ZDI-CAN-28708
MEDIUM 4.9
Overdue
Dec 18, 2025
Cisco
This vulnerability affects Cisco, a major networking and cybersecurity infrastructure vendor. The flaw has a medium severity rating and can be exploited remotely by authenticated attackers with high privileges, resulting in confidentiality compromise but no integrity or availability impact. Security teams should monitor for this advisory's resolution by the April 2026 deadline and ensure privileged account access controls are strictly enforced on affected Cisco systems.
Advisory Details
Researcher
Discovered by:
Jonathan Lein of Trend Research
Reported
December 18, 2025
Deadline
April 17, 2026
3d overdue
CVSS Vector
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N