https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:55:01 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15152 bdu:2026-15152 https://cve.radiocsirt.org/vuln/bdu:2026-15152 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1197 certfr-2026-avi-1197 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1197 https://cve.radiocsirt.org/vuln/cisco-sa-ise-sql-inj-3qtkr947 <p>Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow a remote attacker to conduct SQL injection attacks on an affected device. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of September 16, 2026, Security Advisories [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-jfxK98ZP&#34;]. In addition, for further documentation of improvements and fixes in Cisco Identity Services Engine, see Cisco Identity Services Engine Security Hardening Release: September 2026 [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T&#34;].</p> <p>Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow a remote attacker to conduct SQL injection attacks on an affected device. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of September 16, 2026, Security Advisories [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-jfxK98ZP&#34;]. In addition, for further documentation of improvements and fixes in Cisco Identity Services Engine, see Cisco Identity Services Engine Security Hardening Release: September 2026 [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T&#34;].</p> https://cve.radiocsirt.org/vuln/cisco-sa-ise-sql-inj-3qtkr947 https://cve.radiocsirt.org/vuln/euvd-2026-371913 EUVD-2026-371913 https://cve.radiocsirt.org/vuln/euvd-2026-371913 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20300 <p>A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerability, the attacker must have at least low-privileged administrative credentials. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to read or modify data in the underlying database.</p> <p>A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerability, the attacker must have at least low-privileged administrative credentials. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to read or modify data in the underlying database.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-20300 https://cve.radiocsirt.org/vuln/ghsa-j6jc-3rmg-h4f7 <p>A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerability, the attacker must have at least low-privileged administrative credentials.</p> <p>This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to read or modify data in the underlying database.</p> <p>A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerability, the attacker must have at least low-privileged administrative credentials.</p> <p>This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to read or modify data in the underlying database.</p> https://cve.radiocsirt.org/vuln/ghsa-j6jc-3rmg-h4f7 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3425 <p>Ein Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) und ISE-PIC ausnutzen, um beliebigen Code auszuführen – sogar mit Root-Rechten –, Sicherheitsmaßnahmen zu umgehen, Berechtigungen zu erweitern, SQL-Injection-Angriffe durchzuführen, Sitzungen zu übernehmen, sensible Informationen oder Anmeldedaten offenzulegen, Daten zu manipulieren, einen Denial-of-Service-Zustand auszulösen und Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) und ISE-PIC ausnutzen, um beliebigen Code auszuführen – sogar mit Root-Rechten –, Sicherheitsmaßnahmen zu umgehen, Berechtigungen zu erweitern, SQL-Injection-Angriffe durchzuführen, Sitzungen zu übernehmen, sensible Informationen oder Anmeldedaten offenzulegen, Daten zu manipulieren, einen Denial-of-Service-Zustand auszulösen und Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3425