https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 12:16:55 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-07274 bdu:2026-07274 https://cve.radiocsirt.org/vuln/bdu:2026-07274 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0628 certfr-2026-avi-0628 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0628 https://cve.radiocsirt.org/vuln/cisco-sa-csw-pnbsa-g8wenuy <p>A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role. This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the Site Admin user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role. This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the Site Admin user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-csw-pnbsa-g8wenuy https://cve.radiocsirt.org/vuln/cnvd-2026-25126 cnvd-2026-25126 https://cve.radiocsirt.org/vuln/cnvd-2026-25126 https://cve.radiocsirt.org/vuln/euvd-2026-319785 EUVD-2026-319785 https://cve.radiocsirt.org/vuln/euvd-2026-319785 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20223 <p>A vulnerability in the&amp;nbsp;access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the&amp;nbsp;Site Admin role. This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the&amp;nbsp;Site Admin user.&amp;nbsp;</p> <p>A vulnerability in the&amp;nbsp;access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the&amp;nbsp;Site Admin role. This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the&amp;nbsp;Site Admin user.&amp;nbsp;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-20223 https://cve.radiocsirt.org/vuln/ghsa-p3hw-qj46-c684 <p>A vulnerability in the&amp;nbsp;access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the&amp;nbsp;Site Admin role.</p> <p>This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the&amp;nbsp;Site Admin user.&amp;nbsp;</p> <p>A vulnerability in the&amp;nbsp;access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the&amp;nbsp;Site Admin role.</p> <p>This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the&amp;nbsp;Site Admin user.&amp;nbsp;</p> https://cve.radiocsirt.org/vuln/ghsa-p3hw-qj46-c684 https://cve.radiocsirt.org/vuln/ncsc-2026-0167 NCSC-2026-0167 https://cve.radiocsirt.org/vuln/ncsc-2026-0167 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1658 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Secure Workload ausnutzen, um Administratorrechte zu erlangen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Secure Workload ausnutzen, um Administratorrechte zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1658