References https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180129-asa1.html https://nvd.nist.gov/vuln/detail/CVE-2025-20333 https://zhuanlan.zhihu.com/p/34708382 https://www.anquanke.com/post/id/96705 https://avd.aliyun.com/detail?id=AVD-2016-6366 https://cert.360.cn/warning/detail?id=9ac3d26f7ba7c68ccc3b7762cb646a2b https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-rce-gRAuPEUF https://www.tenablecloud.cn/plugins/nessus/313234 https://cve.imfht.com/poc_detail/19cb5d28b348fb98d055e68b9adeda19c397b961
Related VulnerabilitiesPoCCVE-2026-0561: Shield Security <= 21.0.8 - Unauthenticated Reflected XSSPoCCVE-2026-5032: W3 Total Cache <= 2.9.3 - Unauthenticated Dynamic Security Token DisclosureCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File UploadTattile Camera /api/v1/security/login 默认口令漏洞(CVE-2026-26341)PoCCVE-2023-49438: Python Flask-Security-Too <=5.3.2 - Open Redirect思科系统(中国)网络技术有限公司Cisco AP WebUI存在弱口令PoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication BypassRundeck /j_security_check 默认口令漏洞Pentaho /pentaho/j_spring_security_check 默认口令漏洞Cisco Catalyst SD-WAN身份验证绕过漏洞Cisco Catalyst SD-WAN 权限绕过漏洞(CVE-2026-20127)PoCCVE-2025-40536: SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass