References https://www.iotsec-zone.com/article/428 https://cloud.tencent.com/developer/article/2359262 https://www.opswat.com/blog/cve-2023-20198-cve-2023-20273-from-unauthenticated-web-request-to-root-on-ios-xe https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/ https://tutorialboy.medium.com/unveiling-the-unauthenticated-command-execution-vulnerability-in-cisco-ios-xe-system-webui-9d1673b08b34 https://xuanxuanblingbling.github.io/iot/2020/10/26/rv110w/ https://www.iotsec-zone.com/article/383 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-path-trav-Dz5dpzyM https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-case-mvuln-dYrDPC6w.html https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW
Related VulnerabilitiesPoCCVE-2026-19598: Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX RouterPoCCVE-2026-19900: LB-LINK Routers - Unauthenticated Command InjectionCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)9Router /api/cli-tools/cowork-settings 命令执行漏洞(CVE-2026-63732)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File UploadPoCCVE-2026-46339: 9Router <= 0.4.36 - Unauthenticated RCEPoCCVE-2026-59801: 9Router - Unauthenticated LLM Provider API ExposurePoC9router-default-login: 9Router - Default Login9Router /api/cli-tools/cowork-settings 命令执行漏洞(CVE-2026-46339)9router /api/tunnel/tailscale-install 命令执行漏洞PoCCVE-2026-54236: vLLM <= 0.23.0 - Anthropic Router Heap Address Information Leak思科系统(中国)网络技术有限公司Cisco AP WebUI存在弱口令PoCBLINK Routers /goform/set_cmd 命令执行漏洞(CVE-2025-1609)