https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:55:31 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-02319 bdu:2026-02319 https://cve.radiocsirt.org/vuln/bdu:2026-02319 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0210 certfr-2026-avi-0210 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0210 https://cve.radiocsirt.org/vuln/cisco-sa-sdwan-authbp-qwcx8d4v <p>Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an attacker to access an affected system, elevate privileges to root, gain access to sensitive information, and overwrite arbitrary files. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.</p> <p>Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an attacker to access an affected system, elevate privileges to root, gain access to sensitive information, and overwrite arbitrary files. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.</p> https://cve.radiocsirt.org/vuln/cisco-sa-sdwan-authbp-qwcx8d4v https://cve.radiocsirt.org/vuln/euvd-2026-292162 EUVD-2026-292162 https://cve.radiocsirt.org/vuln/euvd-2026-292162 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20122 <p>A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system&amp;nbsp;and gain vmanage user privileges.</p> <p>A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system&amp;nbsp;and gain vmanage user privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-20122 https://cve.radiocsirt.org/vuln/ghsa-9qpv-49q8-9chx <p>A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system.</p> <p>This vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system&amp;nbsp;and gain vmanage user privileges.</p> <p>A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system.</p> <p>This vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system&amp;nbsp;and gain vmanage user privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-9qpv-49q8-9chx https://cve.radiocsirt.org/vuln/ncsc-2026-0071 NCSC-2026-0071 https://cve.radiocsirt.org/vuln/ncsc-2026-0071 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0516 <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Cisco Catalyst SD-WAN Manager ausnutzen, um Administratorrechte zu erlangen, die Authentifizierung zu umgehen, Befehle mit Netadmin-Rechten auszuführen, sensible Systeminformationen zu lesen und beliebige Dateien auf dem System zu überschreiben.</p> <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Cisco Catalyst SD-WAN Manager ausnutzen, um Administratorrechte zu erlangen, die Authentifizierung zu umgehen, Befehle mit Netadmin-Rechten auszuführen, sensible Systeminformationen zu lesen und beliebige Dateien auf dem System zu überschreiben.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0516