IOS vulnerabilities
1 published alerts for Cisco IOS.
Actively exploited (KEV)
Cisco IOS Cross-Site Request Forgery Vulnerability
Cisco IOS is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2008-4128). Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. CISA remediation due date: 2026-07-16. If you need help checking exposure, call (864) 335-9223.