ZDI-CAN-29198 HIGH 7.8 Upcoming Feb 12, 2026

Cisco

Cisco, a major networking and cybersecurity equipment manufacturer, has a high-severity vulnerability (CVSS 7.8) that requires local access and low-level user privileges to exploit, with no user interaction needed, resulting in compromised confidentiality, integrity, and availability of the affected system. The vulnerability was reported in February 2026 with a four-month vendor remediation window ending in June 2026. Security teams should monitor Cisco's advisory channels closely for patch releases and consider prioritizing this vulnerability for systems with untrusted local users or where privilege escalation is a concern.

Advisory Details
Researcher Bobby Gould (@bobbygould5) of TrendAI Zero Day Initiative
Reported February 12, 2026
Deadline June 12, 2026 57d
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy