Dotkliwość: Wysoka
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Cisco Secure Firewall Management Center (FMC) | CVE-2026-20342 A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability exists because user input is not being sanitized. An attacker could exploit this vulnerability by… |
7,7 | 0,58 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Secure Firewall Management Center (FMC) | CVE-2026-20343 A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space. This vulnerability exists because a critical API lacks authentication. An attacker could exploit this vulnerability by… |
7,5 | 0,66 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Secure Firewall Management Center (FMC) | CVE-2026-20344 A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection attack against an affected device. To exploit this vulnerability, the attacker must have a valid account on the device with the role of… |
8,8 | 0,49 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Secure Firewall Management Center (FMC) / Cisco Secure Firewall Threat Defense (FTD) Software | CVE-2026-20323 A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to impersonate the peer device and obtain access at the level of the manager role, which is equivalent to… |
8,3 | 0,13 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Management Center (FMC) / Cisco Secure Firewall Threat… | CVE-2026-20333 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal… |
8,8 | 0,46 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Management Center (FMC) / Cisco Secure Firewall Threat… | CVE-2026-20334 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal… |
8,4 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Secure Firewall Management Center (FMC) / Cisco Secure Firewall Threat Defense (FTD) Software | CVE-2026-20295 A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to exhaust the available memory of an affected device. This vulnerability is due to improper management of memory… |
8,6 | 0,57 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Identity Services Engine Software | CVE-2026-20300 A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerability, the attacker must have at least low-privileged administrative credentials. This vulnerability is due to improper validation of… |
7,1 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Identity Services Engine Software | CVE-2026-20247 A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected… |
7,5 | 0,46 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software | CVE-2026-20249 A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv2) for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an… |
8,6 | 0,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software | CVE-2026-20250 A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software for Cisco Secure Firewall 3100 Series and 4200 Series devices could allow an unauthenticated, remote attacker to cause… |
8,6 | 0,57 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Secure Firewall Threat Defense (FTD) Software | CVE-2026-20135 A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper buffer… |
8,6 | 0,67 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software | CVE-2026-20154 A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected… |
8,6 | 0,57 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software | CVE-2026-20222 A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service… |
7,4 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2025-56565 DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An… |
7,6 | 0,19 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache NiFi Registry | CVE-2026-87976 Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem path components without rejected… |
8,1 | 0,79 % | Brak wpisu w KEV nie wyklucza ataków | |
| HP AC Print & Scan / HP Output Central | CVE-2026-89084 HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software. |
8,8 | 0,78 % | Brak wpisu w KEV nie wyklucza ataków | |
| Asset | CVE-2026-86865 Tanium addressed a SQL injection vulnerability in Asset. |
7,2 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| Asset | CVE-2026-87024 Tanium addressed a SQL injection vulnerability in Asset. |
7,2 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| Threat Response | CVE-2026-87105 Tanium addressed a SQL injection vulnerability in Threat Response. |
8,8 | 0,43 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache NiFi | CVE-2026-86089 Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and submit migration requests. The framework authorized both methods against the target Connector alone, without evaluating access… |
7,1 | 0,44 % | Brak wpisu w KEV nie wyklucza ataków | |
| aws-network-policy-agent / amazon-vpc-cni-k8s | CVE-2026-86831 Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to bypass NetworkPolicy enforcement on co-located pods in other namespaces via crafted pod and namespace names that produce pod… |
8,7 | 0,64 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache MyFaces | CVE-2026-76646 A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4,… |
7,5 | 0,58 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache NiFi | CVE-2026-70469 Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicating gzip encoding. The framework enforcement filter did not check multiple instances of the Content-Encoding header and… |
7,5 | 0,62 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Nexus Dashboard | CVE-2026-20361 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered… |
8,8 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 13.11.2026, 19:02 UTC – 14.11.2026, 00:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.