https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-12T13:10:48.860011+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTFR-2016-AVI-318 CERTFR-2016-AVI-318 — De multiples vulnérabilités ont été corrigées dans <span class="textit">les produits Cisco</span>. Certaines d'entre el… 2026-10-12T13:10:48.867440+00:00 CERTFR-2016-AVI-318 https://vulnerability.circl.lu/vuln/cnvd-2016-08198 cnvd-2016-08198 2026-10-12T13:10:48.867510+00:00 cnvd-2016-08198 https://vulnerability.circl.lu/vuln/fkie_cve-2016-6412 fkie_cve-2016-6412 2026-10-12T13:10:48.867530+00:00

The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773.

 https://vulnerability.circl.lu/vuln/ghsa-v573-qcx7-25pj GHSA-v573-qcx7-25pj 2026-10-12T13:10:48.867577+00:00

The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773.

 https://vulnerability.circl.lu/vuln/gsd-2016-6412 gsd-2016-6412 2026-10-12T13:10:48.867597+00:00 gsd-2016-6412 https://vulnerability.circl.lu/vuln/var-201609-0322 VAR-201609-0322 2026-10-12T13:10:48.867610+00:00

The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773. Vendors have confirmed this vulnerability Bug ID CSCuz84773 It is released as.Man-in-the-middle attacks (man-in-the-middle attack) Crafted by HTTP Any download may be triggered via the header. Cisco IOS and IOSXESoftware are operating systems developed by Cisco Systems for their network devices. A successful attack may allow attackers to insert a crafted HTTP header into an HTTP response that could cause a web page redirection to a possible malicious website; this may aid in launching further attacks. This issue is tracked by Cisco BugId CSCuz84773. Cisco Application-hosting Framework (CAF) is one of the application-hosting framework components