CVE Vulnerability Advisory Database

[Affected Scope] API management interfaces of Progress Kemp LoadMaster load balancer appliances

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending crafted API requests, leading to full system compromise

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to the management API

[Affected Scope] Cisco Catalyst SD-WAN Manager (formerly vManage) API interface

[Impact] Authenticated remote attackers with read-only API credentials can overwrite arbitrary files on the local file system and gain vmanage user privileges

[Mitigation] Apply official Cisco security patches immediately, restrict API access, and audit API permissions for low-privileged accounts