Sponsored Partner
CrowdStrike Falcon — AI-Native Endpoint ProtectionCritical CVE advisories and active exploit alerts for Cisco IOS, IOS XE, ASA firewalls, and AnyConnect VPN appliances.
Recommended Protective Controls for Cisco Systems Environments
Deploy continuous behavioral telemetry and micro-segmentation boundaries to shield Cisco Systems assets.
Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface. This is a critical...
Recommended Tool
Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This is a critical threat mapped to CVE-2026-76461; security leaders should va...
Recommended Tool
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected dev...
Recommended Tool
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This is a critical threat mapped...
Recommended Tool
Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. Thi...
Recommended Tool
Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /le... This is a critical threat mapped to CVE-2008-4128; security leaders should validate exposure, prioritize patching, and verify compens...
Recommended Tool
Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an unauthenticated, remote attacker to write files to the underlying operating system that could be used l...
Recommended Tool
Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system. This is a critical threat mapped to CVE-2026-20262; security leaders should validate exposure, prioriti...
Recommended Tool
Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This is a critical threat mapped to CVE-2026-20245; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Cisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability that allows an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This is a critical threat mapped to CVE-2026-20182; security leaders should validate exposure,...
Recommended Tool
Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. This is a critical threat mapped to CVE-2026-20122; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Cisco Catalyst SD-WAN Manager contains an exposure of sensitive information to an unauthorized actor vulnerability that could allow remote attackers to view sensitive information on affected systems. This is a critical threat mapped to CVE-2026-20133; security leaders should validate exposure, prioritize patching, a...
Recommended Tool
Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacker to gain DCA user privileges by accessing a credential file for the DCA user on the filesystem as a low-privileged user. This is a critical threat mapped to CVE-2026-20128; sec...
Recommended Tool
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected...
Recommended Tool
Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application CLI. This is a critical threat mapped to CVE-2022-20775; security leaders should validate exposure, prioritize patching...
Recommended Tool
Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, contain an authentication bypass vulnerability could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This is a critical...
Recommended Tool
Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance contain a code injection vulnerability...
Recommended Tool
Cisco Secure Email Gateway, Secure Email, AsyncOS Software, and Web Manager appliances contains an improper input validation vulnerability that allows threat actors to execute arbitrary commands with root privileges on the underlying operating system of an affected appliance. This is a critical threat mapped to CVE-...
Recommended Tool
Subscribe to the SecOps Pulse executive threat briefing for early warnings on unpatched vulnerabilities.
Top critical & high-severity threats, every week.
No spam. Unsubscribe anytime. SecOpsPulse may include sponsored security tool recommendations.