https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:34:14 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-04031 bdu:2025-04031 https://cve.radiocsirt.org/vuln/bdu:2025-04031 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0064 certfr-2025-avi-0064 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0064 https://cve.radiocsirt.org/vuln/cisco-sa-cmm-privesc-uy2vf8pc <p>A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to administrator on an affected device. This vulnerability exists because proper authorization is not enforced upon REST API users. An attacker could exploit this vulnerability by sending API requests to a specific endpoint. A successful exploit could allow the attacker to gain administrator-level control over edge nodes that are managed by Cisco Meeting Management. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to administrator on an affected device. This vulnerability exists because proper authorization is not enforced upon REST API users. An attacker could exploit this vulnerability by sending API requests to a specific endpoint. A successful exploit could allow the attacker to gain administrator-level control over edge nodes that are managed by Cisco Meeting Management. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-cmm-privesc-uy2vf8pc https://cve.radiocsirt.org/vuln/euvd-2026-273296 EUVD-2026-273296 https://cve.radiocsirt.org/vuln/euvd-2026-273296 https://cve.radiocsirt.org/vuln/fkie_cve-2025-20156 <p>A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to administrator on an affected device. This vulnerability exists because proper authorization is not enforced upon&amp;nbsp;REST API users. An attacker could exploit this vulnerability by sending API requests to a specific endpoint. A successful exploit could allow the attacker to gain administrator-level control over edge nodes that are managed by Cisco Meeting Management.</p> <p>A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to administrator on an affected device. This vulnerability exists because proper authorization is not enforced upon&amp;nbsp;REST API users. An attacker could exploit this vulnerability by sending API requests to a specific endpoint. A successful exploit could allow the attacker to gain administrator-level control over edge nodes that are managed by Cisco Meeting Management.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-20156 https://cve.radiocsirt.org/vuln/ghsa-8m34-ghfg-xxc2 <p>A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to administrator on an affected device.</p> <p>This vulnerability exists because proper authorization is not enforced upon&amp;nbsp;REST API users. An attacker could exploit this vulnerability by sending API requests to a specific endpoint. A successful exploit could allow the attacker to gain administrator-level control over edge nodes that are managed by Cisco Meeting Management.</p> <p>A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to administrator on an affected device.</p> <p>This vulnerability exists because proper authorization is not enforced upon&amp;nbsp;REST API users. An attacker could exploit this vulnerability by sending API requests to a specific endpoint. A successful exploit could allow the attacker to gain administrator-level control over edge nodes that are managed by Cisco Meeting Management.</p> https://cve.radiocsirt.org/vuln/ghsa-8m34-ghfg-xxc2 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0176 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Meeting Management ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Meeting Management ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0176