<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: network services orchestrator</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-32433: Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-32433.html</link><guid>https://patchthecve.com/cve/CVE-2025-32433.html</guid><pubDate>Wed, 17 Jun 2026 09:11:59 +0000</pubDate><description>CRITICAL 10.0: Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor co</description></item><item><title>CVE-2021-1132: A vulnerability in the API subsystem and in the web-management interface of Cisco&amp;nbsp;Network Services Orches</title><link>https://patchthecve.com/cve/CVE-2021-1132.html</link><guid>https://patchthecve.com/cve/CVE-2021-1132.html</guid><pubDate>Wed, 17 Jun 2026 03:31:01 +0000</pubDate><description>MEDIUM 5.3: A vulnerability in the API subsystem and in the web-management interface of Cisco&amp;nbsp;Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to access sensitive data.
This vulnerability exists because the web-management interface and certain HTTP-based APIs do not prop</description></item><item><title>CVE-2024-20381: A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD t</title><link>https://patchthecve.com/cve/CVE-2024-20381.html</link><guid>https://patchthecve.com/cve/CVE-2024-20381.html</guid><pubDate>Wed, 17 Jun 2026 07:06:52 +0000</pubDate><description>HIGH 8.8: A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is used by the web-based management interfaces of Cisco Optical Site Manager and Cisco RV340 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to modify the conf</description></item></channel></rss>