CVE-2026-76453 is a high-severity vulnerability in Cisco NX-OS Software involving improper neutralization issues classified under CWE-707. Cisco conducted an internal security review leading to a software hardening release addressing multiple vulnerabilities, including this one. The vulnerability has a CVSS score of 8.8, indicating a significant impact on confidentiality, integrity, and availability. No specific affected versions or patch information is provided in the available data.
A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system.
This vulnerability is due to improper validation of user-supplied content within configurations that are submitted to the web-based management interface. An attacker could exploit this vulnerability by updating configurations within the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.
To exploit this vulnerability, the attacker must have valid administrative credentials. Because only an attacker who already holds system administrator privileges can exploit the vulnerability, the only additional privileges gained include the ability to turn off the system, which an administrative user could not normally do.
CVE-2026-20362 is a Server-Side Request Forgery (SSRF) vulnerability in the web-based management interface of Cisco Finesse. It allows an unauthenticated remote attacker to send crafted HTTP requests that could lead to limited sensitive information disclosure from services associated with the affected device. The vulnerability arises from improper input validation of specific HTTP requests. It has a CVSS score of 7.2, indicating high severity. No patch or remediation information is currently provided.
A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to conduct SQL injection attacks against an affected application.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to read additional contents of the internal database of an affected application that should not normally be accessible to administrative users, thus impacting system confidentiality.
To exploit this vulnerability, the attacker must have valid administrative user credentials on the affected application.
A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition.
This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by sending a high rate of UDP or TCP connections to a data plane interface on an affected device. A successful exploit could allow the attacker to cause instability to various routing and control plane protocols through some packet loss and temporary disruptions, causing a DoS condition. This DoS condition will clear without manual intervention soon after the high rate of traffic is stopped.
CVE-2026-20328 is a critical vulnerability in the web-based management interface of Cisco License On-Prem, formerly known as Cisco Smart Software Manager On-Prem. It arises from improper authorization checks during the password reset process. An unauthenticated remote attacker can exploit this flaw by sending a crafted request to reset the password of any account, including high-privileged administrative users. This could allow unauthorized access to the application with elevated privileges.
CVE-2026-20032 is a medium severity vulnerability in the Python interpreter of Cisco NX-OS Software. It allows an authenticated local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system. The issue arises from insufficient validation of user-supplied input, enabling manipulation of specific Python interpreter functions. Exploitation could lead to arbitrary command execution with the privileges of the authenticated user.
A vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts.
This vulnerability is due to an improper control with EPG contracts. An attacker could exploit this vulnerability by sending IPv4 or IPv6 packets using UDP source and destination ports that are assigned to DHCP traffic through an affected device. A successful exploit could allow the attacker to bypass EPG contracts on the affected device.
CVE-2026-20321 is a vulnerability in the web-based management API of Cisco Application Policy Infrastructure Controller (APIC) that allows an authenticated attacker with administrative credentials to execute arbitrary commands as root. The flaw arises from insufficient input validation of user-controlled command arguments. Exploitation requires valid admin credentials and could lead to full system compromise with root privileges. The CVSS score is 6.5 (medium severity). No patch or remediation information is provided in the available data.
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user.
This vulnerability is due to improper handling of URI encoding in an HTTP request, which allows the request to bypass an authentication rule that is intended to restrict access to a specific API endpoint. An attacker could exploit this vulnerability by sending a crafted HTTP request to the API of the affected system. A successful exploit could allow the attacker to bypass authentication and gain access to the API as the admin user.
CVE-2026-76426 is a medium severity SQL injection vulnerability in the REST API of Cisco Identity Services Engine (ISE) software. It affects versions 3.1.0, 3.2.0, 3.3.0, 3.4.0, and 3.5.0. An authenticated attacker with valid administrative credentials could exploit insufficient input validation to inject SQL commands into the monitoring database. Successful exploitation could allow the attacker to read sensitive information from the monitoring database. No known exploits are reported in the wild, and no patch or remediation details are provided in the input data.
A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access controls.
This vulnerability is due to a logic error in populating group access control policies (ACPs) with OGS configured. An attacker could exploit this vulnerability by sending traffic that should be blocked through the device. A successful exploit could allow the attacker to bypass access controls and reach devices in protected networks.