Cisco and VMware Products Face Multiple Vulnerabilities

Hkcert

Cisco and VMware Products Face Multiple Vulnerabilities

First seen 26 Feb 2026, 07:11 UTC • •34.9

Article Content

1 / 4

Browse articles

ThreatCluster •March 12, 2026 at 16:10 UTC

Multiple vulnerabilities have been identified in Cisco and VMware products, allowing remote attackers to exploit these issues. The vulnerabilities include denial of service, cross-site scripting, remote code execution, and elevation of privilege. Users are advised to consult the vendor websites for affected versions and apply the necessary fixes.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 213d ago How this analysis works

Timeline

2026-02-25

VMware vulnerabilities reported

2026-02-26

Cisco vulnerabilities reported

More articles in this cluster (3)

Threat Graph

4 entities, 3 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

T1068 - Exploitation for Privilege Escalation
T1203 - Exploitation for Client Execution

Tool (1)

VMware

Vulnerability (1)

XSS

Relationships

VMware exploits XSS
XSS related to T1068 - Exploitation for Privilege Escalation
XSS related to T1203 - Exploitation for Client Execution

Continue Reading

Critical XSS Vulnerability in SUSE Rancher Exposes Admin Sessions A critical vulnerability (CVE-2026-88804) in SUSE Rancher allows unauthenticated remote attackers to execute stored cross-site scripting (XSS) attacks via public UI settings. This affects Rancher versions 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14, and 2.11 before 2.11.18.…

Multiple WordPress Plugins Face Vulnerabilities Requiring Immediate Updates Three WordPress plugins have been reported with vulnerabilities: the GiveWP plugin (version 4.16.9) has a Cross Site Scripting (XSS) vulnerability, while both the Siteskite (version 2.1.8) and Cartflows (version 3.2.0) plugins have Remote Code Execution (RCE) vulnerabilities. The XSS vulnerability allows attackers to…