Vulnerabilities
The flaws could lead to remote code execution, authentication bypasses, and path traversal attacks.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Cisco"
Vulnerabilities
CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices.
Vulnerabilities
Remote, unauthenticated attackers could exploit the bugs to cause a denial-of-service (DoS) condition.
Vulnerabilities
Patches were rolled out for two dozen vulnerabilities, including one with public proof-of-concept (PoC) code.
Vulnerabilities
The vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices.
Artificial Intelligence
The open-weight Antares models are designed to pinpoint known vulnerabilities in codebases faster and at a fraction of the cost of larger AI models.
Vulnerabilities
CVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching.
Network Security
Cisco noted that a PoC had been available for CVE-2026-20230 when it announced patches in early June.
Funding/M&A
WideField will accelerate Agentic SOC capabilities by expanding the lens on threat investigation to include identity, credentials, sessions, and blast radius.
Network Security
Insufficient validation of user input allows an attacker to gain access to the underlying OS and elevate their privileges to root.
Network Security
Cisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file write.
Vulnerabilities
The vulnerability is tracked as CVE-2026-20245 and it can allow arbitrary command execution as root, but no patch yet.
Vulnerabilities
The high-severity flaw can be exploited remotely, without authentication, in server-side request forgery (SSRF) attacks.
Vulnerabilities
Insufficient validation and authentication in the Secure Workload’s REST APIs provide remote attackers with Site Admin privileges.
Vulnerabilities
The zero-day, tracked as CVE-2026-20182, has been exploited in targeted attacks by a sophisticated threat actor identified as UAT-8616.
Network Security
Successful exploitation of the flaws could lead to code execution, server-side request forgery attacks, and denial-of-service conditions.
Artificial Intelligence
The acquisition strengthens Cisco’s push into identity-centric security for AI and machine access.
Artificial Intelligence
The new kit aims to address risks related to poisoned models, regulatory issues, supply chain integrity, and incident response.
Malware & Threats
The malware provides remote access and control of infected devices and maintains post-patching persistence.
Vulnerabilities
CISA expanded the KEV catalog with eight flaws, but five of them have been flagged as exploited before.
Vulnerabilities
CVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.
Artificial Intelligence
Artificial Intelligence
IoT Security
Operation CameraSwarm targeted Dahua cameras across multiple countries, focusing on Russian and CIS telecom netblocks.
Vulnerabilities
Artificial Intelligence
