https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T06:56:15.473450+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-07914 bdu:2024-07914 2026-10-05T06:56:15.478701+00:00 bdu:2024-07914 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0813 certfr-2024-avi-0813 — De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaqu… 2026-10-05T06:56:15.478735+00:00 certfr-2024-avi-0813 https://cve.radiocsirt.org/vuln/cisco-sa-webui-csrf-ycuyxkko cisco-sa-webui-csrf-ycUYxkKO — Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability 2026-10-05T06:56:15.478754+00:00

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a cross-site request forgery (CSRF) attack and execute commands on the CLI of an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an already authenticated user to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on the affected device with the privileges of the targeted user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of the September 2024 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: September 2024 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75169"].

 https://cve.radiocsirt.org/vuln/euvd-2026-188301 EUVD-2026-188301 2026-10-05T06:56:15.478789+00:00 EUVD-2026-188301 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20437 fkie_cve-2024-20437 2026-10-05T06:56:15.478802+00:00

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a cross-site request forgery (CSRF) attack and execute commands on the CLI of an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an already authenticated user to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on the affected device with the privileges of the targeted user.

 https://cve.radiocsirt.org/vuln/ghsa-q2mj-f3x9-hwgq GHSA-q2mj-f3x9-hwgq 2026-10-05T06:56:15.478825+00:00

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a cross-site request forgery (CSRF) attack and execute commands on the CLI of an affected device.

This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an already authenticated user to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on the affected device with the privileges of the targeted user.

 https://cve.radiocsirt.org/vuln/gsd-2024-20437 gsd-2024-20437 2026-10-05T06:56:15.478843+00:00 gsd-2024-20437 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2221 WID-SEC-W-2024-2221 — Cisco IOS XE: Mehrere Schwachstellen 2026-10-05T06:56:15.478854+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco IOS XE ausnutzen, um einen Denial of Service Angriff durchzuführen, die Zugriffskontrollliste (ACL) vor der Authentifizierung zu umgehen oder Daten zu manipulieren.