PT-2026-21939

Name of the Vulnerable Software and Affected Versions Cisco Nexus 3600 Platform Switches affected versions not specified Cisco Nexus 9500-R Series Switching Platforms affected versions not specified Description A flaw exists in the Ethernet VPN EVPN Layer 2 ingress packet processing of Cisco Nexu...

Cisco Nexus 9000 Series Fabric Switches 安全漏洞

The Cisco Nexus 9000 Series Fabric Switches are fiber-optic switches from the American company Cisco. There are security vulnerabilities in the Cisco Nexus 9000 Series Fabric Switches, which stem from improper handling of SNMP requests during parsing. These vulnerabilities may lead to kernel...

CVE-2026-20048: Memory Allocation with Excessive Size Value

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper processing when...

Cisco Nexus 9000 Series Fabric Switches 安全漏洞

The Cisco Nexus 9000 Series Fabric Switches are fiber-optic switches from the American company Cisco. There are security vulnerabilities in the Cisco Nexus 9000 Series Fabric Switches, which stem from insufficient validation during the processing of certain Ethernet frames. These vulnerabilities...

PT-2026-21947

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Fabric Switches versions affected versions not specified Description A flaw exists in Cisco Nexus 9000 Series Fabric Switches operating in ACI mode that may allow a remote, unauthenticated attacker to disrupt service. T...

CVE-2026-20033: Buffer Access with Incorrect Length Value

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation when processing specific Ethernet frames. An attacker cou...

PT-2026-21946

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description A flaw exists in the Link Layer Discovery Protocol LLDP feature that could allow a nearby attacker to restart the LLDP process, potentially causing the device to reload...

Knife Cutting the Edge: Disclosing a China-nexus gateway-monitoring AitM framework

Cisco Talos uncovered "DKnife," a fully featured gateway-monitoring and adversary-in-the-middle AitM framework comprising seven Linux-based implants that perform deep-packet inspection, manipulate traffic, and deliver malware via routers and edge devices. Based on the artifact metadata, DKnife ha...

📄 Nexus Repository Manager 3.53.0-01 File Disclosure / Traversal

A critical path traversal vulnerability exists in Sonatype Nexus Repository Manager 3 that allows unauthenticated attackers to read arbitrary files from the server filesystem through crafted URL paths. This is a proof of concept for an issue discovered in 2024...

Sonatype Nexus Repository vulnerable to server-side request forgery

Overview Nexus Repository provided by Sonatype contains the following vulnerability. Server-side request forgery CWE-918 - CVE-2026-0600 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Ear...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000682)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000682 advisory. The Linux kernel before 3.11 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly consider user-space access to th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000810 advisory. Buffer overflow in the picolcdrawevent function in devices/hid/hid-picolcdcore.c in the PicoLCD HID device driver in the Linux kernel through 3.16.3, as used in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000919)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000919 advisory. The kernel in Android before 2016-08-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518. Tenable has...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000731 advisory. drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize certai...

CVE-2026-0601

A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted request requiring user interaction...

CVE-2026-0600

Server-Side Request Forgery SSRF vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud metadata services and internal network...

UAT-8837 targets critical infrastructure sectors in North America

Cisco Talos is closely tracking UAT-8837, a threat actor we assess with medium confidence is a China-nexus advanced persistent threat APT actor based on overlaps in tactics, techniques, and procedures TTPs with those of other known China-nexus threat actors. Based on UAT-8837's TTPs and...

EUVD-2026-2665

A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted request requiring user interaction...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002743)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002743 advisory. The kernel in Android before 2016-08-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518. Tenable has...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001898)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001898 advisory. Buffer overflow in the picolcdrawevent function in devices/hid/hid-picolcdcore.c in the PicoLCD HID device driver in the Linux kernel through 3.16.3, as used in...