https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T13:27:02.412940+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-03040 bdu:2019-03040 2026-10-27T13:27:02.416960+00:00 bdu:2019-03040 https://cve.radiocsirt.org/vuln/cisco-sa-20190821-iosxe-ngwc-csrf cisco-sa-20190821-iosxe-ngwc-csrf — Cisco IOS XE NGWC Legacy Wireless Device Manager GUI Cross-Site Request Forgery Vulnerability 2026-10-27T13:27:02.416994+00:00

A vulnerability in the web-based management interface of Cisco IOS XE New Generation Wireless Controller (NGWC) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on an affected device by using a web browser and with the privileges of the user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

 https://cve.radiocsirt.org/vuln/cnvd-2019-36650 cnvd-2019-36650 2026-10-27T13:27:02.417027+00:00 cnvd-2019-36650 https://cve.radiocsirt.org/vuln/euvd-2026-202975 EUVD-2026-202975 2026-10-27T13:27:02.417041+00:00 EUVD-2026-202975 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12624 fkie_cve-2019-12624 2026-10-27T13:27:02.417052+00:00

A vulnerability in the web-based management interface of Cisco IOS XE New Generation Wireless Controller (NGWC) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on an affected device by using a web browser and with the privileges of the user.

 https://cve.radiocsirt.org/vuln/ghsa-2wvv-vggf-ggr9 GHSA-2wvv-vggf-ggr9 2026-10-27T13:27:02.417075+00:00

A vulnerability in the web-based management interface of Cisco IOS XE New Generation Wireless Controller (NGWC) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on an affected device by using a web browser and with the privileges of the user.

 https://cve.radiocsirt.org/vuln/gsd-2019-12624 gsd-2019-12624 2026-10-27T13:27:02.417092+00:00 gsd-2019-12624