CVE-2026-20341

CVE-2026-20341 is a critical deserialization flaw (CVSS 9.1) in the sftunnel inter-device communication protocol of Cisco Secure FMC Software . The root cause is unsecured deserialization of untrusted data over the sftunnel management connection. An authenticated remote attacker holding valid adm...

CVE-2026-20341 Cisco Secure Firewall Management Center Software sftunnel Deserialization Root Command Execution Vulnerability

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privileges. This vulnerability is due to unsecured deserialization of untrusted data over the sftunnel management connection. An attacker...

EUVD-2026-81110

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privileges. This vulnerability is due to unsecured deserialization of untrusted data over the sftunnel management connection. An attacker...

CVE-2026-20242 Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...

EUVD-2026-81109

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...

CVE-2026-20242

CVE-2026-20242 affects the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software . The root cause is insecure deserialization of a user-supplied Java byte stream. An unauthenticated, remote attacker who controls a host in the configured external database acces...

CVE-2026-20237

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) are affected by improper input validation vulnerabilities (CWE-20) identified during an internal security review. Cisco released a software hardening release to address these issues. The CVSS 3.1 score is 9.1 ...

CVE-2026-20237 Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC, engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

EUVD-2026-81108

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC, engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

CVE-2026-76423 Cisco ISE API Authentication Bypass Vulnerability

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web service being exposed with insufficient authorization checks. An attacker could exploit...

EUVD-2026-81107

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web service being exposed with insufficient authorization checks. An attacker could exploit...

CVE-2026-76423

CVE-2026-76423 affects the REST API web service in Cisco ISE and Cisco ISE-PIC , where insufficient authorization checks allow an unauthenticated remote attacker to gain administrative access by sending a crafted HTTP request to the exposed REST API port. A successful exploit permits the attacker...

EUVD-2026-81106

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC, engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

CVE-2026-20130 Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC, engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

CVE-2026-20130

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) are affected by multiple internally discovered vulnerabilities grouped under CWE-74 (Improper Neutralization of Special Elements), addressed as part of a software hardening release following an internal securi...

EUVD-2026-81105

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20361 Cisco Nexus Dashboard Software Security Hardening Release September 2026 - SQL Injection

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20361

CVE-2026-20361 affects Cisco Nexus Dashboard and involves a SQL injection vulnerability (CWE-89) discovered internally during a comprehensive security review. The issue is addressed as part of a software hardening release (September 2026). The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) , with a ne...

EUVD-2026-81104

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

CVE-2026-20192 Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...