Vulnerabilities
CVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Cisco"
Network Security
Cisco noted that a PoC had been available for CVE-2026-20230 when it announced patches in early June.
Funding/M&A
WideField will accelerate Agentic SOC capabilities by expanding the lens on threat investigation to include identity, credentials, sessions, and blast radius.
Network Security
Insufficient validation of user input allows an attacker to gain access to the underlying OS and elevate their privileges to root.
Network Security
Cisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file write.
Vulnerabilities
The vulnerability is tracked as CVE-2026-20245 and it can allow arbitrary command execution as root, but no patch yet.
Vulnerabilities
The high-severity flaw can be exploited remotely, without authentication, in server-side request forgery (SSRF) attacks.
Vulnerabilities
Insufficient validation and authentication in the Secure Workload’s REST APIs provide remote attackers with Site Admin privileges.
Vulnerabilities
The zero-day, tracked as CVE-2026-20182, has been exploited in targeted attacks by a sophisticated threat actor identified as UAT-8616.
Network Security
Successful exploitation of the flaws could lead to code execution, server-side request forgery attacks, and denial-of-service conditions.
Artificial Intelligence
The acquisition strengthens Cisco’s push into identity-centric security for AI and machine access.
Artificial Intelligence
The new kit aims to address risks related to poisoned models, regulatory issues, supply chain integrity, and incident response.
Malware & Threats
The malware provides remote access and control of infected devices and maintains post-patching persistence.
Vulnerabilities
CISA expanded the KEV catalog with eight flaws, but five of them have been flagged as exploited before.
Vulnerabilities
The flaws can be exploited remotely to impersonate users or execute arbitrary commands on the underlying OS.
Vulnerabilities
The bugs could lead to authentication bypass, remote code execution, information disclosure, and privilege escalation.
Vulnerabilities
The high- and medium-severity flaws could lead to denial-of-service, secure boot bypass, information disclosure, and privilege escalation.
Ransomware
Amazon found evidence that the FMC software vulnerability has been exploited since late January, and found links to Russia.
Vulnerabilities
The security defects could lead to denial-of-service (DoS) conditions, command execution, or device takeover.
Vulnerabilities
WatchTowr reports seeing exploitation attempts for CVE-2026-20127 from numerous unique IP addresses.
Artificial Intelligence
Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Cybercrime
Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the...
Artificial Intelligence
