/
criticity:critical × latest_source_host:sec.cloudapps.cisco.com × limpar

Resultados

7 casos · pág. 1/1

sec.cloudapps.cisco.com · critical

Cisco ASA, FTD and FMC hardening release fixes 8 CVEs, two FMC flaws actively exploited

Cisco published a September 2026 hardening release for Cisco Secure Firewall ASA, Secure Firewall Threat Defense (FTD) and Secure Firewall Management Center (FMC) software. It addresses multiple vulnerabilities found during an internal security review. Cisco rates the advisory Critical and states that two of the issues are known to be act…

sec.cloudapps.cisco.com · critical

Cisco Catalyst SD-WAN Manager API authentication bypass (CVE-2026-76504) gives unauthenticated attackers admin access

Cisco disclosed a critical authentication bypass, CVE-2026-76504, in the API session-based authentication management of Cisco Catalyst SD-WAN Manager. An unauthenticated, remote attacker can send a crafted HTTP request and gain access to the API with the privileges of the admin user. Cisco has released software updates and states that no …

sec.cloudapps.cisco.com · critical

Cisco patches multiple vulnerabilities in Cisco License (Smart Software Manager) On-Prem, rated Critical

Cisco published a security advisory covering multiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem). A remote attacker could exploit them to gain unauthorized access, access sensitive information, cause a denial of service (DoS)…

sec.cloudapps.cisco.com · critical

Cisco patches unauthenticated root RCE flaws in NX-OS NGOAM on Nexus 3000 and 9000 switches (CVE-2026-76485, -76486, -76501)

Cisco disclosed multiple critical vulnerabilities in the Next Generation OAM (NGOAM) feature of Cisco NX-OS Software, affecting Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an affected device. The flaws ar…

sec.cloudapps.cisco.com · critical

Cisco patches critical unauthenticated RCE in NX-OS MPLS OAM affecting Nexus 3000 and 9000 switches (CVE-2026-76465)

Cisco disclosed a critical vulnerability, CVE-2026-76465, in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an af…

sec.cloudapps.cisco.com · critical

Cisco NX-OS NX-API unauthenticated RCE as root and DoS flaw (CVE-2026-76471) patched, no workarounds

Cisco disclosed a critical vulnerability, CVE-2026-76471, in the NX-API feature of Cisco NX-OS Software. An unauthenticated, remote attacker could use it to execute arbitrary code with root privileges or to cause a denial of service on an affected device. Cisco rates the Security Impact as Critical. Software updates are available and no w…

sec.cloudapps.cisco.com · critical

Cisco releases hardening fixes for Secure Email Gateway and Web Manager; two internally found flaws actively exploited

Cisco published a security hardening release for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager (September 2026), fixing multiple vulnerabilities found during an internal security review. Cisco states that two of them are known to be actively exploited. They are described in separate advisories as a SQL injection and an…