Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2585▼ 302 respecto a la semana anterior
Críticas / altas1355▲ 99 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
11 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Pendiente de análisis | Alta (8.2) | 0.46% | — | Cisco Adaptive Security Device ManagerAICisco Secure FMC SoftwareAI | 16/9/2026 | 18/9/2026 | A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An attacker could… | |
| Pendiente de análisis | Alta (8.5) | 0.44% | — | Cisco Secure FMC SoftwareAI | 16/9/2026 | 18/9/2026 | A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service. This vulnerability is due to an error when checking the privilege level of a user who is invoking remote diagnostics. An attacker could… | |
| Pendiente de análisis | Alta (8.8) | 0.37% | — | Cisco Secure FMCAI | 16/9/2026 | 18/9/2026 | A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection attack against an affected device. To exploit this vulnerability, the attacker must have a valid account on the device with the role of Security Approver, Access… | |
| Pendiente de análisis | Alta (7.5) | 0.45% | — | Cisco Secure FMCAI | 16/9/2026 | 18/9/2026 | A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space. This vulnerability exists because a critical API lacks authentication. An attacker could exploit this vulnerability by repeatedly invoking the… | |
| Pendiente de análisis | Alta (7.7) | 0.55% | — | Cisco Secure FMCAI | 16/9/2026 | 18/9/2026 | A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability exists because user input is not being sanitized. An attacker could exploit this vulnerability by sending a crafted HTTPS… | |
| Pendiente de análisis | Alta (8.8) | 0.69% | — | Cisco Secure FMC SoftwareAI | 16/9/2026 | 18/9/2026 | A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level. This vulnerability is due to unsecured deserialization of web-management user-controlled data. An attacker could exploit this vulnerability by authenticating to the… | |
| Pendiente de análisis | Alta (8.3) | 0.09% | — | Cisco Secure FMC SoftwareAICisco Secure FTD SoftwareAI | 16/9/2026 | 18/9/2026 | A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to impersonate the peer device and obtain access at the level of the manager role, which is equivalent to root. This vulnerability is due… | |
| Pendiente de análisis | Alta (8.6) | 0.55% | — | Cisco Secure FMC SoftwareAICisco Secure FTD SoftwareAI | 16/9/2026 | 18/9/2026 | A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to exhaust the available memory of an affected device. This vulnerability is due to improper management of memory resources during sftunnel TLS… | |
| Pendiente de análisis | Crítica (9.1) | 0.45% | — | Cisco Secure FMC SoftwareAICisco FTDAI | 16/9/2026 | 18/9/2026 | A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privileges. This vulnerability is due to unsecured deserialization of untrusted data over the sftunnel management connection. An attacker could exploit this… | |
| Pendiente de análisis | Crítica (9) | 0.38% | — | Cisco Secure FMC SoftwareAI | 16/9/2026 | 17/9/2026 | A vulnerability in the internal configuration of the Apache JServ Protocol (AJP) connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to impersonate a peer device. This vulnerability is due to incorrect initialization of encryption parameters for the AJP connector at boot time.… | |
| Pendiente de análisis | Media (6.5) | 0.34% | — | Cisco Secure FMCAI | 4/3/2026 | 17/6/2026 | A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an… |