Cisco PSIRT security advisories for IOS XE, NX-OS, ASA/FTD, ISE, and Meraki, rated by Cisco's Security Impact Rating.
77 changes, newest first
cisco-sa-emudhra-info-ScS22A1r · Impact: Informational — Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered.
cisco-sa-oct2026-node-js-Jj3SQ19u · CVE-2026-111497, CVE-2026-105482, CVE-2026-105483 +1 · Impact: High — On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x.
cisco-sa-php-october26-Jj384Daq · CVE-2026-109618, CVE-2026-109619 · Impact: Critical — On October 21, the PHP Foundation announced the availability of a Critical PHP Security release addressing two critical vulnerabilities:
cisco-sa-ise-cert-mE9BD5GO · CVE-2026-20241 · Impact: Medium — A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.
cisco-sa-notice-I8z3n6lK · CVE-2026-76506, CVE-2026-76419, CVE-2026-20241 · Impact: Informational — On November 4, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories:
cisco-sa-cucm-xss-5mQn2U5z · CVE-2026-76419 · Impact: Medium — A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.
cisco-sa-cucs-rce-LzHSFRDQ · CVE-2026-76506 · Impact: High — A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device.
cisco-sa-esa-inj-2bLVGmhX · CVE-2026-76461 · Impact: Critical — A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.
cisco-sa-finesse-ssrf-mmSuyugS · CVE-2026-20362 · Impact: High — A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device.
cisco-sa-sdwan-rpa-EHchtZk · CVE-2026-20127 · Impact: Critical — A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.
Showing 10 of 77 changes
