/
attack_type:authentication_bypass × latest_source_host:sec.cloudapps.cisco.com × limpar

Resultados

3 casos · pág. 1/1

sec.cloudapps.cisco.com · medium

Cisco ISE and ISE-PIC authentication bypass vulnerabilities allow remote data access and manipulation (4 CVEs)

Cisco has disclosed multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) that could let a remote attacker access or manipulate data, obtain sensitive information, or cause a reload of certificate and key material on an affected device. The advisory (cisco-sa-ise-multiauth-bypa…

sec.cloudapps.cisco.com · critical

Cisco Catalyst SD-WAN Manager API authentication bypass (CVE-2026-76504) gives unauthenticated attackers admin access

Cisco disclosed a critical authentication bypass, CVE-2026-76504, in the API session-based authentication management of Cisco Catalyst SD-WAN Manager. An unauthenticated, remote attacker can send a crafted HTTP request and gain access to the API with the privileges of the admin user. Cisco has released software updates and states that no …

sec.cloudapps.cisco.com · critical

Cisco ASA, FTD and FMC hardening release fixes 8 CVEs, two FMC flaws actively exploited

Cisco published a September 2026 hardening release for Cisco Secure Firewall ASA, Secure Firewall Threat Defense (FTD) and Secure Firewall Management Center (FMC) software. It addresses multiple vulnerabilities found during an internal security review. Cisco rates the advisory Critical and states that two of the issues are known to be act…