CVE-2026-20093 is a CVSS 9.8 pre-auth password change on Cisco IMC via configConfMo/aaaUser. Lab notes unpack HUU 4.3.2.250063 vs 4.3.2.260007: nginx /nuova, FastCGI, xapireqproc manageUsers. Patch or isolate the BMC.

Learn how CVE-2026-20230 enables Cisco Unified CM pre-auth RCE through WebDialer SSRF, exploit analysis, and mitigation steps

On September 25, 2025, Cisco published advisories for two new vulnerabilities, CVE-2025-20362, and CVE-2025-20333, which are known to be exploited in-the-wild …

Explore how a hard-coded JWT in Cisco IOS XE WLC enables unauthenticated file upload and potential RCE—and how to mitigate it.

Hacking Apple is no easy feat. With some of the most talented security professionals working on protecting their systems, it’s hard to…