https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:45:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-06545 bdu:2026-06545 https://cve.radiocsirt.org/vuln/bdu:2026-06545 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0544 certfr-2026-avi-0544 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0544 https://cve.radiocsirt.org/vuln/cisco-sa-unity-rce-ssrf-henhuasy <p>Multiple vulnerabilities in Cisco Unity Connection could allow a remote attacker to execute arbitrary code on or conduct server-side request forgery (SSRF) attacks through an affected device. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in Cisco Unity Connection could allow a remote attacker to execute arbitrary code on or conduct server-side request forgery (SSRF) attacks through an affected device. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-unity-rce-ssrf-henhuasy https://cve.radiocsirt.org/vuln/euvd-2026-308778 EUVD-2026-308778 https://cve.radiocsirt.org/vuln/euvd-2026-308778 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20035 <p>A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device.</p> <p>A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-20035 https://cve.radiocsirt.org/vuln/ghsa-w7jh-xmq5-2m7v <p>A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected device.</p> <p>This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device.</p> <p>A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected device.</p> <p>This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device.</p> https://cve.radiocsirt.org/vuln/ghsa-w7jh-xmq5-2m7v https://cve.radiocsirt.org/vuln/ncsc-2026-0136 NCSC-2026-0136 https://cve.radiocsirt.org/vuln/ncsc-2026-0136 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1388 <p>Ein Angreifer kann mehrere Schwachstellen in Cisco Unity Connection ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen oder SSRF-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Cisco Unity Connection ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen oder SSRF-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1388