Search: “Cisco”

530 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 872 Exploit / PoC 553 Ransomware 526 Data breach 135 Threat actor 104 Malware 87 Advisory 17 Phishing & fraud 16 Policy & legal 11 Model release 2

SeverityAll critical 1839 high 479 medium 3 low 0 info 2

Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks

Cisco confirmed active exploitation of CVE-2026-20079, a CVSS 10.0 authentication bypass enabling unauthenticated root command execution in Secure FMC; CISA added it to KEV.

Cisco confirmed in August 2026 that CVE-2026-20079 (CVSS 10.0), an unauthenticated authentication bypass in Secure Firewall Management Center, is being actively exploited, allowing remote attackers to execute scripts and commands as root via crafted HTTP requests to the web interface. CISA added the flaw to its Known Exploited Vulnerabilities catalog, ordering federal civilian agencies to patch by September 12, 2026. Shared IOCs, identical hot fixes, and a July 23 log entry suggest CVE-2026-20079 was used alongside the separately exploited static-credential flaw CVE-2026-20316 in the same attacks. Cisco released patches and cloud fixes, warns hot fixes do not remediate already-compromised devices, and says there are no workarounds.

BleepingComputerSep 9, 21:40 UTC · 7d agoExploit / PoC in the wildCVE-2026-20079 CVE-2026-20316

Cisco fixes exploitable RCEs in Cisco Security Manager

Security AffairsDec 7, 21:01 UTC · Dec 7, 2020Exploit / PoC CVE-2020-27125 CVE-2020-27130 CVE-2020-27131

China-linked APT UAT-9686 is targeting Cisco Secure Email Gateway and Secure Email and Web Manager

Security AffairsDec 19, 08:53 UTC · Dec 19, 2025Exploit / PoC in the wildCVE-2025-20393

Cisco ASA zero-day vulnerabilities exploited in sophisticated attacks

Help Net SecurityNov 13, 13:30 UTC · Nov 13, 2025Exploit / PoC CVE-2025-20362 CVE-2025-20333 CVE-2025-20363

Expert discloses PoC code for critical RCEs in Cisco Security Manager

Security AffairsNov 17, 21:14 UTC · Nov 17, 2020Exploit / PoC

U.S. CISA adds Cisco SD-WAN flaws to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 26, 15:04 UTC · Feb 26, 2026Exploit / PoC in the wildCVE-2022-20775 CVE-2026-20127

Hackers abused Cisco SD-WAN zero-day since 2023 to gain full admin control

Security AffairsFeb 26, 14:43 UTC · Feb 26, 2026Exploit / PoC in the wildCVE-2026-20127 CVE-2022-20775

U.S. CISA adds Cisco ISE and PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog

Security AffairsAug 5, 18:59 UTC · Aug 5, 2025Exploit / PoC in the wildCVE-2025-20281 CVE-2025-20337 CVE-2023-2533+1 CVEs

Cisco fixes ClamAV vulnerability with available PoC and critical Meeting Management flaw

Help Net SecurityJan 23, 00:00 UTC · Jan 23, 2025Exploit / PoC in the wildCVE-2025-20156 CVE-2025-20128

Critical Infrastructure at Risk: Advanced Actors Target Smart Install Client

Cisco TalosApr 5, 13:55 UTC · Apr 5, 2018Exploit / PoC

Critical Cisco IMC bug gives attackers root, PoC is out (CVE-2026-20200)

Help Net SecurityAug 6, 00:00 UTC · Aug 6, 2026Exploit / PoC CVE-2026-20200 CVE-2026-202721

Cisco customers hit by fresh wave of zero-day attacks from China

CyberScoopDec 19, 15:21 UTC · Dec 19, 2025Exploit / PoC in the wildCVE-2025-20393

Tens of thousands Cisco IOS XE devices were hacked by exploiting CVE-2023

Security AffairsOct 20, 10:13 UTC · Oct 20, 2023Exploit / PoC in the wildCVE-2023-20198

UK NCSC warns that attackers exploited Cisco firewall zero-days to deploy RayInitiator and LINE VIPER malware

Security AffairsSep 26, 11:49 UTC · Sep 26, 2025Exploit / PoC CVE-2025-20362 CVE-2025-20333 CVE-2025-20363

Cisco Data Center Network Manager flaws fixed, Cisco ASA appliances under attack

Help Net SecurityJan 16, 09:36 UTC · Jan 16, 2020Exploit / PoC in the wildCVE-2019-15975 CVE-2019-15976 CVE-2019-15977+2 CVEs

Cisco Smart Install Protocol misuse could expose critical infrastructure to attacks

Security AffairsApr 6, 04:50 UTC · Apr 6, 2018Exploit / PoC CVE-2018-0171

Cisco zero-day under ongoing attack by persistent threat group

CyberScoopMay 15, 14:16 UTC · May 15, 2026Exploit / PoC in the wildCVE-2026-20182 CVE-2026-20122 CVE-2026-20128+2 CVEs

2026-002: Multiple Vulnerabilities in Cisco Products

Cisco fixed SD-WAN Controller auth bypass CVE-2026-20127 (CVSS 10) exploited in the wild since 2023, plus several critical and high flaws in SD-WAN Manager.

On 25 February 2026 Cisco released advisories for multiple flaws in Catalyst SD-WAN Controller and SD-WAN Manager, potentially granting administrative access to attackers. CVE-2026-20127 (CVSS 10.0) is an authentication bypass in the Controller's peering authentication mechanism, exploited in the wild since 2023, allowing unauthenticated admin access via NETCONF, rogue device injection, and persistent access. SD-WAN Manager flaws include CVE-2026-20129 (9.8, unauthenticated API auth bypass to netadmin), CVE-2026-20126 (7.8, local privesc to root), CVE-2026-20133 (7.5, info disclosure), CVE-2026-20122 (7.1, arbitrary file overwrite), and CVE-2026-20128 (5.5, DCA info disclosure). CERT-EU recommends patching, capturing forensic evidence, IOC hunting, and restricting management-plane internet exposure.

CERT-EU AdvisoriesFeb 10, 00:00 UTC · Feb 10, 2026Exploit / PoC in the wildCVE-2026-20127 CVE-2026-20129 CVE-2026-20126+3 CVEs

Cisco confirms active exploitation of ISE and ISE

Security AffairsJul 22, 19:52 UTC · Jul 22, 2025Exploit / PoC in the wildCVE-2025-20281 CVE-2025-20282 CVE-2025-20337

Cisco IOS XE zero-day exploited by attackers to deliver implant (CVE-2023-20198)

Help Net SecurityOct 31, 10:28 UTC · Oct 31, 2023Exploit / PoC CVE-2023-20198 CVE-2021-1435

Cisco warns of a second IOS XE zero

Security AffairsOct 23, 18:42 UTC · Oct 23, 2023Exploit / PoC in the wildCVE-2023-20273 CVE-2023-20198

How Cisco Talos powers the solutions protecting your organization

Cisco TalosJan 7, 11:00 UTC · Jan 7, 2026Exploit / PoC

Too many Cisco ASA firewalls still unsecure despite zero-day attack alerts

Help Net SecurityNov 13, 12:09 UTC · Nov 13, 2025Exploit / PoC CVE-2025-20333 CVE-2025-20362 CVE-2025-20352

Experts released PoC exploit code for Cisco IOS XE flaw CVE-2023

Security AffairsOct 31, 12:03 UTC · Oct 31, 2023Exploit / PoC in the wildCVE-2023-20198

Critical flaw in Cisco ISE impacts cloud deployments on AWS, Microsoft Azure, and Oracle Cloud Infrastructure

Security AffairsJun 5, 08:31 UTC · Jun 5, 2025Exploit / PoC in the wildCVE-2025-20286

Cisco warns of active exploitation of IOS XE zero

Security AffairsOct 16, 19:52 UTC · Oct 16, 2023Exploit / PoC in the wildCVE-2023-20198

PoC exploit released for Cisco AnyConnect, Secure Client vulnerability (CVE-2023-20178)

Help Net SecurityJun 23, 00:00 UTC · Jun 23, 2023Exploit / PoC CVE-2023-20178

Expert released PoC exploits for recently disclosed Cisco DCNM flaws

Security AffairsJan 17, 07:43 UTC · Jan 17, 2020Exploit / PoC CVE-2019-15975 CVE-2019-15976 CVE-2019-15977

Cisco patches Secure Email Gateway zero-day exploited in attacks

Cisco patches actively exploited Secure Email Gateway zero-day CVE-2026-76461 enabling unauthenticated root command execution; CISA adds it to KEV.

Cisco disclosed that a critical zero-day (CVE-2026-76461) in the email parsing logic of AsyncOS for Secure Email Gateway is being actively exploited, allowing unauthenticated remote attackers to execute arbitrary SQL statements that lead to root-level command execution on virtual and physical appliances. CISA added the flaw to its KEV catalog and ordered federal agencies to patch within three days, by September 17. Cisco also patched four other critical SEG/SEWM vulnerabilities (CVE-2026-76440, CVE-2026-76441, CVE-2026-20353, CVE-2026-76443) with no evidence of exploitation, and shared IOCs including suspicious SQL statements in mail_logs.

BleepingComputerSep 15, 07:31 UTC · 1d agoExploit / PoC in the wildCVE-2026-76461 CVE-2026-76440 CVE-2026-76441+3 CVEs

Cisco Patches Zero-Day RCE Exploited by China

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2026Exploit / PoC CVE-2025-20393

Cisco discloses maximum

CyberScoopAug 15, 17:04 UTC · Aug 15, 2025Exploit / PoC in the wildCVE-2025-20265