https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T22:50:01.369684+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2012-avi-345 certa-2012-avi-345 — Quatre vulnérabilités ont été corrigées dans <span class="textit">Cisco AnyConnect Secure Mobility Client</span>. Deux… 2026-10-20T22:50:01.372778+00:00 certa-2012-avi-345 https://cve.radiocsirt.org/vuln/euvd-2026-175674 EUVD-2026-175674 2026-10-20T22:50:01.372814+00:00 EUVD-2026-175674 https://cve.radiocsirt.org/vuln/fkie_cve-2012-2493 fkie_cve-2012-2493 2026-10-20T22:50:01.372829+00:00

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug ID CSCtw47523.

 https://cve.radiocsirt.org/vuln/ghsa-vf8f-23mh-9x3q GHSA-vf8f-23mh-9x3q 2026-10-20T22:50:01.372857+00:00

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug ID CSCtw47523.

 https://cve.radiocsirt.org/vuln/gsd-2012-2493 gsd-2012-2493 2026-10-20T22:50:01.372874+00:00 gsd-2012-2493