Vulnerability-Lookup

CVE-2026-76462 (GCVE-0-2026-76462)

Vulnerability from cvelistv5 – Published: 2026-10-21 16:14 – Updated: 2026-10-21 17:19

Title

Cisco Secure Client Privilege Escalation Vulnerability

Summary

A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a series of crafted IPC messages to a local socket. A successful exploit could allow the attacker to perform limited file write operations on the filesystem with SYSTEM or root privileges. Although this vulnerability affects the Secure Firewall Posture module in Cisco Secure Client on Windows, macOS, and Linux operating systems, this vulnerability could be used to obtain full root privileges on macOS and Linux. For that reason Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-21 16:41 UTC

CWE

CWE-20 - Improper Input Validation

Assigner

cisco CNA under the mitre root

CNA scorecard C 66/100 over 442 records in the last 180 days details

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

1 product

Vendor	Product	Version	CPE status
Cisco	Cisco Secure Client	Affected: 4.9.00086 Affected: 4.9.01095 Affected: 4.9.02028 Affected: 4.9.03047 Affected: 4.9.03049 Affected: 4.9.04043 Affected: 4.9.04053 Affected: 4.9.05042 Affected: 4.9.06037 Affected: 4.10.00093 Affected: 4.10.01075 Affected: 4.10.02086 Affected: 4.10.03104 Affected: 4.10.04065 Affected: 4.10.04071 Affected: 4.10.05085 Affected: 4.10.05095 Affected: 5.0.00238 Affected: 4.10.05111 Affected: 5.0.00529 Affected: 5.0.00556 Affected: 4.10.06079 Affected: 5.0.01242 Affected: 4.10.06090 Affected: 5.0.02075 Affected: 4.10.07061 Affected: 5.0.03072 Affected: 4.10.07062 Affected: 5.0.03076 Affected: 5.0.04032 Affected: 4.10.07073 Affected: 5.0.05040 Affected: 5.1.0.136 Affected: 5.1.1.42 Affected: 4.10.08025 Affected: 5.1.2.42 Affected: 4.10.08029 Affected: 5.1.3.62 Affected: 5.1.4.74 Affected: 5.1.5.65 Affected: 5.1.6.103 Affected: 5.1.7.80 Affected: 5.1.8.105 Affected: 5.1.8.122 Affected: 5.1.9.113 Affected: 5.1.10.233 Affected: 5.1.11.388 Affected: 5.1.12.146 Affected: 5.1.13.117 Affected: 5.1.13.177 Affected: 5.1.14.145 Affected: 5.1.15.287 Affected: 5.1.16.194 Affected: 5.1.17.3382 Affected: 5.1.17.3394 Affected: 5.1.18.314 Affected: 5.1.19.1862	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-76462",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-21T16:41:41.722414Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-21T17:19:12.083Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Client",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "4.9.00086"
            },
            {
              "status": "affected",
              "version": "4.9.01095"
            },
            {
              "status": "affected",
              "version": "4.9.02028"
            },
            {
              "status": "affected",
              "version": "4.9.03047"
            },
            {
              "status": "affected",
              "version": "4.9.03049"
            },
            {
              "status": "affected",
              "version": "4.9.04043"
            },
            {
              "status": "affected",
              "version": "4.9.04053"
            },
            {
              "status": "affected",
              "version": "4.9.05042"
            },
            {
              "status": "affected",
              "version": "4.9.06037"
            },
            {
              "status": "affected",
              "version": "4.10.00093"
            },
            {
              "status": "affected",
              "version": "4.10.01075"
            },
            {
              "status": "affected",
              "version": "4.10.02086"
            },
            {
              "status": "affected",
              "version": "4.10.03104"
            },
            {
              "status": "affected",
              "version": "4.10.04065"
            },
            {
              "status": "affected",
              "version": "4.10.04071"
            },
            {
              "status": "affected",
              "version": "4.10.05085"
            },
            {
              "status": "affected",
              "version": "4.10.05095"
            },
            {
              "status": "affected",
              "version": "5.0.00238"
            },
            {
              "status": "affected",
              "version": "4.10.05111"
            },
            {
              "status": "affected",
              "version": "5.0.00529"
            },
            {
              "status": "affected",
              "version": "5.0.00556"
            },
            {
              "status": "affected",
              "version": "4.10.06079"
            },
            {
              "status": "affected",
              "version": "5.0.01242"
            },
            {
              "status": "affected",
              "version": "4.10.06090"
            },
            {
              "status": "affected",
              "version": "5.0.02075"
            },
            {
              "status": "affected",
              "version": "4.10.07061"
            },
            {
              "status": "affected",
              "version": "5.0.03072"
            },
            {
              "status": "affected",
              "version": "4.10.07062"
            },
            {
              "status": "affected",
              "version": "5.0.03076"
            },
            {
              "status": "affected",
              "version": "5.0.04032"
            },
            {
              "status": "affected",
              "version": "4.10.07073"
            },
            {
              "status": "affected",
              "version": "5.0.05040"
            },
            {
              "status": "affected",
              "version": "5.1.0.136"
            },
            {
              "status": "affected",
              "version": "5.1.1.42"
            },
            {
              "status": "affected",
              "version": "4.10.08025"
            },
            {
              "status": "affected",
              "version": "5.1.2.42"
            },
            {
              "status": "affected",
              "version": "4.10.08029"
            },
            {
              "status": "affected",
              "version": "5.1.3.62"
            },
            {
              "status": "affected",
              "version": "5.1.4.74"
            },
            {
              "status": "affected",
              "version": "5.1.5.65"
            },
            {
              "status": "affected",
              "version": "5.1.6.103"
            },
            {
              "status": "affected",
              "version": "5.1.7.80"
            },
            {
              "status": "affected",
              "version": "5.1.8.105"
            },
            {
              "status": "affected",
              "version": "5.1.8.122"
            },
            {
              "status": "affected",
              "version": "5.1.9.113"
            },
            {
              "status": "affected",
              "version": "5.1.10.233"
            },
            {
              "status": "affected",
              "version": "5.1.11.388"
            },
            {
              "status": "affected",
              "version": "5.1.12.146"
            },
            {
              "status": "affected",
              "version": "5.1.13.117"
            },
            {
              "status": "affected",
              "version": "5.1.13.177"
            },
            {
              "status": "affected",
              "version": "5.1.14.145"
            },
            {
              "status": "affected",
              "version": "5.1.15.287"
            },
            {
              "status": "affected",
              "version": "5.1.16.194"
            },
            {
              "status": "affected",
              "version": "5.1.17.3382"
            },
            {
              "status": "affected",
              "version": "5.1.17.3394"
            },
            {
              "status": "affected",
              "version": "5.1.18.314"
            },
            {
              "status": "affected",
              "version": "5.1.19.1862"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a series of crafted IPC messages to a local socket. A successful exploit could allow the attacker to perform limited file write operations on the filesystem with SYSTEM or root privileges.\r\nAlthough this vulnerability affects the Secure Firewall Posture module in Cisco Secure Client on Windows, macOS, and Linux operating systems, this vulnerability could be used to obtain full root privileges on macOS and Linux. For that reason Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "Improper Input Validation",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-21T16:14:19.168Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-sec-client-priv-esc-muF8eZdm",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-client-priv-esc-muF8eZdm"
        }
      ],
      "source": {
        "advisory": "cisco-sa-sec-client-priv-esc-muF8eZdm",
        "defects": [
          "CSCwu48192"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Cisco Secure Client Privilege Escalation Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-76462",
    "datePublished": "2026-10-21T16:14:19.168Z",
    "dateReserved": "2026-08-19T12:02:03.637Z",
    "dateUpdated": "2026-10-21T17:19:12.083Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-76462",
      "date": "2026-10-22",
      "epss": "0.00144",
      "percentile": "0.03336"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unknown",
                "product": "Cisco Secure Client",
                "vendor": "Cisco",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.9.00086"
                  },
                  {
                    "status": "affected",
                    "version": "4.9.01095"
                  },
                  {
                    "status": "affected",
                    "version": "4.9.02028"
                  },
                  {
                    "status": "affected",
                    "version": "4.9.03047"
                  },
                  {
                    "status": "affected",
                    "version": "4.9.03049"
                  },
                  {
                    "status": "affected",
                    "version": "4.9.04043"
                  },
                  {
                    "status": "affected",
                    "version": "4.9.04053"
                  },
                  {
                    "status": "affected",
                    "version": "4.9.05042"
                  },
                  {
                    "status": "affected",
                    "version": "4.9.06037"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.00093"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.01075"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.02086"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.03104"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.04065"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.04071"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.05085"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.05095"
                  },
                  {
                    "status": "affected",
                    "version": "5.0.00238"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.05111"
                  },
                  {
                    "status": "affected",
                    "version": "5.0.00529"
                  },
                  {
                    "status": "affected",
                    "version": "5.0.00556"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.06079"
                  },
                  {
                    "status": "affected",
                    "version": "5.0.01242"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.06090"
                  },
                  {
                    "status": "affected",
                    "version": "5.0.02075"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.07061"
                  },
                  {
                    "status": "affected",
                    "version": "5.0.03072"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.07062"
                  },
                  {
                    "status": "affected",
                    "version": "5.0.03076"
                  },
                  {
                    "status": "affected",
                    "version": "5.0.04032"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.07073"
                  },
                  {
                    "status": "affected",
                    "version": "5.0.05040"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.0.136"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.1.42"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.08025"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.2.42"
                  },
                  {
                    "status": "affected",
                    "version": "4.10.08029"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.3.62"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.4.74"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.5.65"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.6.103"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.7.80"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.8.105"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.8.122"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.9.113"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.10.233"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.11.388"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.12.146"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.13.117"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.13.177"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.14.145"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.15.287"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.16.194"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.17.3382"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.17.3394"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.18.314"
                  },
                  {
                    "status": "affected",
                    "version": "5.1.19.1862"
                  }
                ]
              }
            ],
            "source": "psirt@cisco.com"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a series of crafted IPC messages to a local socket. A successful exploit could allow the attacker to perform limited file write operations on the filesystem with SYSTEM or root privileges.\r\nAlthough this vulnerability affects the Secure Firewall Posture module in Cisco Secure Client on Windows, macOS, and Linux operating systems, this vulnerability could be used to obtain full root privileges on macOS and Linux. For that reason Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates."
          }
        ],
        "id": "CVE-2026-76462",
        "lastModified": "2026-10-21T18:54:37.403",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "psirt@cisco.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-76462",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-21T16:41:41.722414Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-10-21T17:19:06.670",
        "references": [
          {
            "source": "psirt@cisco.com",
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-client-priv-esc-muF8eZdm"
          }
        ],
        "sourceIdentifier": "psirt@cisco.com",
        "vulnStatus": "Awaiting Analysis",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-20"
              }
            ],
            "source": "psirt@cisco.com",
            "type": "Secondary"
          }
        ]
      }
    }
  }
}

CERTFR-2026-AVI-1360

Vulnerability from certfr_avis - Published: 2026-10-22 - Updated: 2026-10-22

De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Cisco	IOS XE	IOS XE Software versions 26.2.x et antérieures à 26.2.1
Cisco	Open Source Snort	Snort 3 versions 3.x antérieures à 3.12.4.0
Cisco	IOS XR	IOS XR Software versions 24.1 et antérieures à 24.1.2 and SMU asr9k-x64-24.1.2.CSCwn39554
Cisco	IOS XR	IOS XR Software versions 24.4.x et antérieures à 24.4.2
Cisco	Secure FTD Software	Secure FTD Software versions 7.2.x et antérieures à 7.2.12
Cisco	N/A	Emergency Responder, Prime Collaboration Deployment, Unified CM, Unified CM IM&P, Unified CM SME, and Unity Connection versions postérieures à 14 et antérieures à 15SU5
Cisco	IOS XE	IOS XE Software versions 17.18.x et antérieures à 17.18.5
Cisco	Expressway Series	Expressway Series versions postérieures à X14 et antérieures à X15.5.20
Cisco	IOS XE	IOS XE Software versions 17.15.x et antérieures à 17.15.6
Cisco	IOS XE	IOS XE Software versions 26.1.x et antérieures à 26.1.2
Cisco	IOS XR	IOS XR Software versions 7.9 et antérieures à à 7.9.2 and SMU asr9k-x64-7.9.2.CSCwn39554 et 7.9.21 and SMU asr9k-x64-7.9.21.CSCwn39554
Cisco	IOS XR	IOS XR Software versions 7.11 et antérieures à 7.11.21 and SMU asr9k-x64-7.11.21.CSCwn39554 et 7.11.21 and SMU asr9k-x64-7.11.21.CSCwn39554
Cisco	Secure FTD Software	Secure FTD Software versions 10.0.x et antérieures à 10.0.2
Cisco	Cyber Vision	Cyber Vision versions antérieures à 5.6.0
Cisco	Secure FTD Software	Secure FTD Software versions 7.6.x et antérieures à 7.6.6
Cisco	IOS XR	IOS XR Software versions 24.3 et antérieures à 24.3.2 and SMU asr9k-x64-24.3.2.CSCwn39554
Cisco	Secure FTD Software	Secure FTD Software versions 7.4.x et antérieures à 7.4.8
Cisco	Secure Client	Secure Client versions postérieures à 5.1.20.333 et antérieures à 5.1.20.333
Cisco	Secure FTD Software	Secure FTD Software versions 10.1.x et antérieures à 10.1.0
Cisco	Secure FTD Software	Secure FTD Software versions 7.7.x et antérieures à 7.7.13
Cisco	IOS XR	IOS XR Software versions 7.10 et antérieures à 7.10.2 and SMU asr9k-x64-7.10.2.CSCwn39554
Cisco	Secure FTD Software	Secure FTD Software versions 7.0.x et antérieures à 7.0.10
Cisco	IOS XE	IOS XE Software versions 17.12.x et antérieures à 17.12.8
Cisco	IOS XR	IOS XR Software versions 24.2 et antérieures à 24.2.2 and SMU asr9k-x64-24.2.2.CSCwn3955424.2.21

References

Title

Publication Time

Tags

Bulletin de sécurité Cisco cisco-sa-exwy-hardening-FhcqBVcs	2026-10-21	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-sec-client-priv-esc-muF8eZdm	2026-10-21	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-vcs-static-cred-hr7EWZ8t	2026-10-21	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-voice-hardening-twgbH9e3	2026-10-21	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-asr9k-tUyxcyXN	2026-10-21	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-hardening-snort3-ybgmhTQe	2026-10-21	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-opensrc-snort3-2fXGJPfe	2026-10-21	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-php-october26-Jj384Daq	2026-10-22	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "IOS XE Software versions 26.2.x et ant\u00e9rieures \u00e0 26.2.1",
      "product": {
        "name": "IOS XE",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Snort 3 versions 3.x ant\u00e9rieures \u00e0 3.12.4.0",
      "product": {
        "name": "Open Source Snort",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XR Software versions 24.1 et ant\u00e9rieures \u00e0 24.1.2 and SMU asr9k-x64-24.1.2.CSCwn39554",
      "product": {
        "name": "IOS XR",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XR Software versions 24.4.x et ant\u00e9rieures \u00e0 24.4.2",
      "product": {
        "name": "IOS XR",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Secure FTD Software versions 7.2.x et ant\u00e9rieures \u00e0 7.2.12",
      "product": {
        "name": "Secure FTD Software",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Emergency Responder, Prime Collaboration Deployment, Unified CM, Unified CM IM\u0026P, Unified CM SME, and Unity Connection versions post\u00e9rieures \u00e0 14 et ant\u00e9rieures \u00e0 15SU5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XE Software versions 17.18.x et ant\u00e9rieures \u00e0 17.18.5",
      "product": {
        "name": "IOS XE",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Expressway Series versions post\u00e9rieures \u00e0 X14 et ant\u00e9rieures \u00e0 X15.5.20",
      "product": {
        "name": "Expressway Series",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XE Software versions 17.15.x et ant\u00e9rieures \u00e0 17.15.6",
      "product": {
        "name": "IOS XE",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XE Software versions 26.1.x et ant\u00e9rieures \u00e0 26.1.2",
      "product": {
        "name": "IOS XE",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XR Software versions 7.9 et ant\u00e9rieures \u00e0 \u00e0 7.9.2 and SMU asr9k-x64-7.9.2.CSCwn39554 et 7.9.21 and SMU asr9k-x64-7.9.21.CSCwn39554",
      "product": {
        "name": "IOS XR",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XR Software versions 7.11 et ant\u00e9rieures \u00e0 7.11.21 and SMU asr9k-x64-7.11.21.CSCwn39554 et 7.11.21 and SMU asr9k-x64-7.11.21.CSCwn39554",
      "product": {
        "name": "IOS XR",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Secure FTD Software versions 10.0.x et ant\u00e9rieures \u00e0 10.0.2",
      "product": {
        "name": "Secure FTD Software",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cyber Vision versions ant\u00e9rieures \u00e0 5.6.0",
      "product": {
        "name": "Cyber Vision",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Secure FTD Software versions 7.6.x et ant\u00e9rieures \u00e0 7.6.6",
      "product": {
        "name": "Secure FTD Software",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XR Software versions 24.3 et ant\u00e9rieures \u00e0 24.3.2 and SMU asr9k-x64-24.3.2.CSCwn39554",
      "product": {
        "name": "IOS XR",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Secure FTD Software versions 7.4.x et ant\u00e9rieures \u00e0 7.4.8",
      "product": {
        "name": "Secure FTD Software",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Secure Client versions post\u00e9rieures \u00e0 5.1.20.333 et ant\u00e9rieures \u00e0 5.1.20.333",
      "product": {
        "name": "Secure Client",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Secure FTD Software versions 10.1.x et ant\u00e9rieures \u00e0 10.1.0",
      "product": {
        "name": "Secure FTD Software",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Secure FTD Software versions 7.7.x et ant\u00e9rieures \u00e0 7.7.13",
      "product": {
        "name": "Secure FTD Software",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XR Software versions 7.10 et ant\u00e9rieures \u00e0 7.10.2 and SMU asr9k-x64-7.10.2.CSCwn39554",
      "product": {
        "name": "IOS XR",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Secure FTD Software versions 7.0.x et ant\u00e9rieures \u00e0 7.0.10",
      "product": {
        "name": "Secure FTD Software",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XE Software versions 17.12.x et ant\u00e9rieures \u00e0 17.12.8",
      "product": {
        "name": "IOS XE",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XR Software versions 24.2 et ant\u00e9rieures \u00e0 24.2.2 and SMU asr9k-x64-24.2.2.CSCwn3955424.2.21",
      "product": {
        "name": "IOS XR",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-20356",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20356"
    },
    {
      "name": "CVE-2026-76481",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76481"
    },
    {
      "name": "CVE-2026-76524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76524"
    },
    {
      "name": "CVE-2026-76494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76494"
    },
    {
      "name": "CVE-2026-109619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109619"
    },
    {
      "name": "CVE-2026-109618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109618"
    },
    {
      "name": "CVE-2026-76462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76462"
    },
    {
      "name": "CVE-2026-76475",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76475"
    },
    {
      "name": "CVE-2026-76477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76477"
    },
    {
      "name": "CVE-2026-76490",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76490"
    },
    {
      "name": "CVE-2026-76473",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76473"
    },
    {
      "name": "CVE-2026-76491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76491"
    },
    {
      "name": "CVE-2026-76492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76492"
    },
    {
      "name": "CVE-2026-76493",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76493"
    },
    {
      "name": "CVE-2026-76495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76495"
    },
    {
      "name": "CVE-2026-20043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20043"
    },
    {
      "name": "CVE-2026-76474",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76474"
    },
    {
      "name": "CVE-2026-76466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76466"
    },
    {
      "name": "CVE-2026-76505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76505"
    },
    {
      "name": "CVE-2026-76497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76497"
    },
    {
      "name": "CVE-2026-76476",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76476"
    },
    {
      "name": "CVE-2026-20236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20236"
    },
    {
      "name": "CVE-2026-20291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20291"
    },
    {
      "name": "CVE-2026-76478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76478"
    },
    {
      "name": "CVE-2026-76479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76479"
    },
    {
      "name": "CVE-2026-76496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76496"
    }
  ],
  "initial_release_date": "2026-10-22T00:00:00",
  "last_revision_date": "2026-10-22T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1360",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-10-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
  "vendor_advisories": [
    {
      "published_at": "2026-10-21",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-exwy-hardening-FhcqBVcs",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs"
    },
    {
      "published_at": "2026-10-21",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sec-client-priv-esc-muF8eZdm",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-client-priv-esc-muF8eZdm"
    },
    {
      "published_at": "2026-10-21",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-vcs-static-cred-hr7EWZ8t",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vcs-static-cred-hr7EWZ8t"
    },
    {
      "published_at": "2026-10-21",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-voice-hardening-twgbH9e3",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3"
    },
    {
      "published_at": "2026-10-21",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asr9k-tUyxcyXN",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr9k-tUyxcyXN"
    },
    {
      "published_at": "2026-10-21",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-hardening-snort3-ybgmhTQe",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-snort3-ybgmhTQe"
    },
    {
      "published_at": "2026-10-21",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-opensrc-snort3-2fXGJPfe",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-opensrc-snort3-2fXGJPfe"
    },
    {
      "published_at": "2026-10-22",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-php-october26-Jj384Daq",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq"
    }
  ]
}

CISCO-SA-SEC-CLIENT-PRIV-ESC-MUF8EZDM

Vulnerability from csaf_cisco - Published: 2026-10-21 16:00 - Updated: 2026-10-21 16:00

Summary

Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability

Scope

1 vulnerability in this advisory, including CVE-2026-76462.

CVE-2026-76462

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Known affected: 58 products

https://software.cisco.com

Open the full advisory

FKIE_CVE-2026-76462

Vulnerability from fkie_nvd - Published: 2026-10-21 17:19 - Updated: 2026-10-21 18:54

Severity

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Summary

References

	URL	Tags
	psirt@cisco.com	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-client-priv-esc-muF8eZdm

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Client",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "4.9.00086"
            },
            {
              "status": "affected",
              "version": "4.9.01095"
            },
            {
              "status": "affected",
              "version": "4.9.02028"
            },
            {
              "status": "affected",
              "version": "4.9.03047"
            },
            {
              "status": "affected",
              "version": "4.9.03049"
            },
            {
              "status": "affected",
              "version": "4.9.04043"
            },
            {
              "status": "affected",
              "version": "4.9.04053"
            },
            {
              "status": "affected",
              "version": "4.9.05042"
            },
            {
              "status": "affected",
              "version": "4.9.06037"
            },
            {
              "status": "affected",
              "version": "4.10.00093"
            },
            {
              "status": "affected",
              "version": "4.10.01075"
            },
            {
              "status": "affected",
              "version": "4.10.02086"
            },
            {
              "status": "affected",
              "version": "4.10.03104"
            },
            {
              "status": "affected",
              "version": "4.10.04065"
            },
            {
              "status": "affected",
              "version": "4.10.04071"
            },
            {
              "status": "affected",
              "version": "4.10.05085"
            },
            {
              "status": "affected",
              "version": "4.10.05095"
            },
            {
              "status": "affected",
              "version": "5.0.00238"
            },
            {
              "status": "affected",
              "version": "4.10.05111"
            },
            {
              "status": "affected",
              "version": "5.0.00529"
            },
            {
              "status": "affected",
              "version": "5.0.00556"
            },
            {
              "status": "affected",
              "version": "4.10.06079"
            },
            {
              "status": "affected",
              "version": "5.0.01242"
            },
            {
              "status": "affected",
              "version": "4.10.06090"
            },
            {
              "status": "affected",
              "version": "5.0.02075"
            },
            {
              "status": "affected",
              "version": "4.10.07061"
            },
            {
              "status": "affected",
              "version": "5.0.03072"
            },
            {
              "status": "affected",
              "version": "4.10.07062"
            },
            {
              "status": "affected",
              "version": "5.0.03076"
            },
            {
              "status": "affected",
              "version": "5.0.04032"
            },
            {
              "status": "affected",
              "version": "4.10.07073"
            },
            {
              "status": "affected",
              "version": "5.0.05040"
            },
            {
              "status": "affected",
              "version": "5.1.0.136"
            },
            {
              "status": "affected",
              "version": "5.1.1.42"
            },
            {
              "status": "affected",
              "version": "4.10.08025"
            },
            {
              "status": "affected",
              "version": "5.1.2.42"
            },
            {
              "status": "affected",
              "version": "4.10.08029"
            },
            {
              "status": "affected",
              "version": "5.1.3.62"
            },
            {
              "status": "affected",
              "version": "5.1.4.74"
            },
            {
              "status": "affected",
              "version": "5.1.5.65"
            },
            {
              "status": "affected",
              "version": "5.1.6.103"
            },
            {
              "status": "affected",
              "version": "5.1.7.80"
            },
            {
              "status": "affected",
              "version": "5.1.8.105"
            },
            {
              "status": "affected",
              "version": "5.1.8.122"
            },
            {
              "status": "affected",
              "version": "5.1.9.113"
            },
            {
              "status": "affected",
              "version": "5.1.10.233"
            },
            {
              "status": "affected",
              "version": "5.1.11.388"
            },
            {
              "status": "affected",
              "version": "5.1.12.146"
            },
            {
              "status": "affected",
              "version": "5.1.13.117"
            },
            {
              "status": "affected",
              "version": "5.1.13.177"
            },
            {
              "status": "affected",
              "version": "5.1.14.145"
            },
            {
              "status": "affected",
              "version": "5.1.15.287"
            },
            {
              "status": "affected",
              "version": "5.1.16.194"
            },
            {
              "status": "affected",
              "version": "5.1.17.3382"
            },
            {
              "status": "affected",
              "version": "5.1.17.3394"
            },
            {
              "status": "affected",
              "version": "5.1.18.314"
            },
            {
              "status": "affected",
              "version": "5.1.19.1862"
            }
          ]
        }
      ],
      "source": "psirt@cisco.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a series of crafted IPC messages to a local socket. A successful exploit could allow the attacker to perform limited file write operations on the filesystem with SYSTEM or root privileges.\r\nAlthough this vulnerability affects the Secure Firewall Posture module in Cisco Secure Client on Windows, macOS, and Linux operating systems, this vulnerability could be used to obtain full root privileges on macOS and Linux. For that reason Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates."
    }
  ],
  "id": "CVE-2026-76462",
  "lastModified": "2026-10-21T18:54:37.403",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "psirt@cisco.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-76462",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-10-21T16:41:41.722414Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-10-21T17:19:06.670",
  "references": [
    {
      "source": "psirt@cisco.com",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-client-priv-esc-muF8eZdm"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "psirt@cisco.com",
      "type": "Secondary"
    }
  ]
}

GHSA-5F4J-PF3P-WCGW

Vulnerability from github – Published: 2026-10-21 18:33 – Updated: 2026-10-21 18:33

Details

This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a series of crafted IPC messages to a local socket. A successful exploit could allow the attacker to perform limited file write operations on the filesystem with SYSTEM or root privileges. Although this vulnerability affects the Secure Firewall Posture module in Cisco Secure Client on Windows, macOS, and Linux operating systems, this vulnerability could be used to obtain full root privileges on macOS and Linux. For that reason Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates.

Severity

5.5 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-76462"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-10-21T17:19:06Z",
    "severity": "MODERATE"
  },
  "details": "A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device.\n\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a series of crafted IPC messages to a local socket. A successful exploit could allow the attacker to perform limited file write operations on the filesystem with SYSTEM or root privileges.\nAlthough this vulnerability affects the Secure Firewall Posture module in Cisco Secure Client on Windows, macOS, and Linux operating systems, this vulnerability could be used to obtain full root privileges on macOS and Linux. For that reason Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates.",
  "id": "GHSA-5f4j-pf3p-wcgw",
  "modified": "2026-10-21T18:33:18Z",
  "published": "2026-10-21T18:33:18Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76462"
    },
    {
      "type": "WEB",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-client-priv-esc-muF8eZdm"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-76462 (GCVE-0-2026-76462)

CERTFR-2026-AVI-1360

Solutions

CISCO-SA-SEC-CLIENT-PRIV-ESC-MUF8EZDM

FKIE_CVE-2026-76462

GHSA-5F4J-PF3P-WCGW

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour