https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T11:32:44.090341+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07274 bdu:2026-07274 2026-10-15T11:32:44.106642+00:00 bdu:2026-07274 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0628 certfr-2026-avi-0628 — Une vulnérabilité a été découverte dans Cisco Secure Workload. Elle permet à un attaquant de provoquer un contournement… 2026-10-15T11:32:44.106702+00:00 certfr-2026-avi-0628 https://cve.radiocsirt.org/vuln/cisco-sa-csw-pnbsa-g8wenuy cisco-sa-csw-pnbsa-g8WEnuy — Cisco Secure Workload Unauthorized API Access Vulnerability 2026-10-15T11:32:44.106728+00:00

A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role. This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the Site Admin user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

 https://cve.radiocsirt.org/vuln/cnvd-2026-25126 cnvd-2026-25126 2026-10-15T11:32:44.106768+00:00 cnvd-2026-25126 https://cve.radiocsirt.org/vuln/euvd-2026-319785 EUVD-2026-319785 2026-10-15T11:32:44.106785+00:00 EUVD-2026-319785 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20223 fkie_cve-2026-20223 2026-10-15T11:32:44.106800+00:00

A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role. This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the Site Admin user. 

 https://cve.radiocsirt.org/vuln/ghsa-p3hw-qj46-c684 GHSA-p3hw-qj46-c684 2026-10-15T11:32:44.106832+00:00

A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role.

This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the Site Admin user. 

 https://cve.radiocsirt.org/vuln/ncsc-2026-0167 NCSC-2026-0167 — Kwetsbaarheid verholpen in Cisco Secure Workload 2026-10-15T11:32:44.106859+00:00 NCSC-2026-0167 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1658 WID-SEC-W-2026-1658 — Cisco Secure Workload: Schwachstelle ermöglicht Erlangen von Administratorrechten 2026-10-15T11:32:44.106882+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Secure Workload ausnutzen, um Administratorrechte zu erlangen.