https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:40:55 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-05654 bdu:2025-05654 https://cve.radiocsirt.org/vuln/bdu:2025-05654 https://cve.radiocsirt.org/vuln/cisco-sa-apic-multi-vulns-9ummtg5 <p>Multiple vulnerabilities in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated attacker to access sensitive information, execute arbitrary commands, cause a denial of service (DoS) condition, or perform cross-site scripting (XSS) attacks. To exploit these vulnerabilities, the attacker must have valid administrative credentials. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated attacker to access sensitive information, execute arbitrary commands, cause a denial of service (DoS) condition, or perform cross-site scripting (XSS) attacks. To exploit these vulnerabilities, the attacker must have valid administrative credentials. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-apic-multi-vulns-9ummtg5 https://cve.radiocsirt.org/vuln/euvd-2026-220266 EUVD-2026-220266 https://cve.radiocsirt.org/vuln/euvd-2026-220266 https://cve.radiocsirt.org/vuln/fkie_cve-2025-20118 <p>A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient masking of sensitive information that is displayed through system CLI commands. An attacker could exploit this vulnerability by using reconnaissance techniques at the device CLI. A successful exploit could allow the attacker to access sensitive information on an affected device that could be used for additional attacks.</p> <p>A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient masking of sensitive information that is displayed through system CLI commands. An attacker could exploit this vulnerability by using reconnaissance techniques at the device CLI. A successful exploit could allow the attacker to access sensitive information on an affected device that could be used for additional attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-20118 https://cve.radiocsirt.org/vuln/ghsa-hgqp-f75h-6p8r <p>A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.</p> <p>This vulnerability is due to insufficient masking of sensitive information that is displayed through system CLI commands. An attacker could exploit this vulnerability by using reconnaissance techniques at the device CLI. A successful exploit could allow the attacker to access sensitive information on an affected device that could be used for additional attacks.</p> <p>A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.</p> <p>This vulnerability is due to insufficient masking of sensitive information that is displayed through system CLI commands. An attacker could exploit this vulnerability by using reconnaissance techniques at the device CLI. A successful exploit could allow the attacker to access sensitive information on an affected device that could be used for additional attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-hgqp-f75h-6p8r https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0445 <p>Ein entfernter authentisierter oder lokaler Angreifer kann mehrere Schwachstellen im Cisco Application Policy Infrastructure Controller ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, beliebige Kommandos als Root auszuführen, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter authentisierter oder lokaler Angreifer kann mehrere Schwachstellen im Cisco Application Policy Infrastructure Controller ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, beliebige Kommandos als Root auszuführen, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0445