Cisco IOS Vulnerability
Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI.
CVSS Score
9.8
CRITICAL
Published
13 Jul 2026 00:00
Modified
N/A
Vendor
Cisco
Product
IOS
Source
CIRCL
Affected Versions
Fix
Vendor Patch / Mitigation Available
Weaknesses (CWE)
CWE-352
Affected Systems
Cisco
IOS
Cisco
Secure Firewall Adaptive Security Appliance (ASA) And Secure Firewall Threat Defense (FTD)
Secure Firewall Management Center (FMC)
IOS
Unified Communications Manager
Catalyst SD-WAN Manager
Catalyst SD-WAN
Catalyst SD-WAN Manger
External Links
KEV Status
Known Exploited Vulnerability