https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:41:41 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-07003 bdu:2026-07003 https://cve.radiocsirt.org/vuln/bdu:2026-07003 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0594 certfr-2026-avi-0594 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0594 https://cve.radiocsirt.org/vuln/cisco-sa-sdwan-mltvnps2-jxpwm7r <p>Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow a remote attacker to gain access to sensitive information, elevate privileges, or gain unauthorized access to the application. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.</p> <p>Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow a remote attacker to gain access to sensitive information, elevate privileges, or gain unauthorized access to the application. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.</p> https://cve.radiocsirt.org/vuln/cisco-sa-sdwan-mltvnps2-jxpwm7r https://cve.radiocsirt.org/vuln/cnvd-2026-25128 cnvd-2026-25128 https://cve.radiocsirt.org/vuln/cnvd-2026-25128 https://cve.radiocsirt.org/vuln/euvd-2026-318597 EUVD-2026-318597 https://cve.radiocsirt.org/vuln/euvd-2026-318597 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20224 <p>A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does not need to have valid user credentials. This vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to read arbitrary files that are stored in the affected system.</p> <p>A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does not need to have valid user credentials. This vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to read arbitrary files that are stored in the affected system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-20224 https://cve.radiocsirt.org/vuln/ghsa-558q-cqp2-mrc3 <p>A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does not need to have valid user credentials.</p> <p>This vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to read arbitrary files that are stored in the affected system.</p> <p>A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does not need to have valid user credentials.</p> <p>This vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to read arbitrary files that are stored in the affected system.</p> https://cve.radiocsirt.org/vuln/ghsa-558q-cqp2-mrc3 https://cve.radiocsirt.org/vuln/ncsc-2026-0157 NCSC-2026-0157 https://cve.radiocsirt.org/vuln/ncsc-2026-0157 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1540 <p>Ein Angreifer kann mehrere Schwachstellen in Cisco Catalyst SD-WAN Manager ausnutzen, um seine Privilegien zu erhöhen, und um Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Cisco Catalyst SD-WAN Manager ausnutzen, um seine Privilegien zu erhöhen, und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1540