CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Secure Email Gateway (AsyncOS) SQL Injection to Remote Code Execution (RCE) Vulnerability (CVE-2026-76461)
[Affected Scope] All Cisco Secure Email Gateway appliances running vulnerable versions of Cisco AsyncOS Software.
[Impact] An unauthenticated remote attacker can execute arbitrary commands with root privileges by sending a crafted email, leading to full system compromise.
[Mitigation] Immediately apply the official security patches provided by Cisco and monitor for signs of exploitation.
Lantronix EDS5000 Remote OS Command Injection Vulnerability (CVE-2025-67038) Security Advisory
[Affected Scope] Lantronix EDS5000 device servers running firmware version 2.1.0.0R3
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending crafted HTTP RPC requests
[Mitigation] Apply the official firmware patch immediately, and restrict external access to the HTTP/HTTPS management interfaces
Cisco Secure Firewall Management Center (FMC) Insecure Deserialization Vulnerability (CVE-2026-20131, CVSS 10.0) - Remote Code Execution and Root Privilege Escalation
[Affected Scope] Web-based management interface of Cisco Secure Firewall Management Center (FMC) Software.
[Impact] Unauthenticated, remote attackers can execute arbitrary Java code with root privileges by sending crafted serialized Java objects.
[Mitigation] Apply official Cisco security patches immediately and restrict public internet access to the FMC management interface.