ZDI-CAN-29206 HIGH 7.8 Upcoming Feb 12, 2026

Cisco

Cisco, a major networking and cybersecurity equipment manufacturer, has a local privilege escalation vulnerability (CVE pending) with a high CVSS score of 7.8 that requires local access and low-level user privileges to exploit, potentially compromising confidentiality, integrity, and system availability. The vulnerability poses a significant risk in multi-user environments where untrusted local users have system access, as no additional user interaction is needed for exploitation. Security teams should prioritize patching Cisco products before the June 12, 2026 deadline and monitor for suspicious privilege escalation attempts on affected systems.

Advisory Details
Researcher Bobby Gould (@bobbygould5) of TrendAI Zero Day Initiative
Reported February 12, 2026
Deadline June 12, 2026 57d
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy