CVE Vulnerability Catalog

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due to insufficient validation in file operations. An attacker could exploit this vulnerability by uploading a file with a crafted path.

A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An attacker could exploit this vulnerability by performing session token forgery techniques.

A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service. This vulnerability is due to an error when checking the privilege level of a user who is invoking remote diagnostics. An attacker could exploit this vulnerability by authenticating to the device and using the remote diagnostics debugger to grant a user elevated privileges.

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76409 are related to improper limitation of a pathname issues that are grouped under the Common Weakness Enumeration (CWE) CWE-22.

Tina is a headless content management system. Prior to @tinacms/auth 1.1.4 and next-tinacms-azure 15.0.1, isAuthorized accepts a request-controlled clientID and asks isUserAuthorized to validate the bearer token against that selected TinaCloud app instead of the self-hosted site's configured app. An attacker with any TinaCloud account can submit the attacker's own app ID and valid token to a victim endpoint, causing TinaCloudBackendAuthProvider or an affected media authorized callback to accept the attacker's verified status across the tenant boundary.

Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedro_datasets_experimental.pytorch.PyTorchDataset in kedro-datasets loads .pt model files with torch.load without enforcing weights_only=True, and user-supplied load_args are silently dropped. On PyTorch versions earlier than 2.6, a malicious pickle-backed model from an attacker-influenced shared registry, downloaded checkpoint, or partitioned external source can execute arbitrary code when a Kedro pipeline loads it.

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20360 are related to information exposure and insecure handling issues that are grouped under the Common Weakness Enumeration (CWE) CWE-200.

A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain RADIUS requests. An attacker could exploit this vulnerability by sending a crafted RADIUS request directly to an affected device.

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection attack. The attacker must have a valid account with the role of Security Approver, Access Admin, or Network Admin. The issue is due to insufficient validation of user-supplied input.

A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space. The issue exists because a critical API lacks authentication.

A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. The issue exists because user input is not being sanitized. The attacker must have valid credentials with at least the role of Security Analyst (read-only).

A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level. The issue is due to unsecured deserialization of web-management user-controlled data. The attacker must have valid credentials with at least the role of Security Analyst (read-only).

A vulnerability in Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software relates to improper control of a resource through its lifetime, grouped under CWE-664. It was discovered during an internal security review and addressed in a software hardening release.

A vulnerability in Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software relates to incorrect calculation issues, grouped under CWE-682. It was discovered during an internal security review and addressed in a software hardening release.

Vulnerability in Cisco Secure ASA, FTD, and FMC software due to improper adherence to coding standards (CWE-710). It was discovered during an internal security review and addressed in a hardening release.

Vulnerability in Cisco Secure ASA, FTD, and FMC software due to incorrect comparison conditions (CWE-697). It was discovered during an internal security review and addressed in a hardening release.

Vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC and FTD Software allows an unauthenticated, adjacent attacker to impersonate the peer device and gain access at the manager role level (root). This is due to improper management of the TLS certificate for the sftunnel connection.

Vulnerability in Cisco ISE allows an authenticated, remote attacker to perform SQL injection attacks on an affected device. Low-privileged administrative credentials are required. This is due to improper validation of user-supplied input.

Vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC and FTD Software allows an unauthenticated, remote attacker to exhaust the available memory of an affected device. This is due to improper management of memory resources during sftunnel TLS connection setup.

Vulnerability in DTLS message handling of Cisco Secure Firewall ASA and FTD Software for 3100 and 4200 Series devices allows an unauthenticated, remote attacker to cause a DoS condition. This is due to improper resource management when processing certain DTLS messages.