Cisco — PoC Archivehttps://poc.intelseclab.com/tags/cisco/Latest proof-of-concept entries.Hugoen-usSun, 16 Aug 2026 00:00:00 +0000Cisco IMC Argument Injection to Root RCE (CVE-2026-20200)https://poc.intelseclab.com/pocs/network/2026-08-16_cve-2026-20200-cisco-imc-argument-injection-rce/Sun, 16 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-16_cve-2026-20200-cisco-imc-argument-injection-rce/Critical severity (CVSS 9.9) — network · CVE-2026-20200 / NSIDE-SA-2026-003. Status: Patched. Affects: Cisco Integrated Management Controller (CIMC). Tags: cisco, imc, cimc, argument-injection, rce, redfish, curl, reverse-shell, arm, file-read, file-write, CVE-2026-20200.networkCriticalciscoimccimcargument-injectionrceredfishcurlreverse-shellarmfile-readfile-writeCVE-2026-20200Cisco Unified Communications Manager WebDialer SSRF → Arbitrary File Write → Root (CVE-2026-20230)https://poc.intelseclab.com/pocs/network/2026-07-19_cve-2026-20230-cisco-ucm-ssrf-arbitrary-file-write/Sun, 19 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-19_cve-2026-20230-cisco-ucm-ssrf-arbitrary-file-write/Critical severity (CVSS 8.6) — network · CVE-2026-20230 (cisco-sa-cucm-ssrf-cXPnHcW). Status: PoC — scanner/tester confirms the WebDialer precondition and SSRF reachability. Affects: Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (SME) — WebDialer service. Tags: cisco, unified-communications-manager, ucm, webdialer, ssrf, cwe-918, unauthenticated, remote, privilege-escalation, kev, actively-exploited.networkCriticalciscounified-communications-managerucmwebdialerssrfcwe-918unauthenticatedremoteprivilege-escalationkevactively-exploitedCisco AsyncOS Spam Quarantine (TCP/6025) Exposure & IOC Scanner (CVE-2025-20393)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-20393-cisco-asyncos-quarantine-rce-scanner/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-20393-cisco-asyncos-quarantine-rce-scanner/Critical severity (CVSS 10) — network · CVE-2025-20393. Status: PoC. Affects: Cisco AsyncOS for Secure Email Gateway (ESA) / Security Management Appliance (SMA). Tags: cisco, asyncos, secure-email-gateway, sma, spam-quarantine, tcp-6025, unauthenticated-rce, exposure-scanner, ioc-detection, backdoor-detection, python.networkCriticalciscoasyncossecure-email-gatewaysmaspam-quarantinetcp-6025unauthenticated-rceexposure-scannerioc-detectionbackdoor-detectionpythonCisco ASA/FTD WebVPN File-Handler Heap Buffer Overflow Exposure Scanner (CVE-2025-20333)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-20333-cisco-asa-ftd-webvpn-buffer-overflow/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-20333-cisco-asa-ftd-webvpn-buffer-overflow/Critical severity (CVSS 9.9) — network · CVE-2025-20333. Status: PoC. Affects: Cisco Secure ASA and Cisco Secure FTD (WebVPN / AnyConnect file upload handler). Tags: cisco, asa, ftd, webvpn, anyconnect, heap-buffer-overflow, cwe-120, rce-as-root, exposure-scanner, path-traversal, python.networkCriticalciscoasaftdwebvpnanyconnectheap-buffer-overflowcwe-120rce-as-rootexposure-scannerpath-traversalpythonCisco Catalyst SD-WAN Peering Authentication Bypass — CVE-2026-20182https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-20182-cisco-sdwan-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-20182-cisco-sdwan-auth-bypass/Critical severity (CVSS 10) — network · CVE-2026-20182. Status: Weaponized. Affects: Cisco Catalyst SD-WAN Controller (formerly vSmart) and Cisco Catalyst SD-WAN Manager (formerly vManage) — vdaemon control-connection process. Tags: cisco, sd-wan, vdaemon, dtls, authentication-bypass, netconf, vmanage, vsmart.networkCriticalciscosd-wanvdaemondtlsauthentication-bypassnetconfvmanagevsmartCisco Unified CM WebDialer SSRF to Arbitrary File Write / RCE (CVE-2026-20230)https://poc.intelseclab.com/pocs/network/2026-07-01_cve-2026-20230-cisco-ucm-webdialer-ssrf-rce/Wed, 01 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-01_cve-2026-20230-cisco-ucm-webdialer-ssrf-rce/Critical severity (CVSS 8.6) — network · CVE-2026-20230. Status: Weaponized. Affects: Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (SME). Tags: SSRF, RCE, Cisco, Unified-Communications-Manager, WebDialer, file-write, webshell, jsp-webshell, CISA-KEV, active-exploitation.networkCriticalSSRFRCECiscoUnified-Communications-ManagerWebDialerfile-writewebshelljsp-webshellCISA-KEVactive-exploitationCisco Catalyst SD-WAN Manager Arbitrary File Write (CVE-2026-20262)https://poc.intelseclab.com/pocs/network/2026-07-01_cve-2026-20262-cisco-sdwan-manager-file-write/Wed, 01 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-01_cve-2026-20262-cisco-sdwan-manager-file-write/Medium severity (CVSS 6.5) — network · CVE-2026-20262. Status: PoC. Affects: Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage). Tags: path-traversal, file-write, Cisco, SD-WAN, vManage, authenticated, CWE-22, active-exploitation.networkMediumpath-traversalfile-writeCiscoSD-WANvManageauthenticatedCWE-22active-exploitationCisco Catalyst SD-WAN Manager Privilege Escalation (CVE-2026-20245)https://poc.intelseclab.com/pocs/network/2026-06-28_cve-2026-20245-cisco-sdwan-priv-esc/Sun, 28 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-06-28_cve-2026-20245-cisco-sdwan-priv-esc/High severity (CVSS 7.8) — network · CVE-2026-20245. Status: PoC. Affects: Cisco Catalyst SD-WAN Manager (vManage), SD-WAN Controller (vSmart), SD-WAN Validator (vBond). Tags: privilege-escalation, Cisco, SD-WAN, vManage, file-upload, command-injection, root, CISA-KEV, no-patch, Mandiant, nation-state.networkHighprivilege-escalationCiscoSD-WANvManagefile-uploadcommand-injectionrootCISA-KEVno-patchMandiantnation-state