ZDI-CAN-28724 MEDIUM 5.5 Upcoming Jan 08, 2026

Cisco

Cisco, a major networking and security equipment manufacturer, has a medium-severity vulnerability (CVSS 5.5) that requires high-level privileges and network access to exploit, resulting in confidentiality compromise with minor integrity impact but no availability disruption. The flaw was discovered by Jonathan Lein of Trend Research and reported in January 2026, giving Cisco until May 2026 to release a patch. Security teams should monitor Cisco's advisory channels for the official patch release and assess whether any of their Cisco systems are exposed to attackers with administrative credentials.

Advisory Details
Researcher Discovered by: Jonathan Lein of Trend Research
Reported January 08, 2026
Deadline May 08, 2026 21d
CVSS Vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy