https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:44:17 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-06748 bdu:2023-06748 https://cve.radiocsirt.org/vuln/bdu:2023-06748 https://cve.radiocsirt.org/vuln/cisco-sa-rdocker-uatbukkn <p>A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user. This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user. This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-rdocker-uatbukkn https://cve.radiocsirt.org/vuln/euvd-2026-270657 EUVD-2026-270657 https://cve.radiocsirt.org/vuln/euvd-2026-270657 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20235 <p>A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user. This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.</p> <p>A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user. This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-20235 https://cve.radiocsirt.org/vuln/ghsa-j6h7-r25f-wgww <p>A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user.</p> <p>This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.</p> <p>A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user.</p> <p>This vulnerability exists because Docker containers with the privileged runtime option are not blocked when they are in application development mode. An attacker could exploit this vulnerability by using the Docker CLI to access an affected device. The application development workflow is meant to be used only on development systems and not in production systems.</p> https://cve.radiocsirt.org/vuln/ghsa-j6h7-r25f-wgww https://cve.radiocsirt.org/vuln/gsd-2023-20235 gsd-2023-20235 https://cve.radiocsirt.org/vuln/gsd-2023-20235 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2568 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco IOS XE ausnutzen, um Administratorrechte zu erlangen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco IOS XE ausnutzen, um Administratorrechte zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2568