CVE-2015-6306: Cisco AnyConnect Secure Mobility Client

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions, which allows local users to obtain root privileges via a crafted installation file, aka Bug ID CSCuv11947.

Affected products

• Cisco AnyConnect Secure Mobility Client: version 4.1.(8) only

Published 2015-09-26. Last modified 2026-06-17.