cvedb.io
CVE-2026-41954
MEDIUM · CVSS 4.9
EPSS exploitation probability: 21%
Published 2026-05-13T16:16:45.600 · Last modified 2026-06-24T14:52:09.047

Summary

Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Does this affect you?

Add your gear to cvedb and we'll alert you only when a vendor you run ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.