Cisco
Cisco security: network appliance vulnerabilities, exploitation reports and vendor updates. Follow product-specific advisories and remediation details.
Latest report:
Matching reports 18
-
Critical NX-OS Validation Flaws Expose Some Nexus Switches to Root-Level Attacks
Cisco disclosed five critical, configuration-dependent NX-OS flaws that could allow remote code execution as root or disrupt some Nexus switches.
-
Cisco Fixes 35 Flaws, Including Root-Level Attack Paths in NX-OS
Cisco issued updates for 35 flaws across NX-OS, APIC, License On-Prem, Meraki and Finesse, including root execution and reload risks.
-
Cisco SD-WAN Authentication Flaw Gives Remote Attackers Full Administrative Access
Cisco warns of CVE-2026-76504, a CVSS 9.8 auth bypass in Catalyst SD-WAN Manager exploited for admin access. See fixes and detection tips.
-
Exploited Cisco ISE Flaw Leads a Wave of Attacks on Trusted Software Channels
Active exploitation of a critical Cisco ISE flaw highlights attacks through trusted software channels, Orkes, Discourse, libheif and AI plugins.
-
Cisco Fixes Critical ISE, FMC and Nexus Dashboard Flaws as Exploited Bugs Demand Immediate Action
Cisco patched critical ISE, FMC and Nexus Dashboard flaws, including exploited authentication bypass and root RCE bugs requiring urgent updates.
-
Cisco ISE API Authentication Flaw Opens a Remote Path to Root Access
Cisco warns of exploited CVE-2026-76460 in ISE with CVSS 10.0 enabling unauthenticated remote root access. See affected versions, patches, mitigations.
-
Sandworm-Linked Operators Chain Cisco FMC Flaws to Deploy New Cyclops Blink
Russian-linked actors exploit CVE-2026-20079 and CVE-2026-20316 in Cisco FMC to deploy redesigned Cyclops Blink backdoor for persistence and espionage.
-
Cisco FMC Zero-Auth Flaws Exploited by Qilin Ransomware and Sandworm-Linked Hackers
Cisco FMC zero-auth flaws exploited by Qilin ransomware, Sandworm-linked hackers, and a third cluster for ransomware, credential theft, and espionage.
-
Cisco Secure FMC Authentication Bypass Exploited for Root Access
Cisco confirms exploited CVE-2026-20079, a CVSS 10.0 FMC auth bypass allowing root access. See affected versions, hot fixes and log checks.
-
Cisco Nexus 9000: Critical Flaw Enables Remote Root Code Execution
Cisco fixed CVE-2026-20212 (CVSS 9.8) in 10 Nexus 9000 models allowing unauthenticated remote root code execution via TCP ports 43210, 43211.
-
Cisco Discloses New Vulnerabilities in Secure Email, IOS XR, Nexus 9000 Switches, and IP Phones
Cisco disclosed Sept 2026 flaws in Secure Email, IOS XR, Nexus 9000 and IP Phones, including S/MIME decryption issues, RCE and root compromise risks.
-
Fire Ant Extends Operations: Cisco IOS XR Routers, TACACS, and Linux Hosts Under Invisible Control
Sygnia uncovers Fire Ant's cyber-espionage expanding to Cisco IOS XR routers, TACACS servers, and Linux hosts using invisible tunnels and credential theft.
How this coverage is selected
Articles are selected by explicit entity names or reviewed aliases in their original headlines, within the last 365 days. This is a chronology of our reporting, not a complete incident history. Separate stories do not imply a shared attack campaign. Read each article for its sources, affected versions and uncertainties.