https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:36:13 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-10344 bdu:2025-10344 https://cve.radiocsirt.org/vuln/bdu:2025-10344 https://cve.radiocsirt.org/vuln/cisco-sa-vos-command-inject-65s2ucyy <p>A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-vos-command-inject-65s2ucyy https://cve.radiocsirt.org/vuln/cnvd-2025-12343 cnvd-2025-12343 https://cve.radiocsirt.org/vuln/cnvd-2025-12343 https://cve.radiocsirt.org/vuln/euvd-2026-272828 EUVD-2026-272828 https://cve.radiocsirt.org/vuln/euvd-2026-272828 https://cve.radiocsirt.org/vuln/fkie_cve-2025-20278 <p>A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials.</p> <p>A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-20278 https://cve.radiocsirt.org/vuln/ghsa-qvpj-hmr8-j79p <p>A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user.</p> <p>This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials.</p> <p>A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user.</p> <p>This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials.</p> https://cve.radiocsirt.org/vuln/ghsa-qvpj-hmr8-j79p https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1242 <p>Ein lokaler Angreifer kann eine Schwachstelle in Cisco Unified Communications Produkte ausnutzen, um beliebigen Programmcode mit Root Rechten auszuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Cisco Unified Communications Produkte ausnutzen, um beliebigen Programmcode mit Root Rechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1242