https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T19:59:48.150431+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-01555 bdu:2025-01555 2026-10-28T19:59:48.159290+00:00 bdu:2025-01555 https://cve.radiocsirt.org/vuln/cisco-sa-expressway-xss-uexuzrew cisco-sa-expressway-xss-uexUZrEW — Cisco Expressway Series Cross-Site Scripting Vulnerability 2026-10-28T19:59:48.159339+00:00

A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Note: Cisco Expressway Series refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

 https://cve.radiocsirt.org/vuln/cnvd-2025-03527 cnvd-2025-03527 2026-10-28T19:59:48.159395+00:00 cnvd-2025-03527 https://cve.radiocsirt.org/vuln/euvd-2026-213711 EUVD-2026-213711 2026-10-28T19:59:48.159418+00:00 EUVD-2026-213711 https://cve.radiocsirt.org/vuln/fkie_cve-2025-20179 fkie_cve-2025-20179 2026-10-28T19:59:48.159431+00:00

A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Note: Cisco Expressway Series refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.

 https://cve.radiocsirt.org/vuln/ghsa-vp2c-rcm4-hf9q GHSA-vp2c-rcm4-hf9q 2026-10-28T19:59:48.159458+00:00

A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.

This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Note: Cisco Expressway Series refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0280 WID-SEC-W-2025-0280 — Cisco Expressway: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-28T19:59:48.159480+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Expressway ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.