CISA adds Cisco BroadWorks XXE flaw to KEV (CVE-2026-20320)
An unauthenticated remote attacker can read sensitive configuration; the federal remediation due date is November 24.
Stories per day · 30 days
19 RSS
Relateddenial-of-service15kev13snort12rce11secure-email-gateway11asa10asyncos10ftd10cve-2026-765199cisa8zero-day8expressway7ssl-vpn7keydrift6pan-os5sd-wan5volt-typhoon5authentication-bypass4
209 stories, newest first · one card per story
Stories tagged #cisco
Anthropic's Mythos bug-finder is heading into Cisco and IBM products
Customers get Mythos through the vendors' tools, not the model itself; version 5.2 also launched with lower token prices.
1
CISA adds six exploited vulnerabilities to its KEV catalog
Entries cover Cisco BroadWorks, Barracuda products, Outlook, and Chromium; FCEB agencies must prioritize them under BOD 26-04.
Typo fixed in Cisco SMTP exploit module for Metasploit
A singular typo in the Cisco SMTP exploit module has been corrected in the Metasploit Framework.
Cisco and WatchGuard release patches; SonicWall leaves GMS unpatched
SonicWall will not patch two critical flaws in its end-of-life Global Management System.
1
Cisco UCS Central Software prior to 2.1(2c) affected by remote code execution
Cisco UCS Central Software Remote Code Execution Vulnerability in versions prior to 2.1(2c).
Node.js vulnerabilities affecting Cisco products fixed in October 2026
Node.js 22.x, 24.x, and 26.x releases address multiple vulnerabilities including Brotli decoder out-of-bounds write and DNS resolution issues.
Cisco ISE Authorization Bypass Allows Endpoint Certificate Acquisition
Cisco released software updates for ISE and ISE-PIC to address the authorization bypass.
Cisco Unified Communications Manager Faces Cross-Site Scripting Vulnerability
Unvalidated input in the web interface of Cisco Unified Communications Manager and SME could allow unauthenticated remote XSS attacks via crafted links.
Cisco integrates OpenAI models for network security defenses
Cisco pairs network telemetry with OpenAI models for faster vulnerability investigation and remediation.
Cisco Snort header unfolding flaw enables remote code execution
Unauthenticated remote code execution vulnerability in Cisco Snort with CVSS 9.8.
Check Point weekly bulletin covers crypto thefts and exploited flaws
The November 2 roundup also cites a claimed $6.3 billion Binance theft and exposure of about 4.9 million student-aid records.
4
CISA adds exploited GitLab and Cisco firewall flaws to KEV
Federal agencies must fix unauthenticated GitLab code execution and a Cisco firewall reload bug by November 1, 2026.
Critical PHP RCE flaws may affect Cisco products
CVE-2026-109618 and CVE-2026-109619, called PHP2shell, were fixed in a PHP security release announced October 21.
Cisco ASA and FTD SSL VPN flaw exploited to crash devices
CVE-2026-76418, scored 8.6, lets an unauthenticated attacker reload ASA or FTD when secondary authentication is configured; Cisco has fixes but no workaround.
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
CVE-2026-20127, patched in February 2026, lets attackers add rogue peers and steal IPsec key material from controllers.
Cisco open-sources Quarry to detect multi-step AI agent attacks
The neurosymbolic rule language is meant to flag intent that appears only across benign agent steps.
Cisco SD-WAN zero-day CVE-2026-20127 used to install KeyDrift
Talos says UAT-11473 stole suspected IPsec keys from space, defense, and policy targets; patches shipped in February 2026.
KeyDrift malware steals SD-WAN encryption keys via CVE-2026-20127
UAT-11473 uses a CVSS 10.0 auth bypass on Cisco Catalyst SD-WAN to plant in-process key stealers; fixes exist but no workaround.
Cisco says CVE-2026-76418 in Secure Firewall is exploited in the wild
ASA and FTD releases before the listed builds are affected by a remote SSL VPN tunnel denial of service.
Cisco ASA and FTD SSL VPN zero-day crashed firewalls in attacks
Unauthenticated attackers can reload devices that have webvpn and SSL VPN enabled; Cisco found exploitation in October 2026.
Cisco patches actively exploited ASA and FTD VPN crash flaw
CVE-2026-76418, scored 8.6, lets unauthenticated attackers reload firewalls when SSL VPN uses secondary authentication.
Cisco patches exploited ASA and FTD SSL VPN zero-day
CVE-2026-76418, CVSS 8.6, lets unauthenticated attackers restart firewalls when secondary authentication is configured.
Cisco SD-WAN CVE-2026-20127 exploited to install KeyDrift key-stealing malware
The malware hooks vdaemon to copy AES-256 key material; Cisco calls exploitation limited and lists fixed trains.
1