18 casos · pág. 1/1
Cisco disclosed a high-impact local privilege escalation vulnerability, CVE-2026-76462, in the Secure Firewall Posture module of Cisco Secure Client. The flaw is in the interprocess communication (IPC) channel and stems from insufficient validation of user-supplied input. An authenticated local attacker can send crafted IPC messages to a …
Cisco disclosed CVE-2026-76524, a high-severity vulnerability in the control channel socket implementation of Open Source Snort 3. An authenticated local attacker with low privileges could execute arbitrary commands as the Snort 3 process user. A successful exploit also allows reading and writing Snort 3 process memory. Cisco has released…
Cisco published a security hardening release for its Unified Communications portfolio on October 21, 2026. It covers Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Unified CM IM&P, Unified CM SME and Cisco Unity Connection. The vulnerabilities were found during an intern…
Cisco published a security hardening release for the Cisco Expressway Series (Expressway-C core and Expressway-E edge devices) addressing multiple vulnerabilities found during an internal security review. Cisco states the flaws were discovered in internal testing and are not known to be actively exploited. The issues are grouped by CWE cl…
Cisco's Open Source Snort 3 engineering team released software hardening updates for multiple vulnerabilities found during an internal security review, as part of Cisco's October 21, 2026 advisory bundle. The issues are grouped by Common Weakness Enumeration class, with one CVE ID per group. CVE-2026-20043 covers out-of-bounds writes (CWE…
Cisco disclosed CVE-2026-76505, a High-rated vulnerability in the IPv4 packet processing of Cisco IOS XR Software on Cisco ASR 9000 and 9900 Series routers and ASR 9902/9903 Compact High-Performance Routers. An unauthenticated, remote attacker can send crafted IPv4 packets that trigger network processor (NP) errors, resetting or shutting …
A joint advisory (AA26-194a) from NSA, CISA, FBI, DC3 and 15 allied agencies warns that Russian FSB Center 16 cyber actors continue to opportunistically compromise poorly configured and vulnerable networking devices worldwide, primarily routers. The advisory builds on the FBI's August 2025 PSA on the decade-plus campaign and adds TTPs. Go…
Cisco disclosed CVE-2026-20154, a high-severity vulnerability in the system rate-limiting process for syslog message 419002 in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. An unauthenticated, remote attacker can cause high CPU utilization on an affected device, r…
Cisco updated its advisory for CVE-2024-20260, a denial-of-service vulnerability in the VPN and management web servers of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. The original version covered only the ASAv and FTDv virtual models, but Cisco later found that a…
Cisco published a Software Security Hardening Release advisory for Cisco IOS XE Software. It addresses multiple vulnerabilities found during an internal security review and internal testing. Cisco states the flaws are not known to be actively exploited. It grouped the issues by Common Weakness Enumeration (CWE) class and assigned a single…
Cisco published the NX-OS Software Security Hardening Release: October 2026 advisory (cisco-sa-hardening-nxosw1-cWzSbtR) on 7 October 2026. It covers multiple vulnerabilities found by the Cisco NX-OS engineering team during an internal security review. Cisco rates the security impact as Critical and says the flaws are not known to be acti…
Cisco published its October 2026 security hardening release for the Application Policy Infrastructure Controller (APIC). It follows an internal security review that found multiple vulnerabilities. Cisco rates the Security Impact Rating as Critical and assigns CVE-2026-76498, CVE-2026-76499 and CVE-2026-76500. The flaws were found during i…
Cisco published a security hardening release for Cisco License On-Prem (formerly Smart Software Manager On-Prem, SSM On-Prem) after an internal security review. The review found multiple vulnerabilities, which Cisco groups by Common Weakness Enumeration (CWE) class under four CVE IDs. Cisco rates the security impact Critical. The flaws we…
Cisco disclosed CVE-2026-20362, a server-side request forgery (SSRF) vulnerability in the web-based management interface of Cisco Finesse. An unauthenticated, remote attacker could exploit it by sending a crafted HTTP request to an affected device. Successful exploitation could expose limited sensitive information from services associated…
Cisco disclosed CVE-2026-20293, a high-severity UEFI Secure Boot bypass in the UEFI Shell of Cisco UCS Servers and UCS-based appliances. An authenticated attacker with a user or admin role, or an unauthenticated attacker with physical access, can bypass Secure Boot validation and execute unauthorized software. Cisco has released software …
Cisco published its Meraki Security Hardening Release for October 2026, addressing multiple vulnerabilities found during an internal security review of Meraki software. Cisco rates the Security Impact Rating as Critical. The flaws were found in internal testing and are not known to be actively exploited. Cisco grouped the issues by Common…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-30, citing evidence of active exploitation: CVE-2026-76504, a hex encoding vulnerability in Cisco Catalyst SD-WAN Manager. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the …
Researcher Quentin Kaiser disclosed on October 16 an unauthenticated memory-corruption flaw in Broadcom's Wi-Fi Protected Setup (WPS) implementation. It lets an attacker within radio range execute code as root on affected routers, with no Wi-Fi password or pairing step. Kaiser demonstrated working exploits against Belgian ISP gateways: th…
