ZDI-CAN-28709 HIGH 7.2 Overdue Dec 18, 2025

Cisco

Cisco, a major networking and cybersecurity equipment manufacturer, has a high-severity vulnerability (CVSS 7.2) that can be exploited remotely over the network by an authenticated attacker with high privileges, potentially compromising confidentiality, integrity, and availability of affected systems. The attack requires no user interaction and impacts only the vulnerable system itself. Security teams should monitor for this vulnerability across their Cisco infrastructure and prepare for patching once Cisco releases fixes by the April 2026 deadline.

Advisory Details
Researcher Discovered by: Jonathan Lein of Trend Research
Reported December 18, 2025
Deadline April 17, 2026 3d overdue
CVSS Vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy