https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:51:30 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-14816 bdu:2025-14816 https://cve.radiocsirt.org/vuln/bdu:2025-14816 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0968 certfr-2025-avi-0968 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0968 https://cve.radiocsirt.org/vuln/cisco-sa-cc-unauth-rce-qen8h7mq <p>Multiple vulnerabilities in the Java Remote Method Invocation (RMI) process of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to upload arbitrary files, bypass authentication, execute arbitrary commands, and elevate privileges to root. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in the Java Remote Method Invocation (RMI) process of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to upload arbitrary files, bypass authentication, execute arbitrary commands, and elevate privileges to root. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-cc-unauth-rce-qen8h7mq https://cve.radiocsirt.org/vuln/euvd-2026-271796 EUVD-2026-271796 https://cve.radiocsirt.org/vuln/euvd-2026-271796 https://cve.radiocsirt.org/vuln/fkie_cve-2025-20358 <p>A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissions pertaining to script creation and execution. This vulnerability is due to improper authentication mechanisms in the communication between the CCX Editor and an affected Unified CCX server. An attacker could exploit this vulnerability by redirecting the authentication flow to a malicious server and tricking the CCX Editor into believing the authentication was successful. A successful exploit could allow the attacker to create and execute arbitrary scripts on the underlying operating system of an affected Unified CCX server, as an internal non-root user account.</p> <p>A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissions pertaining to script creation and execution. This vulnerability is due to improper authentication mechanisms in the communication between the CCX Editor and an affected Unified CCX server. An attacker could exploit this vulnerability by redirecting the authentication flow to a malicious server and tricking the CCX Editor into believing the authentication was successful. A successful exploit could allow the attacker to create and execute arbitrary scripts on the underlying operating system of an affected Unified CCX server, as an internal non-root user account.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-20358 https://cve.radiocsirt.org/vuln/ghsa-w3hc-3vf9-xjj9 <p>A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissions pertaining to script creation and execution.</p> <p>This vulnerability is due to improper authentication mechanisms in the communication between the CCX Editor and an affected Unified CCX server. An attacker could exploit this vulnerability by redirecting the authentication flow to a malicious server and tricking the CCX Editor into believing the authentication was successful. A successful exploit could allow the attacker to create and execute arbitrary scripts on the underlying operating system of an affected Unified CCX server, as an internal non-root user account.</p> <p>A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissions pertaining to script creation and execution.</p> <p>This vulnerability is due to improper authentication mechanisms in the communication between the CCX Editor and an affected Unified CCX server. An attacker could exploit this vulnerability by redirecting the authentication flow to a malicious server and tricking the CCX Editor into believing the authentication was successful. A successful exploit could allow the attacker to create and execute arbitrary scripts on the underlying operating system of an affected Unified CCX server, as an internal non-root user account.</p> https://cve.radiocsirt.org/vuln/ghsa-w3hc-3vf9-xjj9 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2502 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Unified Contact Center Express (UCCX) ausnutzen, um beliebigen Code auszuführen – sogar mit Administratorrechten –, um sich Administratorrechte zu verschaffen und Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Unified Contact Center Express (UCCX) ausnutzen, um beliebigen Code auszuführen – sogar mit Administratorrechten –, um sich Administratorrechte zu verschaffen und Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2502