Topic

Cisco: news, advisories and analysis

15 articlesUpdated 30 Oct 2026

CyberSecureToday covers Cisco across 15 articles published between 3 Sep 2026 and 30 Oct 2026. The coverage includes 14 vulnerability advisories and 1 incident or breach report. 14 advisories are rated critical or high severity, and 10 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Cisco most often intersect with Active Exploitation, CISA KEV and Zero-Day, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Vulnerability Exploited in Wild Attacks”, was published 30 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Cisco advisory hub: severity, KEV status and fixes in one table

Latest coverage

ThreatsCloud & SaaSBreaking
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Vulnerability Exploited in Wild Attacks
CVE-2026-76418 in Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (Security Vulnerability) allows remote attackers to trigger active syste
CST Editorial Desk30 Oct 202610 min read
ThreatsCloud & SaaSCritical
Cisco NX-OS Heap Buffer Overflow in NX-API Allows Unauthenticated Root Code Execution
A critical heap buffer overflow in Cisco NX-OS Software (CVE-2026-76471) allows unauthenticated remote attackers to execute arbitrary code with root OS privileges.
CST Editorial Desk18 Oct 20269 min read
ThreatsCloud & SaaSCritical
Cisco Secure Email Gateway AMP Flaw Exploited for Unauthenticated File Writes
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write…
CST Editorial Desk15 Oct 20267 min read
ThreatsCloud & SaaSCritical
Cisco Catalyst SD-WAN Manager Hex Encoding Flaw Exploited to Hijack Enterprise Routing (CVE-2026-76504)
A critical URL hex-encoding vulnerability in Cisco Catalyst SD-WAN Manager allows unauthenticated remote attackers to bypass authentication and hijack fabrics.
CST Editorial Desk29 Sep 20269 min read
ThreatsCloud & SaaSCritical
Cisco Secure Firewall Flaw Weaponized to Compromise Perimeter Gateways
Cisco issues emergency software hardening release for Secure Firewall ASA, FTD, and FMC addressing actively exploited critical vulnerability CVE-2026-20329.
Priya Raman19 Sep 202613 min read
ThreatsCloud & SaaSCritical
Cisco Catalyst SD-WAN Manager Critical Directory Traversal Flaws Weaponized in Active Attacks
CISA orders emergency remediation of Cisco Catalyst SD-WAN Manager flaws CVE-2026-20262 and CVE-2026-20245 enabling remote administrative root takeover.
CST Editorial Desk18 Sep 202611 min read
ThreatsCloud & SaaSHigh
Cisco IOS Cross-Site Request Forgery Flaw Exploited to Hijack Core Enterprise Routers
CISA adds Cisco IOS HTTP server CSRF flaw CVE-2008-4128 to KEV catalog following active in-the-wild exploitation to alter router configuration registers.
CST Editorial Desk18 Sep 202611 min read
ThreatsCloud & SaaSHigh
Cisco Unified Communications Manager SSRF Flaw Weaponized in Enterprise Attacks
CISA adds Cisco Unified Communications Manager vulnerability CVE-2026-20230 (CVSS 8.5) to KEV catalog following active in-the-wild enterprise telephony attacks.
Tom Verhoeven17 Sep 202612 min read
ThreatsCloud & SaaSCritical
Cisco Identity Services Engine Critical API Flaw Weaponized to Compromise Network Access
CISA orders emergency patching of Cisco Identity Services Engine vulnerability CVE-2026-76460 (CVSS 9.8) enabling unauthenticated remote network policy takeover.
Priya Raman17 Sep 202611 min read
ThreatsCloud & SaaSCritical
Cisco Secure Firewall ASA and FTD Critical Heap Inspection Flaw CVE-2026-20349 Weaponized in the Wild
CISA adds CVE-2026-20349 to KEV, warning of active exploitation targeting Cisco Secure Firewall ASA and FTD packet inspection engines.
Priya Raman16 Sep 202610 min read
ThreatsCloud & SaaSCritical
Cisco Secure Email Gateway Critical SQL Injection Flaw Weaponized in Active Attacks
CISA mandates urgent federal remediation after confirming active exploitation of CVE-2026-76461, an unauthenticated SQL injection flaw granting root shell access on Cisco SEG appliances.
Mei-Lin Chen15 Sep 20268 min read
ThreatsTelecom & MediaHigh
Cisco Fixes High-Severity Memory Corruption Flaw in Carrier-Grade IOS XR Routing Core
Cisco resolved CVE-2026-20274, an unauthenticated memory corruption flaw in IOS XR software that enables crash-loops or remote code execution in telecommunications cores.
Daniel Okafor14 Sep 20267 min read
Cyber AttackCloud & SaaS
Cisco Secure FMC authentication bypass CVE-2026-20079 exploited by Qilin ransomware affiliates
Threat actors and Qilin ransomware affiliates are actively weaponizing CVE-2026-20079 in Cisco Secure FMC to bypass web authentication and achieve root command execution.
Daniel Okafor13 Sep 20266 min read
ThreatsGov & DefenceCritical
Twelve Zero-Days Weaponized in One Week Across Citrix, Cisco and Fortinet
Twelve fresh entries hit the Known Exploited Vulnerabilities catalog, covering Citrix NetScaler, Cisco FMC, Fortinet FortiOS, Adobe Commerce, N-able N-central and Chrome.
Daniel Okafor10 Sep 20266 min read
ThreatsTelecom & MediaCritical
Cisco Nexus 9000 Silicon One Switches Exposed to Unauthenticated Root RCE
Cisco disclosed CVE-2026-20212 (CVSS 9.8), an unauthenticated root code execution flaw on Silicon One-based Nexus 9000 datacenter switches due to open debugging ports.
Daniel Okafor3 Sep 20265 min read