← nejvýznamnější zprávy · všechny zprávy

EPSS 0.00

Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability

A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient input validation of user-controlled command arguments. An attacker could exploit this vulnerability by authenticating using the API and sending crafted input. A…

Číst originál na Cisco PSIRT →

CZ · EN/orig

Cisco US

tg: zranitelnost

CVE v události 1

CVEhodnoceníKEVEPSS
CVE-2026-20321 6.5 3.1 · cisco – 0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.