Vulnerability list

Filter public vulnerability entries by severity / channel / vendor / time.

Filter by severity Critical High Medium Low Listed in CISA KEV

Software category Office Production Web app

Exploitability PRO Exploitable (in the wild) Has PoC Unconfirmed About paid access →

Cisco IOS Cross-Site Request Forgery Vulnerability

Medium 4.3 KEV

CVE-2008-4128 · 2026-07-14 · draft

Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "al…