Cisco warnt vor kritischen Schwachstellen in Nexus-Switches
Teaser aus der Quelle
Cisco hat Sicherheitswarnungen für fünf kritische Schwachstellen in seinem NX-OS-Datenzentrum-Betriebssystem veröffentlicht, die ausgenutzt werden könnten, um beliebigen Code mit Root-Rechten auf Nexus-Switches auszuführen. Es wird empfohlen, die veröffentlichten Patches umgehend zu installieren.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei BleepingComputer lesenMehr zu allowing
Weitere Empfehlungen
- Ohne Bewertungosv:CVE-2026-57183Scoold: Forged JWT Accepted as Admin API Token Allowing Unauthorized Access to Sensitive Configuration and Logs
- Ohne BewertungCVE-2026-105741Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
- Ohne BewertungCVE-2026-61428PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing
- Ohne Bewertungosv:CLEANSTART-2026-UU01575SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption
- Ohne Bewertungosv:CLEANSTART-2026-OV41869Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS
- Ohne Bewertungosv:CLEANSTART-2026-WG41098temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com
- Ohne Bewertungosv:CLEANSTART-2026-IH60054vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace ...
- Ohne Bewertungosv:CVE-2026-57492FileRise: Setup mode re-activates when users.txt becomes empty, allowing unauthenticated admin creation
Weitere News-Einträge
- Critical BlockStrap flaw lets hackers run code on Magento serversNewsBleepingComputer
- Cisco warns of actively exploited Secure Email Gateway flawNewsCSO Online
- Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG ProcessingNewsThe Hacker News
- SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential TheftNewsThe Hacker News
- Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential ProxiesNewsThe Hacker News
- Low-cost Android phones ship with residential proxy malwareNewsBleepingComputer
- GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted ServersNewsThe Hacker News
- Microsoft says threat actors are ahead in the early AI raceNewsBleepingComputer
ID