ZDI-CAN-28709
HIGH 7.2
Overdue
Dec 18, 2025
Cisco
Cisco, a major networking and cybersecurity equipment manufacturer, has a high-severity vulnerability (CVSS 7.2) that can be exploited remotely over the network by an authenticated attacker with high privileges, potentially compromising confidentiality, integrity, and availability of affected systems. The attack requires no user interaction and impacts only the vulnerable system itself. Security teams should monitor for this vulnerability across their Cisco infrastructure and prepare for patching once Cisco releases fixes by the April 2026 deadline.
Advisory Details
Researcher
Discovered by:
Jonathan Lein of Trend Research
Reported
December 18, 2025
Deadline
April 17, 2026
3d overdue
CVSS Vector
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H