Cisco Application Policy Infrastructure Controller: Mehrere Schwachstellen
Eigenanreicherung – kein Mirror der Originalquelle
Ein Angreifer kann mehrere Schwachstellen in Cisco Application Policy Infrastructure Controller ausnutzen, um sich erweiterte Berechtigungen zu verschaffen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen. Es wird empfohlen, die neuesten Sicherheitsupdates von Cisco zu installieren.
Quelle: BSI CERT-Bund. NEOSEC Intel zeigt aus lizenzrechtlichen Gründen keine 1:1-Spiegelung. Volltext und Experten-Einordnung finden Sie beim Original.
Ausgabe bei BSI CERT-Bund lesenVollständiges Advisory
Mittelbsi:WID-SEC-2026-38185 verknüpfte CVEs
Advisory mit allen CVEs öffnen
Mehr zu Infrastructure
Weitere Advisories
- Ohne Bewertungosv:CLEANSTART-2024-BH66439compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations
- Ohne Bewertungosv:CLEANSTART-2026-EV96739Cosign is a project under the sigstore organization which aims to make signatures invisible infrastructure
- Ohne Bewertungosv:CLEANSTART-2024-UQ28182compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations
- Ohne Bewertungosv:CLEANSTART-2026-WG10458Security fix for GHSA-hrxh-6v49-42gf applied in: rancher-fleet-agent 0.15.4-r1, rancher-fleet-agent 0.15.4-r2, newrelic-infrastructure-agent 1.78.1-r2, lvm-driver 1.10.0-r1, lvm-driver 1.10.0-r2, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.12.17-r2, rancher-fleet-agent 0.13.13-r0, fulcio-fips 1.5.1-r1, fluent-operator-fips 3.10.0-r2, rancher-fleet-agent 0.14.8-r1, rancher-fleet-agent 0.14.8-r2, temporal-server 1.28.4-r1, temporal-server 1.29.7-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r2, trillian-fips 1.7.3-r1, distribution 3.1.1-r1, melange 0.55.0-r1, tempo-fips 3.0.2-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, falco-exporter 0.8.7-r2, k8sgpt-operator 0.2.27-r1, kubernetes-csi-external-resizer-fips 2.2.1-r1, promxy 0.0.96-r3, promxy 0.0.96-r2, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, distribution-fips 3.1.1-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2, multus-cni-fips 4.3.0-r1
- Ohne Bewertungosv:CLEANSTART-2026-LX06010Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service (DoS) attack
- MittelCVE-2026-70380A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacke…
- HochCVE-2026-19953Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update
- HochCVE-2026-113345Ministry of Land, Infrastructure, Transport and Tourism, Japan Electronic delivery item Inspection Support System: fehlerhafte Standardberechtigungen
Weitere News-Einträge
- Alpine Linux rebuilds GitLab after attempted RCE attackNewsBleepingComputer
- Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessNewsThe Hacker News
- Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%NewsThe Hacker News
- CISA says max severity GitLab flaw now exploited in the wildNewsBleepingComputer
- CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEVNewsThe Hacker News
- PHP2Shell plus Fragnesia: A dangerous new route from web server to rootNewsCSO Online
- A deep dive into China’s Volt Typhoon suggests it is preparing for an assault on infrastructureNewsCSO Online
- CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacksNewsBleepingComputer
Quelle: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3818
ID