https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:59:20.675115+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06545 bdu:2026-06545 2026-10-04T01:59:20.793047+00:00 bdu:2026-06545 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0544 certfr-2026-avi-0544 — De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaqu… 2026-10-04T01:59:20.793086+00:00 certfr-2026-avi-0544 https://cve.radiocsirt.org/vuln/cisco-sa-unity-rce-ssrf-henhuasy cisco-sa-unity-rce-ssrf-hENhuASy — Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities 2026-10-04T01:59:20.793106+00:00

Multiple vulnerabilities in Cisco Unity Connection could allow a remote attacker to execute arbitrary code on or conduct server-side request forgery (SSRF) attacks through an affected device. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

 https://cve.radiocsirt.org/vuln/euvd-2026-308778 EUVD-2026-308778 2026-10-04T01:59:20.793139+00:00 EUVD-2026-308778 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20035 fkie_cve-2026-20035 2026-10-04T01:59:20.793152+00:00

A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device.

 https://cve.radiocsirt.org/vuln/ghsa-w7jh-xmq5-2m7v GHSA-w7jh-xmq5-2m7v 2026-10-04T01:59:20.793176+00:00

A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected device.

This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0136 NCSC-2026-0136 — Kwetsbaarheden verholpen in Cisco Unity Connection 2026-10-04T01:59:20.793194+00:00 NCSC-2026-0136 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1388 WID-SEC-W-2026-1388 — Cisco Unity Connection: Mehrere Schwachstellen 2026-10-04T01:59:20.793214+00:00

Ein Angreifer kann mehrere Schwachstellen in Cisco Unity Connection ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen oder SSRF-Angriffe durchzuführen.