https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T11:19:49.623426+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-07739 bdu:2024-07739 2026-10-05T11:19:49.747114+00:00 bdu:2024-07739 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0833 certfr-2024-avi-0833 — De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaqu… 2026-10-05T11:19:49.747163+00:00 certfr-2024-avi-0833 https://cve.radiocsirt.org/vuln/cisco-sa-ndfc-cmdinj-uvyzrkfr cisco-sa-ndfc-cmdinj-UvYZrKfr — Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability 2026-10-05T11:19:49.747184+00:00

A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a command injection attack against an affected device. This vulnerability is due to improper user authorization and insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted commands to an affected REST API endpoint or through the web UI. A successful exploit could allow the attacker to execute arbitrary commands on the CLI of a Cisco NDFC-managed device with network-admin privileges. Note: This vulnerability does not affect Cisco NDFC when it is configured for storage area network (SAN) controller deployment. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

 https://cve.radiocsirt.org/vuln/euvd-2026-278612 EUVD-2026-278612 2026-10-05T11:19:49.747237+00:00 EUVD-2026-278612 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20432 fkie_cve-2024-20432 2026-10-05T11:19:49.747252+00:00

A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a command injection attack against an affected device.   This vulnerability is due to improper user authorization and insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted commands to an affected REST API endpoint or through the web UI. A successful exploit could allow the attacker to execute arbitrary commands on the CLI of a Cisco NDFC-managed device with network-admin privileges.   Note: This vulnerability does not affect Cisco NDFC when it is configured for storage area network (SAN) controller deployment.

 https://cve.radiocsirt.org/vuln/ghsa-whcp-4cj3-66x2 GHSA-whcp-4cj3-66x2 2026-10-05T11:19:49.747281+00:00

A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a command injection attack against an affected device.   This vulnerability is due to improper user authorization and insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted commands to an affected REST API endpoint or through the web UI. A successful exploit could allow the attacker to execute arbitrary commands on the CLI of a Cisco NDFC-managed device with network-admin privileges.   Note: This vulnerability does not affect Cisco NDFC when it is configured for storage area network (SAN) controller deployment.

 https://cve.radiocsirt.org/vuln/gsd-2024-20432 gsd-2024-20432 2026-10-05T11:19:49.747301+00:00 gsd-2024-20432 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3072 WID-SEC-W-2024-3072 — Cisco Nexus Dashboard und Nexus Dashboard Fabric Controller: Mehrere Schwachstellen 2026-10-05T11:19:49.747312+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Cisco Nexus Dashboard ausnutzen, um Informationen offenzulegen Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen.