FeedNetworking

Verified advisories, vulnerability disclosures, and architectural research.

CVE-2020-3153

CVE-2020-3153: Defending Against Cisco AnyConnect Privilege Escalation and DLL Hijacking

Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks.

AnyConnect Secure

View Detail

CVE-2026-20182

Cisco Catalyst SD-WAN Critical Authentication Bypass (CVE-2026-20182): Technical Advisory and Remediation Guide

Cisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability that allows an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.

Catalyst SD-WAN

View Detail

CVE-2025-5777

Critical Advisory: CVE-2025-5777 Citrix NetScaler Memory Disclosure (Citrix Bleed 2)

Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability (CVE-2025-5777) due to insufficient input validation. This can lead to memory overread on Gateway or AAA virtual servers, posing a critical risk of data disclosure and session hijacking.

NetScaler ADC and Gateway

View Detail