https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 20:32:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-10326 bdu:2025-10326 https://cve.radiocsirt.org/vuln/bdu:2025-10326 https://cve.radiocsirt.org/vuln/cisco-sa-webui-multi-arnhm4v6 <p>Multiple vulnerabilities in the web-based management interface of Cisco IOS XE Software could allow a remote attacker to read files from the underlying operating system, read limited parts of the configuration file, clear the syslog, or conduct a cross-site request forgery (CSRF) attack on an affected device, depending on their privilege level. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. This advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [&#34;https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279&#34;].</p> <p>Multiple vulnerabilities in the web-based management interface of Cisco IOS XE Software could allow a remote attacker to read files from the underlying operating system, read limited parts of the configuration file, clear the syslog, or conduct a cross-site request forgery (CSRF) attack on an affected device, depending on their privilege level. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. This advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [&#34;https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279&#34;].</p> https://cve.radiocsirt.org/vuln/cisco-sa-webui-multi-arnhm4v6 https://cve.radiocsirt.org/vuln/euvd-2026-273153 EUVD-2026-273153 https://cve.radiocsirt.org/vuln/euvd-2026-273153 https://cve.radiocsirt.org/vuln/fkie_cve-2025-20194 <p>A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to read limited files from the underlying operating system or clear the syslog and licensing logs on the affected device.</p> <p>A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to read limited files from the underlying operating system or clear the syslog and licensing logs on the affected device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-20194 https://cve.radiocsirt.org/vuln/ghsa-rwj7-gqqr-3hm7 <p>A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device.</p> <p>This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to read limited files from the underlying operating system or clear the syslog and licensing logs on the affected device.</p> <p>A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device.</p> <p>This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to read limited files from the underlying operating system or clear the syslog and licensing logs on the affected device.</p> https://cve.radiocsirt.org/vuln/ghsa-rwj7-gqqr-3hm7 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0977 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Cisco IOS XE Software Web-Based Management Interface ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen, Daten zu manipulieren oder Code auszuführen</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Cisco IOS XE Software Web-Based Management Interface ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen, Daten zu manipulieren oder Code auszuführen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0977