https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:27:14.922888+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-11706 bdu:2025-11706 2026-10-04T02:27:15.002087+00:00 bdu:2025-11706 https://cve.radiocsirt.org/vuln/certfr-2025-ale-013 certfr-2025-ale-013 — **<span class="important-content">[Mise à jour du 07 novembre 2025]</span>** Le 5 novembre 2025, Cisco a mis a jour so… 2026-10-04T02:27:15.002122+00:00 certfr-2025-ale-013 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0819 certfr-2025-avi-0819 — De multiples vulnérabilités ont été découvertes dans les produits Cisco. Elles permettent à un attaquant de provoquer u… 2026-10-04T02:27:15.002145+00:00 certfr-2025-avi-0819 https://cve.radiocsirt.org/vuln/cisco-sa-asaftd-webvpn-z5xp8eub cisco-sa-asaftd-webvpn-z5xP8EUB — Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server R… 2026-10-04T02:27:15.002159+00:00

Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial of service (DoS) conditions. Cisco strongly recommends that all customers upgrade to the fixed software releases that are listed in the Fixed Software ["#fs"] section of this advisory. A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of the affected device. Cisco has released software updates that address this vulnerability. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability. There are no workarounds that address this vulnerability. For more information on the vulnerability that is described in this advisory, see Cisco Event Response: Continued Att…

 https://cve.radiocsirt.org/vuln/euvd-2026-271967 EUVD-2026-271967 2026-10-04T02:27:15.002201+00:00 EUVD-2026-271967 https://cve.radiocsirt.org/vuln/fkie_cve-2025-20333 fkie_cve-2025-20333 2026-10-04T02:27:15.002213+00:00

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of the affected device.

 https://cve.radiocsirt.org/vuln/ghsa-vg93-6w2x-3cvp GHSA-vg93-6w2x-3cvp 2026-10-04T02:27:15.002237+00:00

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device.

This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of the affected device.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2142 WID-SEC-W-2025-2142 — Cisco ASA, FTD, IOS, IOS XE, IOS XR: Mehrere Schwachstellen 2026-10-04T02:27:15.002256+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Cisco ASA (Adaptive Security Appliance), Cisco Secure Firewall Threat Defense, Cisco IOS, Cisco IOS XE und Cisco IOS XR ausnutzen, um die Authentisierung zu umgehen und beliebigen Programmcode mit Administratorrechten auszuführen.