CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Secure Email Gateway (AsyncOS) SQL Injection to Remote Code Execution (RCE) Vulnerability (CVE-2026-76461)
[Affected Scope] All Cisco Secure Email Gateway appliances running vulnerable versions of Cisco AsyncOS Software.
[Impact] An unauthenticated remote attacker can execute arbitrary commands with root privileges by sending a crafted email, leading to full system compromise.
[Mitigation] Immediately apply the official security patches provided by Cisco and monitor for signs of exploitation.
Lantronix EDS5000 Remote OS Command Injection Vulnerability (CVE-2025-67038) Security Advisory
[Affected Scope] Lantronix EDS5000 device servers running firmware version 2.1.0.0R3
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending crafted HTTP RPC requests
[Mitigation] Apply the official firmware patch immediately, and restrict external access to the HTTP/HTTPS management interfaces
Cisco Secure Firewall Management Center (FMC) Insecure Deserialization Vulnerability (CVE-2026-20131, CVSS 10.0) - Remote Code Execution and Root Privilege Escalation
[Affected Scope] Web-based management interface of Cisco Secure Firewall Management Center (FMC) Software.
[Impact] Unauthenticated, remote attackers can execute arbitrary Java code with root privileges by sending crafted serialized Java objects.
[Mitigation] Apply official Cisco security patches immediately and restrict public internet access to the FMC management interface.
Cisco ISE and ISE-PIC Unauthenticated Remote Code Execution Vulnerability (CVE-2025-20337)
[Affected Scope] Specific API endpoints of Cisco Identity Services Engine (ISE) and Cisco ISE-PIC
[Impact] An unauthenticated, remote attacker can execute arbitrary code with root privileges on the underlying operating system
[Mitigation] Immediately apply the official security patches provided by Cisco and restrict access to the API ports from untrusted networks
Cisco IOS XE Web UI Remote Command Injection and Root Privilege Escalation Vulnerability (CVE-2023-20273) Analysis and Mitigation Guide
[Affected Scope] Cisco IOS XE Software with the Web UI feature enabled on network devices
[Impact] An authenticated, remote attacker can exploit insufficient input validation to inject arbitrary commands into the underlying operating system with root privileges, leading to complete system compromise
[Mitigation] Immediately disable the Web UI feature or upgrade to the latest patched Cisco IOS XE software release