https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:41:19.793520+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02559 bdu:2024-02559 2026-10-04T19:41:19.801065+00:00 bdu:2024-02559 https://cve.radiocsirt.org/vuln/cisco-sa-dmi-acl-bypass-xv8fo8vz cisco-sa-dmi-acl-bypass-Xv8FO8Vz — Cisco IOS XE Software NETCONF/RESTCONF IPv4 Access Control List Bypass Vulnerability 2026-10-04T19:41:19.801110+00:00

A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list (ACL). This vulnerability is due to improper handling of error conditions when a successfully authorized device administrator updates an IPv4 ACL using the NETCONF or RESTCONF protocol, and the update would reorder access control entries (ACEs) in the updated ACL. An attacker could exploit this vulnerability by accessing resources that should have been protected across an affected device. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. This advisory is part of the March 2024 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: March 2024 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75056"].

 https://cve.radiocsirt.org/vuln/euvd-2026-3664 EUVD-2026-3664 2026-10-04T19:41:19.801150+00:00 EUVD-2026-3664 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20316 fkie_cve-2024-20316 2026-10-04T19:41:19.801166+00:00

A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list (ACL). This vulnerability is due to improper handling of error conditions when a successfully authorized device administrator updates an IPv4 ACL using the NETCONF or RESTCONF protocol, and the update would reorder access control entries (ACEs) in the updated ACL. An attacker could exploit this vulnerability by accessing resources that should have been protected across an affected device.

 https://cve.radiocsirt.org/vuln/ghsa-6rx6-h35g-58g2 GHSA-6rx6-h35g-58g2 2026-10-04T19:41:19.801192+00:00

A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list (ACL).

This vulnerability is due to improper handling of error conditions when a successfully authorized device administrator updates an IPv4 ACL using the NETCONF or RESTCONF protocol, and the update would reorder access control entries (ACEs) in the updated ACL. An attacker could exploit this vulnerability by accessing resources that should have been protected across an affected device.

 https://cve.radiocsirt.org/vuln/gsd-2024-20316 gsd-2024-20316 2026-10-04T19:41:19.801212+00:00 gsd-2024-20316 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0745 WID-SEC-W-2024-0745 — Cisco IOS XE: Mehrere Schwachstellen 2026-10-04T19:41:19.801224+00:00

Ein Angreifer kann mehrere Schwachstellen in Cisco IOS XE ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuführen.