iControl SOAP vulnerabilities
4 known CVE vulnerabilities in iControl SOAP, translated and rated.
- CVE-2026-42924High
A vulnerability has been identified that allows an authenticated attacker with the Resource Administrator or Administrator role to create SNMP configuration objects through iControl SOAP, resulting in privilege escalation.
- CVE-2026-42063Medium
A vulnerability exists in iControl SOAP that allows an authenticated attacker with the Resource Administrator or Administrator role to download sensitive files.
- CVE-2026-40631High
An authenticated attacker with the Resource Administrator or Administrator role can modify configuration objects through iControl SOAP, leading to privilege escalation.
- CVE-2023-38419Medium
An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests.

