Vulnerabilities
The flaw could allow remote, unauthenticated attackers to access vulnerable appliances with administrative privileges.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Cisco"
Vulnerabilities
The vulnerabilities may lead to root access, command execution, bypasses, SQL injection, and remote code execution.
Vulnerabilities
Remote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests.
Email Security
An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.
Vulnerabilities
Cisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026.
Network Security
Publicly disclosed S/MIME flaws could expose encrypted email content, while critical IOS XR and Nexus bugs could enable remote code execution and authentication bypass.
Vulnerabilities
The flaws could lead to remote code execution, authentication bypasses, and path traversal attacks.
Vulnerabilities
CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices.
Vulnerabilities
Remote, unauthenticated attackers could exploit the bugs to cause a denial-of-service (DoS) condition.
Vulnerabilities
Patches were rolled out for two dozen vulnerabilities, including one with public proof-of-concept (PoC) code.
Vulnerabilities
The vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices.
Artificial Intelligence
The open-weight Antares models are designed to pinpoint known vulnerabilities in codebases faster and at a fraction of the cost of larger AI models.
Vulnerabilities
CVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching.
Network Security
Cisco noted that a PoC had been available for CVE-2026-20230 when it announced patches in early June.
Funding/M&A
WideField will accelerate Agentic SOC capabilities by expanding the lens on threat investigation to include identity, credentials, sessions, and blast radius.
Network Security
Insufficient validation of user input allows an attacker to gain access to the underlying OS and elevate their privileges to root.
Network Security
Cisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file write.
Vulnerabilities
The vulnerability is tracked as CVE-2026-20245 and it can allow arbitrary command execution as root, but no patch yet.
Vulnerabilities
The high-severity flaw can be exploited remotely, without authentication, in server-side request forgery (SSRF) attacks.
Vulnerabilities
Insufficient validation and authentication in the Secure Workload’s REST APIs provide remote attackers with Site Admin privileges.
Cybercrime
Amir Barati, an alleged member of the Mabna Institute, was indicted for targeting universities, private organizations, and government entities in the US and abroad.
Artificial Intelligence
Vulnerabilities
Hacker Conversations
Vulnerabilities
Artificial Intelligence
Cybersecurity Funding
Vulnerabilities