CVE-2011-0926
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly...
CVE-2011-0926 is a high vulnerability (CVSS 9.3) in Cisco Secure Desktop, published February 25, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.81%, the 94th percentile. No source names a fixed version.
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.
Exploit likelihood
What each source reports
NVD Score used
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.
- Record
CVE-2011-0926- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.
- Record
CVE-2011-0926- Updated
- 2026-11-02
EUVDEUVD-2011-0938 No score
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.
- Record
EUVD-2011-0938- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2gxw-4wp7-72hf No score
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly...
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.
- Record
GHSA-2gxw-4wp7-72hf- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
vupen.com/english/advisories/2011/0513
exchange.xforce.ibmcloud.com/vulnerabilities/65755
securityfocus.com/archive/1/516647/100/0/threaded
securityreason.com/securityalert/8105
securitytracker.com/id?1025118
zerodayinitiative.com/advisories/ZDI-11-091
nvd.nist.gov/vuln/detail/CVE-2011-0926
github.com/advisories/GHSA-2gxw-4wp7-72hf