Search: “virtual appliance”

Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability

Cisco patched an authenticated command injection in ThousandEyes Virtual Appliance allowing arbitrary OS command execution with root privileges.

Improper validation of user-supplied input in the web-based management interface of Cisco ThousandEyes Virtual Appliance enables command injection. An authenticated remote attacker with valid administrative credentials can save configuration details containing malicious values to execute arbitrary operating system commands with root privileges. Cisco has released software updates that address the vulnerability.

Cisco Security Advisories·Sep 16, 16:00 UTC · 13h agoAdvisory

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service Vulnerability

Cisco expanded an SSL VPN denial-of-service advisory to cover all ASA and FTD software platforms; unauthenticated attackers can exhaust device memory.

A vulnerability in the VPN and management web servers of Cisco ASA Software and Cisco Secure FTD Software allows an unauthenticated remote attacker to exhaust system memory or buffer blocks, causing a denial of service. Originally scoped to the ASAv and FTDv virtual appliances, Cisco updated the advisory on September 16, 2026 to cover all ASA and FTD platforms.

Cisco Security Advisories·Sep 16, 16:05 UTC · 13h agoAdvisory 9 sources

Cisco Advance Notification for Publication of September 16, 2026, Security Advisories

Cisco will publish security advisories with fixed software on September 16, 2026, covering BroadWorks, ISE, Nexus Dashboard, ASA, FMC, FTD and ThousandEyes.

Cisco PSIRT announced advance notification for security advisories to be published on September 16, 2026, along with fixed software releases. Affected products include BroadWorks CommPilot Application Software, Identity Services Engine (ISE), Nexus Dashboard, Secure Firewall ASA, Secure Firewall Management Center (FMC), Secure Firewall Threat Defense (FTD), and ThousandEyes Virtual Appliance. ISE, Nexus Dashboard and the Secure Firewall products receive security hardening releases, and the ASA, FMC and FTD advisories will be included in the same combined release.

Cisco Security Advisories·Sep 9, 16:00 UTC · 7d agoAdvisory

CISA Adds Actively Exploited VMware Aria Operations Flaw CVE-2026

The Hacker News·Mar 4, 04:35 UTC · Mar 4, 2026Advisory in the wildCVE-2026-22719CVE-2026-22721

Threat Advisory: 3CX Softphone Supply Chain Compromise

Cisco Talos·Mar 30, 22:29 UTC · Mar 30, 2023Advisory

Threat Advisory: Spring4Shell

Cisco Talos·Mar 31, 22:14 UTC · Mar 31, 2022AdvisoryCVE-2022-22965CVE-2022-22963CVE-2010-1622

Threat Advisory: Opportunistic cyber criminals take advantage of Ukraine invasion

Cisco Talos·Mar 14, 12:00 UTC · Mar 14, 2022AdvisoryCVE-2017-11882

Threat Advisory: Critical F5 BIG

Cisco Talos·May 10, 19:32 UTC · May 10, 2022Advisory in the wildCVE-2022-1388

Threat Advisory: DoubleZero

Cisco Talos·Mar 24, 16:57 UTC · Mar 24, 2022Advisory

CISA warns of attacks against Citrix NetScaler ADC and Gateway Devices

Security Affairs·Jul 21, 20:01 UTC · Jul 21, 2023Advisory in the wildCVE-2023-3519

AL26-019 - Vulnerabilities impacting Citrix NetScaler ADC and NetScaler Gateway - CVE-2026-19490 and CVE-2026-19489

Canadian Cyber Centre alerts on Citrix NetScaler ADC/Gateway flaws CVE-2026-19490 (authentication bypass) and CVE-2026-19489 (buffer overflow), urging emergency patching.

The Canadian Centre for Cyber Security issued alert AL26-019 covering two Citrix NetScaler vulnerabilities disclosed in a vendor advisory on August 19, 2026. CVE-2026-19490 (CWE-288) allows a remote unauthenticated attacker to bypass authentication on appliances configured as a Gateway for SSL VPN, ICA Proxy, CVPN, RDP Proxy, or as an AAA virtual server. CVE-2026-19489 (CWE-120) is a classic buffer overflow that may cause memory overflow, unpredictable behavior, or denial-of-service conditions. Affected appliances are vulnerable when configured as a SAML IdP; fixed versions include 14.1-73.32, 13.1-63.21, and 13.1-37.277 for FIPS.

Canadian Centre for Cyber Security·Sep 4, 19:00 UTC · 12d agoAdvisory 3 sourcesCVE-2026-19490CVE-2026-19489

Dell security advisory (AV26-886)

Canada's Cyber Centre flags September 2026 Dell vulnerabilities across iDRAC9/iDRAC10, OpenManage, PowerEdge, Avamar, NetWorker VE, PowerProtect, IDPA and PowerScale OneFS.

Canadian Centre for Cyber Security advisory AV26-886 lists Dell vulnerabilities across iDRAC9, iDRAC10, OpenManage Network Integration, PowerEdge servers, the OpenManage Python SDK, Avamar, NetWorker Virtual Edition, PowerProtect DP Series, IDPA and PowerScale OneFS. Fixed versions include iDRAC9 7.30.10.50, iDRAC10 1.30.30.50 and OpenManage Network Integration 3.10. No CVE identifiers or exploitation status are provided; administrators are urged to apply the vendor updates.

Canadian Centre for Cyber Security·Sep 8, 14:07 UTC · 8d agoAdvisory

NETSCOUT uses AI/ML technology to secure critical IT infrastructure

Help Net Security·Dec 19, 00:00 UTC · Dec 19, 2024Advisory

Dell's new data protection storage appliances protect and manage data from edge to core to cloud

Help Net Security·May 24, 08:22 UTC · May 24, 2023Advisory

CISA Warns of Active Exploitation Following FortiBleed Leak

Security Affairs·Jun 20, 08:27 UTC · Jun 20, 2026Advisory in the wild

CISA warns organizations of cyberattacks from the Tor network

Security Affairs·Jul 5, 09:50 UTC · Jul 5, 2020Advisory

CISO challenges and the path to cutting edge security

Help Net Security·Dec 11, 00:00 UTC · Dec 11, 2018Advisory

Threat Advisory: HAFNIUM and Microsoft Exchange zero

Cisco Talos·Mar 4, 15:58 UTC · Mar 4, 2021Advisory in the wildCVE-2021-26855CVE-2021-26857CVE-2021-26858+5 CVEs1