ZDI-CAN-29197 HIGH 7.2 Upcoming Feb 12, 2026

Cisco

Cisco, a major networking and cybersecurity equipment manufacturer, has a high-severity vulnerability (CVSS 7.2) that can be exploited remotely by authenticated attackers with high privileges, requiring no user interaction and compromising confidentiality, integrity, and availability. The attack vector indicates this is a network-based threat that an authenticated administrator or privileged insider could leverage to cause significant damage without needing to trick users. Security teams should monitor for suspicious administrative activities and implement strict privilege management on Cisco devices until patches are released by the June 12, 2026 deadline.

Advisory Details
Researcher Jonathan Lein of TrendAI Research
Reported February 12, 2026
Deadline June 12, 2026 57d
CVSS Vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy