HIGHVulnerability
Verified
Global

CISA KEV: Cisco IOS — Cisco IOS Cross-Site Request Forgery Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI.

Analysis

Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. Added to CISA Known Exploited Vulnerabilities catalog on 2026-07-13. Remediation due: 2026-07-16.

Indicators of Compromise (1)

CVE (1)
CVE-2008-4128
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Jul 13, 2026. Verified by: CISA.

Related Threats

LOWVulnerability

Verifone patents tech that lets payment terminals detect tampering

Verifone has been granted a US patent for security technology that allows terminals to continuously monitor themselves for physical tampering, including threats invisible to the human eye.

Finextra
LOWVulnerability

CISA Again Sounds Warning Over Exposed PLCs

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/cisa-again-sounds-warning-over-exposed-plcs-image_small-4-a-32319.jpg" align=right hspace=4><b>Internet-Exposed Programmable Logic Controllers 'An Easy Target'</b><br>Thousands of vulnerable industrial devices, accessible from the public internet, are being targeted by Iran-linked hackers, U.S. authorities said this week. The warn

Bank Info Security
MEDIUMVulnerability

IBM Bets on Multi-Billion-Dollar Open-Source Patch Business

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ibm-bets-on-multi-billion-dollar-open-source-patch-business-image_small-6-a-32317.jpg" align=right hspace=4><b>IBM Charges Enterprises $1M Annually for Validated Legacy Open-Source Patches</b><br>IBM is betting that AI can transform legacy open-source vulnerability remediation into a multibillion-dollar business by delivering vali

Bank Info Security