1.167 casos · pág. 41/59
Cisco published a security hardening release for Cisco License On-Prem (formerly Smart Software Manager On-Prem, SSM On-Prem) after an internal security review. The review found multiple vulnerabilities, which Cisco groups by Common Weakness Enumeration (CWE) class under four CVE IDs. Cisco rates the security impact Critical. The flaws we…
Cisco disclosed CVE-2026-20321, a command injection vulnerability in the web-based management API of Cisco Application Policy Infrastructure Controller (APIC). An authenticated, remote attacker with valid administrative credentials could execute arbitrary commands as root on the underlying operating system. Cisco rates the Security Impact…
Cisco disclosed CVE-2026-76488, a medium-severity vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC). An authenticated remote attacker with valid administrative credentials could read sensitive files from the underlying file system of an affected device. The files include key ma…
Cisco disclosed a critical vulnerability, CVE-2026-76465, in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an af…
Cisco disclosed CVE-2026-20362, a server-side request forgery (SSRF) vulnerability in the web-based management interface of Cisco Finesse. An unauthenticated, remote attacker could exploit it by sending a crafted HTTP request to an affected device. Successful exploitation could expose limited sensitive information from services associated…
Cisco disclosed CVE-2026-20032, a Medium-rated vulnerability in the Python interpreter of Cisco NX-OS Software. An authenticated local attacker with low privileges and Python execution rights can escape the Python sandbox and reach the underlying operating system of the device. The flaw stems from insufficient validation of user-supplied …
Cisco disclosed a critical vulnerability, CVE-2026-76471, in the NX-API feature of Cisco NX-OS Software. An unauthenticated, remote attacker could use it to execute arbitrary code with root privileges or to cause a denial of service on an affected device. Cisco rates the Security Impact as Critical. Software updates are available and no w…
Cisco disclosed CVE-2026-20293, a high-severity UEFI Secure Boot bypass in the UEFI Shell of Cisco UCS Servers and UCS-based appliances. An authenticated attacker with a user or admin role, or an unauthenticated attacker with physical access, can bypass Secure Boot validation and execute unauthorized software. Cisco has released software …
Cisco PSIRT announced that on October 21, 2026 it will publish security advisories and fixed software releases for several products. The products are Expressway Series, IOS XR Software for ASR 9000 Series Routers, Secure Client, Snort and Unified Communications products. The Expressway, Snort and Unified Communications releases are descri…
Cisco published a security hardening release for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager (September 2026), fixing multiple vulnerabilities found during an internal security review. Cisco states that two of them are known to be actively exploited. They are described in separate advisories as a SQL injection and an…
Cisco published its Meraki Security Hardening Release for October 2026, addressing multiple vulnerabilities found during an internal security review of Meraki software. Cisco rates the Security Impact Rating as Critical. The flaws were found in internal testing and are not known to be actively exploited. Cisco grouped the issues by Common…
Cloudflare reports that one year after announcing a goal of hiring up to 1,111 interns in 2026, it has hosted 750 internships across 48 teams in nine offices. The post is corporate and HR news, not a security incident, and describes no threat activity, vulnerability or breach. Interns used AI tooling to speed up onboarding and shipped wor…
Cloudflare published its Birthday Week 2026 wrap-up, listing 46 product and platform announcements made between September 28 and October 2. The article is vendor product news and describes no incident, vulnerability or active threat. Security-relevant items include Cloudflare's plan to become a public certificate authority issuing Merkle …
The DNS root zone is scheduled to switch its key-signing key (KSK) on October 11, 2026, only the second root KSK rollover ever. KSK-2024 (key tag 38696) will replace KSK-2017 (key tag 20326) as signer of the root DNSKEY set. DNSSEC-validating resolvers that do not trust the new key could fail validation and make healthy websites under any…
Cloudflare has described a multi-agent AI security operations harness in its Cloudflare Managed Defense service, now in early beta for eligible application-security alerts and cases. It is meant to reduce analyst overload from correlated alerts. Deterministic code collects evidence and enforces scope before any model runs, which addresses…
Cloudflare has redesigned the landing page of Cloudflare Radar, its public platform for real-time global Internet trends. The goal is to make the platform easier to use for journalists, human rights advocates, policymakers and general users, while keeping the depth that network operators and academic researchers rely on. The new page lead…
Cloudflare announced that the Deno team, led by Ryan Dahl and Bert Belder, is joining the company. celld, Deno's Rust-based implementation of Workers and Durable Objects, will be merged with workerd, Cloudflare's open-source Workers runtime. The goal is to make self-hosting the Workers programming model, including distributed Durable Obje…
Cloudflare announced on-demand CPU and memory profiling for Workers and Durable Objects. Developers can request a profile of a live production Worker from the Observability page or the cf CLI, inspect it as an interactive flamegraph, and download the .pprof file. This is a product and observability announcement with no vulnerability, thre…
Cloudflare announced Clef-omni, an open-weight decision model that accepts text, image, audio (wav/mp3) and video (mp4/webm) input in a single API call. It is built on a Qwen3-Omni-30B-A3B-Instruct mixture-of-experts backbone with LoRA adapters. Cloudflare also cut the price of Clef-flash to $0.038 per M input tokens, at the cost of a sma…
Cloudflare announced general availability of Logpush Transformers, and made Logpush available on all self-serve plans. The feature lets teams filter, redact, and reshape logs with a SQL query before export to SIEMs, analytics platforms, or object storage. The article is a product and engineering post with no vulnerability, incident, or th…
