Loading
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to view information displayed in the web-based management interface without authentication.
Use CWE-285, Cisco vendor hub and Rv016 Multi-Wan Vpn Firmware product page to widen CVE-2019-15990 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2019-15271, CVE-2019-15957 and CVE-2015-6418 for nearby disclosures in the same product family. Additional editorial context is available in The Weekly Cybersecurity Brief: January 30th, 2026.