CVE-2016-9091

Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges.

• CWE-78

• http://www.securityfocus.com/bid/97372Third Party Advisory, VDB Entry
• https://bto.bluecoat.com/security-advisory/sa138Mitigation, Vendor Advisory
• https://www.exploit-db.com/exploits/41785/
• https://www.exploit-db.com/exploits/41786/
• http://www.securityfocus.com/bid/97372Third Party Advisory, VDB Entry
• https://bto.bluecoat.com/security-advisory/sa138Mitigation, Vendor Advisory
• https://www.exploit-db.com/exploits/41785/
• https://www.exploit-db.com/exploits/41786/

Published

Apr 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9082Integer overflow in the write_png function in cairo 1.14.6 a…
• CVE-2016-9083drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.…7.8
• CVE-2016-9084drivers/vfio/pci/vfio_pci_intrs.c in the Linux kernel throug…
• CVE-2016-9085Multiple integer overflows in libwebp allows attackers to ha…3.3
• CVE-2016-9086GitLab versions 8.9.x and above contain a critical security …
• CVE-2016-9087SQL injection vulnerability in framework/modules/filedownloa…
• CVE-2016-9092The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1…
• CVE-2016-9093A version of the SymEvent Driver that shipped with Symantec …
• CVE-2016-9094Symantec Endpoint Protection clients place detected malware …
• CVE-2016-9095Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9096Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9097The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.…