CVE-2006-3226 json
Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HT…
published 2006-06-26 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-3223
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.4%
- EPSS 2.4% chance of exploitation in 30 days, percentile 84%
- public exploits
- 0
- none known
Summary
Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management Vulnerability."
Exploit prediction
2.39% chance of exploitation in the next 30 days, higher than 84% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
cisco.com
/en/US/products/sw/secursw/ps2086/tsd_products_security_response09186a00806c68f9.html
vendor-advisory
-
securitytracker.com
/id?1016369
vdb-entry
-
osvdb.org
/26825
vdb-entry
-
securityreason.com
/securityalert/1157
third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/27328
vdb-entry
-
vupen.com
/english/advisories/2006/2524
vdb-entry
-
secunia.com
/advisories/20816
third-party-advisory
-
securityfocus.com
/archive/1/438161/100/0/threaded
mailing-list
-
securityfocus.com
/bid/18621
vdb-entry
-
securityfocus.com
/archive/1/438258/100/0/threaded
mailing-list
Sources
- CVE List CVE-2006-3226
- NVD CVE-2006-3226
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.