CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Catalyst SD-WAN Manager Authentication Bypass and Admin Privilege Escalation (CVE-2026-76504)
[Affected Scope] Cisco Catalyst SD-WAN Manager (formerly vManage) software
[Impact] An unauthenticated, remote attacker can bypass authentication mechanisms and gain full administrative access to the system via crafted HTTP requests.
[Mitigation] Immediately apply the official security patches provided by Cisco and restrict access to management interfaces using ACLs.
CrushFTP AS2 Validation Authentication Bypass Vulnerability (CVE-2025-54309) Security Advisory
[Affected Scope] CrushFTP 10 before 10.8.5 and CrushFTP 11 before 11.3.4_23, specifically when the DMZ proxy feature is not utilized.
[Impact] Unauthenticated remote attackers can bypass AS2 validation via HTTPS to obtain full administrative access, which has been actively exploited in the wild.
[Mitigation] Immediately upgrade to CrushFTP 10.8.5, 11.3.4_23, or later, or restrict direct HTTPS access and enable the DMZ proxy feature.