Opensource security platform: Critical gap in Wazuh allowed code smuggling
Attackers were able to remotely execute their own code on Wazuh servers via insecure deserialization. The attack was also ...
Critical Cisco ISE bug can let attackers run commands as root
Cisco has fixed two critical Identity Services Engine (ISE) vulnerabilities that can let attackers with read-only admin ...
CSOonline7d
Cisco’s ISE bugs could allow root-level command execution
The insecure deserialization and authorization bypass flaws could enable attackers to escalate privileges and run arbitrary commands.
Hosted on MSN9d
Cisco patches two critical Identity Services Engine flaws
One gives root access, the other lets you steal info and reconfig nodes, in the right (or should that be wrong) circumstances ...
The Hacker News8d
Cisco Patches Critical ISE Vulnerabilities Enabling Root CmdExec and PrivEsc
Cisco has patched two critical ISE vulnerabilities (CVEs 2025-20124, 2025-20125) allowing remote command execution and ...
heise online22d
Security appliance: Attackers hijack SonicWall devices with system commands
Via an insecure deserialization (CVE-2025-23006, critical rating, CVSS value 9.8/10), attackers can remotely inject system commands under certain conditions, which the device then executes.