Threats tagged 'ghsa-3xhw-5ch6-w25p'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.5	CVE-2026-121371On affected EOS versions with the eAPI service enabled, a specially crafted HTTP request can allow an unauthenticated High7.52026-11-10GCVE DatabaseCVE-2026-121371 A vulnerability in certain EOS versions with the eAPI service enabled allows an unauthenticated remote attacker to read arbitrary files on the switch filesystem, including sensitive credentials. This can lead to unauthorized disclosure of critical information. The vulnerability is identified as CWE-22 (Path Traversal). Report on CVE-2026-121371 Vulnerability CWE-22 #ghsa-3xhw-5ch6-w25p	GCVE Database	2026-11-10

Page 1 of 1