Cisco Application Policy Infrastructure Controller: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Cisco Application Policy Infrastructure Controller ausnutzen, um sich erweiterte Berechtigungen zu verschaffen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen…
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-38185 linked CVEs
Open advisory with all CVEs
More on Infrastructure
Other advisories
- MediumCVE-2026-70380A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacke…
- HighCVE-2026-113345Ministry of Land, Infrastructure, Transport and Tourism, Japan Electronic delivery item Inspection Support System: fehlerhafte Standardberechtigungen
- HighCVE-2026-113345Ministry of Land, Infrastructure, Transport and Tourism, Japan Electronic delivery item Inspection Support System: fehlerhafte Standardberechtigungen
- CriticalCVE-2026-53942Conda Infrastructure: Code-Injection
- CriticalCVE-2026-53942Conda Infrastructure: Code-Injection
- Not ratedosv:CVE-2026-53942Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN
- LowCVE-2026-87096Acronis Cyber Infrastructure: fehlerhafte Autorisierung
- CriticalCVE-2026-87095Acronis Cyber Infrastructure: fehlerhafte Autorisierung
Other news entries
- InfraTrust report warns of exploited flaws in critical network infrastructureNewsBleepingComputer
- CISA warns of hackers now exploiting critical Node2Shell flawNewsBleepingComputer
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic EmergesNewsThe Hacker News
- 'Aokigahara' Stealer Targets 'Developer Keyrings' & AI AssistantsNewsDark Reading
- Warp discloses breach exposing AI agent logs, user telemetry dataNewsBleepingComputer
- CISA confirms PHP2Shell vulnerabilities now exploited in attacksNewsBleepingComputer
- CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionNewsThe Hacker News
- Britain bets big on AI to defend against the threats AI is helping createNewsThe Register — Security
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3818
ID