability is due to improper validation of the packet's inner source IP address after decryption. An attacker could exploit this vulnerability by sending crafted packets through the tunnel. A successful exploit could allow the attacker to send a packet impersonating another VPN user's IP address. It is not possible for the attacker to receive return packets. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

 https://cve.radiocsirt.org/vuln/euvd-2026-7974 EUVD-2026-7974 2026-10-09T19:22:38.344923+00:00 EUVD-2026-7974 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20275 fkie_cve-2023-20275 2026-10-09T19:22:38.344936+00:00

A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This vulnerability is due to improper validation of the packet's inner source IP address after decryption. An attacker could exploit this vulnerability by sending crafted packets through the tunnel. A successful exploit could allow the attacker to send a packet impersonating another VPN user's IP address. It is not possible for the attacker to receive return packets.

 https://cve.radiocsirt.org/vuln/ghsa-6q64-g7xj-vc8f GHSA-6q64-g7xj-vc8f 2026-10-09T19:22:38.344967+00:00

A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This vulnerability is due to improper validation of the packet's inner source IP address after decryption. An attacker could exploit this vulnerability by sending crafted packets through the tunnel. A successful exploit could allow the attacker to send a packet impersonating another VPN user's IP address. It is not possible for the attacker to receive return packets.

 https://cve.radiocsirt.org/vuln/gsd-2023-20275 gsd-2023-20275 2026-10-09T19:22:38.344985+00:00 gsd-2023-20275 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3065 WID-SEC-W-2023-3065 — Cisco ASA (Adaptive Security Appliance): Schwachstelle ermöglicht Manipulation von Dateien 2026-10-09T19:22:38.344995+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco ASA (Adaptive Security Appliance) und Cisco Firepower ausnutzen, um Dateien zu manipulieren.