9 casos · pág. 1/1
Cisco disclosed CVE-2026-20154, a high-severity vulnerability in the system rate-limiting process for syslog message 419002 in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. An unauthenticated, remote attacker can cause high CPU utilization on an affected device, r…
Cisco updated its advisory for CVE-2024-20260, a denial-of-service vulnerability in the VPN and management web servers of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. The original version covered only the ASAv and FTDv virtual models, but Cisco later found that a…
Cisco published a Software Security Hardening Release advisory for Cisco IOS XE Software. It addresses multiple vulnerabilities found during an internal security review and internal testing. Cisco states the flaws are not known to be actively exploited. It grouped the issues by Common Weakness Enumeration (CWE) class and assigned a single…
Cisco published the NX-OS Software Security Hardening Release: October 2026 advisory (cisco-sa-hardening-nxosw1-cWzSbtR) on 7 October 2026. It covers multiple vulnerabilities found by the Cisco NX-OS engineering team during an internal security review. Cisco rates the security impact as Critical and says the flaws are not known to be acti…
Cisco published its October 2026 security hardening release for the Application Policy Infrastructure Controller (APIC). It follows an internal security review that found multiple vulnerabilities. Cisco rates the Security Impact Rating as Critical and assigns CVE-2026-76498, CVE-2026-76499 and CVE-2026-76500. The flaws were found during i…
Cisco published a security hardening release for Cisco License On-Prem (formerly Smart Software Manager On-Prem, SSM On-Prem) after an internal security review. The review found multiple vulnerabilities, which Cisco groups by Common Weakness Enumeration (CWE) class under four CVE IDs. Cisco rates the security impact Critical. The flaws we…
Cisco disclosed CVE-2026-20362, a server-side request forgery (SSRF) vulnerability in the web-based management interface of Cisco Finesse. An unauthenticated, remote attacker could exploit it by sending a crafted HTTP request to an affected device. Successful exploitation could expose limited sensitive information from services associated…
Cisco disclosed CVE-2026-20293, a high-severity UEFI Secure Boot bypass in the UEFI Shell of Cisco UCS Servers and UCS-based appliances. An authenticated attacker with a user or admin role, or an unauthenticated attacker with physical access, can bypass Secure Boot validation and execute unauthorized software. Cisco has released software …
Cisco published its Meraki Security Hardening Release for October 2026, addressing multiple vulnerabilities found during an internal security review of Meraki software. Cisco rates the Security Impact Rating as Critical. The flaws were found in internal testing and are not known to be actively exploited. Cisco grouped the issues by Common…
