Cisco PSIRT

Cisco Advance Notification for Publication of September 16, 2026, Security Advisories

Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities

Cisco IOS XR Software Security Hardening Release: September 2026

Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability

Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability

Cisco Advance Notification for Publication of September 2, 2026, Security Advisories

Cisco Crosswork Security Hardening Release: August 2026

Cisco RoomOS Stack Overflow Vulnerability

Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability

Cisco Secure Workload Software Security Hardening Release: August 2026

Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability

Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability

Cisco Unified Intelligence Center SQL Injection Vulnerability

Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability

Cisco Advance Notification for Publication of August 19, 2026, Security Advisories

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

ClamAV Vulnerabilities Affecting Cisco Products: August 2026

Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability

Cisco IOS XE Software SNMP Denial of Service Vulnerability

Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability

Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability

Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability

Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability

Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026

Cisco Integrated Management Controller Argument Injection Vulnerabilities

Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

Cisco IOS XE Software Security Hardening Release: August 2026

Cisco Advance Notification for Publication of August 5, 2026, Security Advisories

Cisco Secure Firewall Management Center Software Static Credential Vulnerability

Cisco Identity Services Engine Path Traversal Vulnerability

Cisco RoomOS Security Hardening Release: July 2026

Cisco Advance Notification for Publication of July 15, 2026, Security Advisories

ClamAV Vulnerabilities Affecting Cisco Products: July 2026

Cisco Catalyst Center Arbitrary File Read Vulnerability

Cisco Advance Notification for Publication of July 1, 2026, Security Advisories

Cisco Crosswork Network Controller Server-Side Template Injection Vulnerability

Cisco Webex App Open Redirect Vulnerability

Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability

Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability

Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

Cisco Finesse Remote File Inclusion Vulnerability

Cisco Webex Meetings Cross-Site Scripting Vulnerability

Cisco Secure Workload Unauthorized API Access Vulnerability

Cisco ThousandEyes Virtual Appliance Authenticated Remote Code Execution Vulnerability

Cisco ThousandEyes Enterprise Agent BrowserBot Command Injection Vulnerability

Cisco Nexus 3000 and 9000 Series Switches Border Gateway Protocol Denial of Service Vulnerability

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Cisco Catalyst SD-WAN Manager Vulnerabilities

Cisco Identity Services Engine Authentication Bypass Vulnerabilities

Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability

Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities

Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vulnerability

Cisco IoT Field Network Director Vulnerabilities

Cisco Slido Insecure Direct Object Reference Vulnerability

Cisco Prime Infrastructure Information Disclosure Vulnerability

Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory

Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense

Cisco Identity Services Engine Remote Code Execution Vulnerabilities

Cisco Webex Contact Center Cross-Site Scripting Vulnerability

Cisco Unity Connection Arbitrary File Download Vulnerabilities

Cisco ThousandEyes Enterprise Agent Arbitrary File Overwrite Vulnerability

Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities

Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability

Cisco Unity Connection Cross-Site Scripting, Open Redirect, and SQL Injection Vulnerabilities

Cisco Secure Web Appliance Authentication Bypass Vulnerability

Cisco Webex Services Certificate Validation Vulnerability

Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities

Cisco Nexus Dashboard Configuration Backup REST API Unauthorized Access Vulnerability

Cisco Nexus Dashboard and Nexus Dashboard Insights Server-Side Request Forgery Vulnerability

Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability

Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability

Cisco Integrated Management Controller Authentication Bypass Vulnerability

Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability

Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability

Cisco Integrated Management Controller Command Injection and Remote Code Execution Vulnerabilities

Cisco Integrated Management Controller Cross-Site Scripting Vulnerabilities

Cisco Catalyst SD-WAN Manager Cross-Site Scripting Vulnerability

Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerability

Cisco IOx Application Hosting Environment Stored Cross-Site Scripting Vulnerability

Cisco IOS XE Software for Cisco Catalyst and Rugged Series Switches Secure Boot Bypass Vulnerability

Cisco IOS Software and IOS XE Software Release 3E HTTP Server Denial of Service Vulnerability

Cisco IOS XE Software for Catalyst 9000 Series Switches DHCP Snooping Denial of Service Vulnerability

Cisco IOx Application Hosting Environment Carriage Return Line Feed Injection Vulnerability

Cisco IOS XE Software Secure Channel for Meraki Information Disclosure Vulnerability

Cisco IOS XE Wireless Controller Software for the Catalyst CW9800 Family CAPWAP Denial of Service Vulnerability

Cisco IOS XE Software Secure Copy Protocol Server Denial of Service Vulnerability

Cisco IOS XE Software TLS Memory Exhaustion Denial of Service Vulnerability

Cisco IOS XE Software Lobby Ambassador Privilege Escalation Vulnerability

Cisco IOS XE Software Denial of Service Vulnerability

Cisco IOS XR Egress Packet Network Interface Aligner Interrupt Denial of Service Vulnerability

Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability

Cisco IOS XR Software CLI Privilege Escalation Vulnerabilities

Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities

Multiple Cisco Products Snort 3 Visual Basic for Applications Denial of Service Vulnerabilities

Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software Path Traversal Vulnerability