返回 CVE 浏览器

CVE-2026-20128

🔥 Known Exploited (CISA KEV)HIGH

8.3

CVSS Severity Score

EPSS Score93.4970%

EPSS Percentile89.47th

Published2026-04-20

Last Modified2026-06-12

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacker to gain DCA user privileges by accessing a credential file for the DCA user on the filesystem as a low-privileged user.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://nvd.nist.gov/vuln/detail/CVE-2026-20128

相關資安分析文章

每日全球网络威胁情报摘要｜2026 年 7 月 24 日

本期情报聚焦于 Check Point CVE-2026-16232 SmartConsole 控制平面身份验证绕过之主动利用、俄罗斯 LAUNDRY BEAR 利用 Zimbra 漏洞进行电子邮件间谍活动，以及假冒 Claude Desktop 的恶意广告攻击与 Chaos 勒索软件运作动态。

每日全球网络威胁情报摘要｜2026 年 7 月 22 日

本期摘要重点分析本地部署 Microsoft SharePoint 服务器正遭主动利用之 CVE-2026-50522 漏洞、Qilin 勒索软件利用 PAN-OS CVE-2026-0257 身份验证绕过入侵企业 VPN，以及 Cisco 安全设备与关键基础设施修补处置指南。

相关漏洞威胁

CVE-2026-674394.3

OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/...

CVE-2026-674386.6

OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/execu...

CVE-2026-674377.5

OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/...

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...