65 casos · pág. 2/4
Cisco has disclosed multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) that could let a remote attacker access or manipulate data, obtain sensitive information, or cause a reload of certificate and key material on an affected device. The advisory (cisco-sa-ise-multiauth-bypa…
Cisco published a Software Security Hardening Release advisory for Cisco IOS XE Software. It addresses multiple vulnerabilities found during an internal security review and internal testing. Cisco states the flaws are not known to be actively exploited. It grouped the issues by Common Weakness Enumeration (CWE) class and assigned a single…
Cisco disclosed a critical authentication bypass, CVE-2026-76504, in the API session-based authentication management of Cisco Catalyst SD-WAN Manager. An unauthenticated, remote attacker can send a crafted HTTP request and gain access to the API with the privileges of the admin user. Cisco has released software updates and states that no …
Cisco published the NX-OS Software Security Hardening Release: October 2026 advisory (cisco-sa-hardening-nxosw1-cWzSbtR) on 7 October 2026. It covers multiple vulnerabilities found by the Cisco NX-OS engineering team during an internal security review. Cisco rates the security impact as Critical and says the flaws are not known to be acti…
Cisco published a security advisory covering multiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem). A remote attacker could exploit them to gain unauthorized access, access sensitive information, cause a denial of service (DoS)…
Cisco disclosed CVE-2026-20173, a medium-severity vulnerability in Cisco NX-OS Software that lets an unauthenticated, remote attacker exhaust system resources and cause a denial of service (DoS). The flaw exists because rate limiting is improperly applied to some protocols. The DoS condition clears without manual intervention soon after t…
Cisco published its October 2026 security hardening release for the Application Policy Infrastructure Controller (APIC). It follows an internal security review that found multiple vulnerabilities. Cisco rates the Security Impact Rating as Critical and assigns CVE-2026-76498, CVE-2026-76499 and CVE-2026-76500. The flaws were found during i…
Cisco disclosed multiple critical vulnerabilities in the Next Generation OAM (NGOAM) feature of Cisco NX-OS Software, affecting Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an affected device. The flaws ar…
Cisco disclosed CVE-2026-20038, a medium-severity vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode. An unauthenticated, remote attacker could bypass configured EPG contracts, undermining segmentation policy enforced by the fabric. The flaw stems from improper control w…
Cisco published a security hardening release for Cisco License On-Prem (formerly Smart Software Manager On-Prem, SSM On-Prem) after an internal security review. The review found multiple vulnerabilities, which Cisco groups by Common Weakness Enumeration (CWE) class under four CVE IDs. Cisco rates the security impact Critical. The flaws we…
Cisco disclosed CVE-2026-20321, a command injection vulnerability in the web-based management API of Cisco Application Policy Infrastructure Controller (APIC). An authenticated, remote attacker with valid administrative credentials could execute arbitrary commands as root on the underlying operating system. Cisco rates the Security Impact…
Cisco disclosed CVE-2026-76488, a medium-severity vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC). An authenticated remote attacker with valid administrative credentials could read sensitive files from the underlying file system of an affected device. The files include key ma…
Cisco disclosed a critical vulnerability, CVE-2026-76465, in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an af…
Cisco disclosed CVE-2026-20362, a server-side request forgery (SSRF) vulnerability in the web-based management interface of Cisco Finesse. An unauthenticated, remote attacker could exploit it by sending a crafted HTTP request to an affected device. Successful exploitation could expose limited sensitive information from services associated…
Cisco disclosed CVE-2026-20032, a Medium-rated vulnerability in the Python interpreter of Cisco NX-OS Software. An authenticated local attacker with low privileges and Python execution rights can escape the Python sandbox and reach the underlying operating system of the device. The flaw stems from insufficient validation of user-supplied …
Cisco disclosed a critical vulnerability, CVE-2026-76471, in the NX-API feature of Cisco NX-OS Software. An unauthenticated, remote attacker could use it to execute arbitrary code with root privileges or to cause a denial of service on an affected device. Cisco rates the Security Impact as Critical. Software updates are available and no w…
Cisco disclosed CVE-2026-20293, a high-severity UEFI Secure Boot bypass in the UEFI Shell of Cisco UCS Servers and UCS-based appliances. An authenticated attacker with a user or admin role, or an unauthenticated attacker with physical access, can bypass Secure Boot validation and execute unauthorized software. Cisco has released software …
Cisco PSIRT announced that on October 21, 2026 it will publish security advisories and fixed software releases for several products. The products are Expressway Series, IOS XR Software for ASR 9000 Series Routers, Secure Client, Snort and Unified Communications products. The Expressway, Snort and Unified Communications releases are descri…
Cisco published a security hardening release for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager (September 2026), fixing multiple vulnerabilities found during an internal security review. Cisco states that two of them are known to be actively exploited. They are described in separate advisories as a SQL injection and an…
Cisco published its Meraki Security Hardening Release for October 2026, addressing multiple vulnerabilities found during an internal security review of Meraki software. Cisco rates the Security Impact Rating as Critical. The flaws were found in internal testing and are not known to be actively exploited. Cisco grouped the issues by Common…
