https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:08:28.170420+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-02320 bdu:2026-02320 2026-10-03T06:08:28.176424+00:00 bdu:2026-02320 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0210 certfr-2026-avi-0210 — De multiples vulnérabilités ont été découvertes dans Cisco Catalyst SD-WAN. Certaines d'entre elles permettent à un att… 2026-10-03T06:08:28.176457+00:00 certfr-2026-avi-0210 https://cve.radiocsirt.org/vuln/cisco-sa-sdwan-authbp-qwcx8d4v cisco-sa-sdwan-authbp-qwCX8D4v — Cisco Catalyst SD-WAN Vulnerabilities 2026-10-03T06:08:28.176476+00:00

Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an attacker to access an affected system, elevate privileges to root, gain access to sensitive information, and overwrite arbitrary files. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.

 https://cve.radiocsirt.org/vuln/euvd-2026-292161 EUVD-2026-292161 2026-10-03T06:08:28.176509+00:00 EUVD-2026-292161 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20128 fkie_cve-2026-20128 2026-10-03T06:08:28.176521+00:00

A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request and reading the file that contains the DCA password from that affected system. A successful exploit could allow the attacker to access another affected system and gain DCA user privileges. Note: Cisco Catalyst SD-WAN Manager releases 20.18 and later are not affected by this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-mp6j-7g85-8pg2 GHSA-mp6j-7g85-8pg2 2026-10-03T06:08:28.176545+00:00

A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker to gain DCA user privileges on an affected system. To exploit this vulnerability, the attacker must have valid vmanage credentials on the affected system.

This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by accessing the filesystem as a low-privileged user and reading the file that contains the DCA password from that affected system. A successful exploit could allow the attacker to access another affected system and gain DCA user privileges. Note: Cisco Catalyst SD-WAN Manager releases 20.18 and later are not affected by this vulnerability.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0071 NCSC-2026-0071 — Kwetsbaarheden verholpen in Cisco Catalyst SD-WAN Manager 2026-10-03T06:08:28.176564+00:00 NCSC-2026-0071 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0516 WID-SEC-W-2026-0516 — Cisco Catalyst SD-WAN Manager und SD-WAN Controller: Mehrere Schwachstellen 2026-10-03T06:08:28.176584+00:00

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Cisco Catalyst SD-WAN Manager ausnutzen, um Administratorrechte zu erlangen, die Authentifizierung zu umgehen, Befehle mit Netadmin-Rechten auszuführen, sensible Systeminformationen zu lesen und beliebige Dateien auf dem System zu überschreiben.