Search: “Cisco products”

355 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 753 Ransomware 470 Exploit / PoC 369 Malware 282 Industry 151 Data breach 131 Threat actor 102 Policy & legal 69 Phishing & fraud 45 Advisory 38 AI tools & infra 21 AI safety & security 17 Tools 13 AI research 8

SeverityAll critical 1331 high 611 medium 330 low 152 info 67

2026-002: Multiple Vulnerabilities in Cisco Products

Cisco fixed SD-WAN Controller auth bypass CVE-2026-20127 (CVSS 10) exploited in the wild since 2023, plus several critical and high flaws in SD-WAN Manager.

On 25 February 2026 Cisco released advisories for multiple flaws in Catalyst SD-WAN Controller and SD-WAN Manager, potentially granting administrative access to attackers. CVE-2026-20127 (CVSS 10.0) is an authentication bypass in the Controller's peering authentication mechanism, exploited in the wild since 2023, allowing unauthenticated admin access via NETCONF, rogue device injection, and persistent access. SD-WAN Manager flaws include CVE-2026-20129 (9.8, unauthenticated API auth bypass to netadmin), CVE-2026-20126 (7.8, local privesc to root), CVE-2026-20133 (7.5, info disclosure), CVE-2026-20122 (7.1, arbitrary file overwrite), and CVE-2026-20128 (5.5, DCA info disclosure). CERT-EU recommends patching, capturing forensic evidence, IOC hunting, and restricting management-plane internet exposure.

CERT-EU AdvisoriesFeb 10, 00:00 UTC · Feb 10, 2026Exploit / PoC in the wildCVE-2026-20127 CVE-2026-20129 CVE-2026-20126+3 CVEs

Old vulnerabilities in Cisco products actively exploited in the wild

Security AffairsDec 19, 21:12 UTC · Dec 19, 2022Exploit / PoC in the wildCVE-2017-12240 CVE-2018-0125 CVE-2018-0147+2 CVEs

Cisco Patches ISE Security Vulnerability After Public PoC Exploit Release

The Hacker NewsJan 8, 10:44 UTC · Jan 8, 2026Exploit / PoC in the wildCVE-2026-20029 CVE-2026-20026 CVE-2026-20027

Critical Infrastructure at Risk: Advanced Actors Target Smart Install Client

Cisco TalosApr 5, 13:55 UTC · Apr 5, 2018Exploit / PoC

Tech vendors admit stolen NSA cyber weapons are effective, warn customers

CyberScoopAug 17, 18:30 UTC · Aug 17, 2016Exploit / PoC in the wild

U.S. CISA adds a flaw in Cisco Unified Communications products to its Known Exploited Vulnerabilities catalog

Security AffairsJan 24, 09:52 UTC · Jan 24, 2026Exploit / PoC in the wildCVE-2026-20045

How Cisco Talos powers the solutions protecting your organization

Cisco TalosJan 7, 11:00 UTC · Jan 7, 2026Exploit / PoC

Chinese attackers exploiting zero-day to target Cisco email security products

The RecordDec 18, 16:36 UTC · Dec 18, 2025Exploit / PoC CVE-2025-20393

Expert released PoC exploits for recently disclosed Cisco DCNM flaws

Security AffairsJan 17, 07:43 UTC · Jan 17, 2020Exploit / PoC CVE-2019-15975 CVE-2019-15976 CVE-2019-15977

Hafnium Update: Continued Microsoft Exchange Server Exploitation

Cisco TalosMar 10, 00:52 UTC · Mar 10, 2021Exploit / PoC

Cisco warns about public exploit code for critical flaws in its 220 Series smart switches

Help Net SecuritySep 3, 07:36 UTC · Sep 3, 2019Exploit / PoC in the wildCVE-2019-1938 CVE-2019-1935 CVE-2019-1974+4 CVEs

ToolShell: Details of CVEs affecting SharePoint servers

Cisco TalosJul 23, 15:32 UTC · Jul 23, 2025Exploit / PoC in the wildCVE-2025-53770 CVE-2025-53771 CVE-2025-49704+1 CVEs1

UAT-5918 targets critical infrastructure entities in Taiwan

Cisco TalosMar 20, 10:00 UTC · Mar 20, 2025Exploit / PoC

Leaked NSA cyber weapons were more damaging to Cisco than originally thought

CyberScoopSep 19, 17:30 UTC · Sep 19, 2016Exploit / PoC in the wild

Cisco fixes security holes in SD-WAN, Webex, Small Business routers

Help Net SecurityJan 26, 09:57 UTC · Jan 26, 2019Exploit / PoC CVE-2019-1651 CVE-2019-1647 CVE-2019-1646+2 CVEs

Cisco to acquire Duo Security for $2.35 billion

CyberScoopAug 2, 15:24 UTC · Aug 2, 2018Exploit / PoC in the wild

Watch out, hackers are targeting CVE-2018

Security AffairsDec 21, 13:30 UTC · Dec 21, 2019Exploit / PoC in the wildCVE-2018-0296

Threat Advisory: Critical Apache Log4j vulnerability being exploited in the wild

Cisco TalosDec 10, 19:37 UTC · Dec 10, 2021Exploit / PoC in the wildCVE-2021-44228 CVE-2021-45046 CVE-2021-45105+1 CVEs

Cisco fixes 32 security issues in its products, including three critical flaws

Security AffairsSep 6, 12:38 UTC · Sep 6, 2018Exploit / PoC CVE-2018-11776 CVE-2018-0435 CVE-2018-0423

Critical Cisco Secure Email Gateway zero-day gives attackers root access

Actively exploited Cisco Secure Email Gateway zero-day CVE-2026-76461 lets crafted emails trigger SQL injection and root command execution; CISA added it to KEV.

Cisco released emergency patches for CVE-2026-76461, a critical SQL injection in Secure Email Gateway (physical and virtual) caused by insufficient validation in email parsing. Sending a crafted email with malicious SQL statements can yield arbitrary command execution with root privileges. Cisco was aware of active exploitation before the fixes, and CISA added the flaw to its KEV catalog; patched AsyncOS releases are 15.5.5-0141, 16.0.4-3021, and 16.5.0-780. Because successful exploits grant root, Cisco warns logs may be tampered with and advises checking external firewall/network logs and rebuilding virtual appliances with rotated credentials.

CSO Onlineupdated 13:57 UTC · 6h agofirst Sep 15, 19:56 UTC · 1d agoExploit / PoC in the wild 17 sources CVE-2026-76461 CVE-2025-203931