CVE-2026-20146: Cisco Advance Notification for Publication of July 15, 2026, Security Advisories

Hodnocení závažnosti

5.5 CVSS 3.1 cisco

útok odkudkoli z internetu bez přípravy nutná práva správce bez zásahu uživatele

dopad plný únik dat dílčí změna dat bez výpadku

přesah dopad jen na zranitelnou součást

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

15. 7. 2026 18:01

SPOJENO PŘES CVE Cisco Advance Notification for Publication of July 15, 2026, Security Advisories

On July 15, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco RoomOS Security Hardening Release: July 2026 CVE-2026-20150CVE-2026-20153CVE-2026-20156CVE-2026-20157CVE-2026-20158CVE-2026-20187 High 8.8 Cisco Identity Services Engine Path Traversal Vulnerability CVE-2026-20146 Medium 5.5 To fully remediate the vulnerabilities that were disclosed on July 15, 2026, Cisco…

EPSS 0.00 CVSS 5.5 CVE-2026-20146 Cisco US

15. 7. 2026 18:01 · Cisco PSIRT · Cisco Advance Notification for Publication of July 15, 2026, Security Advisories 15. 7. 2026 · Zero Day Initiative · ZDI-26-421: Cisco Identity Services Engine validFileNameOrPath Directory Traversal Information Disclosure Vulnerability