https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:22:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-10324 bdu:2025-10324 https://cve.radiocsirt.org/vuln/bdu:2025-10324 https://cve.radiocsirt.org/vuln/cisco-sa-webui-multi-arnhm4v6 <p>Multiple vulnerabilities in the web-based management interface of Cisco IOS XE Software could allow a remote attacker to read files from the underlying operating system, read limited parts of the configuration file, clear the syslog, or conduct a cross-site request forgery (CSRF) attack on an affected device, depending on their privilege level. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. This advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [&#34;https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279&#34;].</p> <p>Multiple vulnerabilities in the web-based management interface of Cisco IOS XE Software could allow a remote attacker to read files from the underlying operating system, read limited parts of the configuration file, clear the syslog, or conduct a cross-site request forgery (CSRF) attack on an affected device, depending on their privilege level. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. This advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [&#34;https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279&#34;].</p> https://cve.radiocsirt.org/vuln/cisco-sa-webui-multi-arnhm4v6 https://cve.radiocsirt.org/vuln/euvd-2026-238283 EUVD-2026-238283 https://cve.radiocsirt.org/vuln/euvd-2026-238283 https://cve.radiocsirt.org/vuln/fkie_cve-2025-20195 <p>A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and execute commands on the CLI of an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an already authenticated user to follow a crafted link. A successful exploit could allow the attacker to clear the syslog, parser, and licensing logs on the affected device if the targeted user has privileges to clear those logs.</p> <p>A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and execute commands on the CLI of an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an already authenticated user to follow a crafted link. A successful exploit could allow the attacker to clear the syslog, parser, and licensing logs on the affected device if the targeted user has privileges to clear those logs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-20195 https://cve.radiocsirt.org/vuln/ghsa-cxc6-3424-fr63 <p>A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and execute commands on the CLI of an affected device.</p> <p>This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an already authenticated user to follow a crafted link. A successful exploit could allow the attacker to clear the syslog, parser, and licensing logs on the affected device if the targeted user has privileges to clear those logs.</p> <p>A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and execute commands on the CLI of an affected device.</p> <p>This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an already authenticated user to follow a crafted link. A successful exploit could allow the attacker to clear the syslog, parser, and licensing logs on the affected device if the targeted user has privileges to clear those logs.</p> https://cve.radiocsirt.org/vuln/ghsa-cxc6-3424-fr63 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0977 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Cisco IOS XE Software Web-Based Management Interface ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen, Daten zu manipulieren oder Code auszuführen</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Cisco IOS XE Software Web-Based Management Interface ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen, Daten zu manipulieren oder Code auszuführen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0977