https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:15:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-06544 bdu:2026-06544 https://cve.radiocsirt.org/vuln/bdu:2026-06544 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0544 certfr-2026-avi-0544 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0544 https://cve.radiocsirt.org/vuln/cisco-sa-unity-rce-ssrf-henhuasy <p>Multiple vulnerabilities in Cisco Unity Connection could allow a remote attacker to execute arbitrary code on or conduct server-side request forgery (SSRF) attacks through an affected device. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in Cisco Unity Connection could allow a remote attacker to execute arbitrary code on or conduct server-side request forgery (SSRF) attacks through an affected device. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-unity-rce-ssrf-henhuasy https://cve.radiocsirt.org/vuln/euvd-2026-308864 EUVD-2026-308864 https://cve.radiocsirt.org/vuln/euvd-2026-308864 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20034 <p>A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of a targeted device.&amp;nbsp;To exploit this vulnerability, the attacker must have valid user credentials on the affected device.</p> <p>A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of a targeted device.&amp;nbsp;To exploit this vulnerability, the attacker must have valid user credentials on the affected device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-20034 https://cve.radiocsirt.org/vuln/ghsa-wfvp-xw34-rhwq <p>A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an affected device.</p> <p>This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of a targeted device.&amp;nbsp;To exploit this vulnerability, the attacker must have valid user credentials on the affected device.</p> <p>A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an affected device.</p> <p>This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of a targeted device.&amp;nbsp;To exploit this vulnerability, the attacker must have valid user credentials on the affected device.</p> https://cve.radiocsirt.org/vuln/ghsa-wfvp-xw34-rhwq https://cve.radiocsirt.org/vuln/ncsc-2026-0136 NCSC-2026-0136 https://cve.radiocsirt.org/vuln/ncsc-2026-0136 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1388 <p>Ein Angreifer kann mehrere Schwachstellen in Cisco Unity Connection ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen oder SSRF-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Cisco Unity Connection ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen oder SSRF-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1388