CISA Adds Cisco Secure Email Gateway SQLi to Known Exploited Vulnerabilities
CISA has listed CVE-2026-76461, a SQL injection flaw in Cisco Secure Email Gateway, as actively exploited and requires urgent remediation by federal agencies.
Tag
#Cisco
10 results in the archive.
Cisco FMC Flaws Exploited by Ransomware and State Hackers
Two patched vulnerabilities in Cisco Secure Firewall Management Center are actively exploited by ransomware gangs and state-sponsored hackers, threatening critical network security infrastructure.
Cisco confirms active exploitation of critical FMC authentication bypass flaw
Cisco has confirmed active exploitation of a critical authentication bypass vulnerability (CVE-2026-20079) in its Secure Firewall Management Center software, risking enterprise defenses.
Critical Cisco Nexus 9000 Flaw Lets Remote Attackers Run Code as Root
Cisco released a patch for a critical vulnerability in Silicon One-based Nexus 9000 switches that allows unauthenticated remote code execution as root, identified as CVE-2026-20212 with a 9.8 CVSS score.
Cisco Warns of High-Severity VPN Flaw Actively Exploited to Crash Devices
Cisco alerts on a high-severity denial-of-service vulnerability in Secure Firewall ASA and Threat Defense VPN software actively exploited to crash devices, threatening enterprise network stability.
Cisco Patches 12 Critical SD-WAN and IOS XE Vulnerabilities
Cisco released patches for 12 critical vulnerabilities in Catalyst SD-WAN and IOS XE software impacting devices in all configurations.
Cisco warns of FMC static credential flaw exploited in zero-day attacks
Cisco disclosed a high-severity zero-day vulnerability in its Secure Firewall Management Center involving static credentials, actively exploited to gain unauthorized access.
CISA Issues Urgent Patch Deadline for Exploited Cisco Flaw
CISA has set a Sunday deadline for federal agencies to patch a critical vulnerability in Cisco Unified Communications Manager Server actively exploited in attacks. Immediate action is urged to prevent further compromise.
Mandiant details Cisco SD-WAN zero-day exploitation for root access
Mandiant has exposed how attackers exploited a zero-day CVE-2026-20245 in Cisco Catalyst SD-WAN to create rogue root accounts on devices, raising serious security concerns. This vulnerability enables full control of targeted network appliances, potentially impacting enterprise operations.
Cisco Unified CM SSRF Flaw CVE-2026-20230 Exploited in Attacks
A high-severity Server-Side Request Forgery vulnerability in Cisco Unified Communications Manager Server, tracked as CVE-2026-20230, is actively being exploited in the wild. Security teams should prioritize detection and mitigation to prevent potential compromise.