https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:15:22.212652+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-11751 bdu:2025-11751 2026-10-04T06:15:22.291915+00:00 bdu:2025-11751 https://cve.radiocsirt.org/vuln/certfr-2025-ale-013 certfr-2025-ale-013 — **<span class="important-content">[Mise à jour du 07 novembre 2025]</span>** Le 5 novembre 2025, Cisco a mis a jour so… 2026-10-04T06:15:22.291953+00:00 certfr-2025-ale-013 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0819 certfr-2025-avi-0819 — De multiples vulnérabilités ont été découvertes dans les produits Cisco. Elles permettent à un attaquant de provoquer u… 2026-10-04T06:15:22.291976+00:00 certfr-2025-avi-0819 https://cve.radiocsirt.org/vuln/cisco-sa-asaftd-webvpn-yrootuw cisco-sa-asaftd-webvpn-YROOTUW — Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server U… 2026-10-04T06:15:22.291989+00:00

Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial of service (DoS) conditions. Cisco strongly recommends that all customers upgrade to the fixed software releases that are listed in the Fixed Software ["#fs"] section of this advisory. A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should otherwise be inaccessible without authentication. This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web server on a device. A successful exploit could allow the attacker to access a restricted URL without authentication. Cisco has released software updates that address this vulnerability. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability. There are no workarounds that address this vulnerability. For more information on the vulnerability that is described in this advisory, see Cisco Event Respon…

 https://cve.radiocsirt.org/vuln/euvd-2026-271964 EUVD-2026-271964 2026-10-04T06:15:22.292031+00:00 EUVD-2026-271964 https://cve.radiocsirt.org/vuln/fkie_cve-2025-20362 fkie_cve-2025-20362 2026-10-04T06:15:22.292043+00:00

Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial of service (DoS) conditions. Cisco strongly recommends that all customers upgrade to the fixed software releases that are listed in the Fixed Software ["#fs"] section of this advisory. A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should otherwise be inaccessible without authentication. This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web server on a device. A successful exploit could allow the attacker to access a restricted URL without authentication.

 https://cve.radiocsirt.org/vuln/ghsa-wx28-57x9-xv5f GHSA-wx28-57x9-xv5f 2026-10-04T06:15:22.292072+00:00

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to access restricted URL endpoints without authentication that should otherwise be inaccessible without authentication.

This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web server on a device. A successful exploit could allow the attacker to access a restricted URL without authentication.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2142 WID-SEC-W-2025-2142 — Cisco ASA, FTD, IOS, IOS XE, IOS XR: Mehrere Schwachstellen 2026-10-04T06:15:22.292091+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Cisco ASA (Adaptive Security Appliance), Cisco Secure Firewall Threat Defense, Cisco IOS, Cisco IOS XE und Cisco IOS XR ausnutzen, um die Authentisierung zu umgehen und beliebigen Programmcode mit Administratorrechten auszuführen.