https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:11:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-11238 bdu:2026-11238 https://cve.radiocsirt.org/vuln/bdu:2026-11238 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0975 certfr-2026-avi-0975 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0975 https://cve.radiocsirt.org/vuln/cisco-sa-cimc-arg-inject-upshdmfu <p>Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-cimc-arg-inject-upshdmfu https://cve.radiocsirt.org/vuln/euvd-2026-369066 EUVD-2026-369066 https://cve.radiocsirt.org/vuln/euvd-2026-369066 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20200 <p>A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root.&amp;nbsp; This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.&amp;nbsp;</p> <p>A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root.&amp;nbsp; This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.&amp;nbsp;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-20200 https://cve.radiocsirt.org/vuln/ghsa-xq7x-x23m-gmh8 <p>A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root.&amp;nbsp;</p> <p>This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.&amp;nbsp;</p> <p>A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root.&amp;nbsp;</p> <p>This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.&amp;nbsp;</p> https://cve.radiocsirt.org/vuln/ghsa-xq7x-x23m-gmh8 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2673 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Cisco Integrated Management Controller ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen oder beliebigen Code mit Root-Rechten auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Cisco Integrated Management Controller ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen oder beliebigen Code mit Root-Rechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2673