CVE-2026-20222

CVE-2026-20222 affects the EIGRP implementation in Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software. The root cause is improper resource management when processing EIGRP update messages. An unauthenticated, adjacent attacker can send crafted EIGRP updates...

CVE-2026-20247

CVE-2026-20247 affects Cisco Identity Services Engine (ISE) and allows an unauthenticated, remote attacker to perform SQL injection by sending a crafted request. The root cause is improper validation of user-supplied input . A successful exploit enables the attacker to modify data in the underlyi...

CVE-2026-20135

Cisco Secure Firewall Threat Defense (FTD) Software is vulnerable to a denial of service (DoS) via its TLS 1.3 implementation . The root cause is improper buffer management during TLS 1.3 connections. An unauthenticated, remote attacker can trigger a DoS by sending a crafted TLS 1.3 packet to a T...

CVE-2026-76460

A critical authentication bypass (CVSS 10.0) in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) stems from insufficient authentication control on an API endpoint—described as incorrect use of privileged APIs. An unauthenticated, remote attacker can exploit ...

CVE-2026-20352

CVE-2026-20352 affects the RADIUS feature of Cisco Identity Services Engine (ISE) . The root cause is improper handling of certain RADIUS requests, allowing an unauthenticated, remote attacker to send a crafted RADIUS request directly to the device and trigger a denial of service that renders the...

CVE-2026-76413

A vulnerability in the Cisco ASDM single sign-on (SSO) handler for Cisco Secure FMC Software allows an unauthenticated, remote attacker to forge a session token and log in as the ASDM administrator. The root cause is improper management of the SSO token . By repeating the attack, an attacker can ...

CVE-2026-20336

Cisco Secure ASA, Secure Firewall Threat Defense (FTD), and Secure Firewall Management Center (FMC) Software are affected by resource lifetime management vulnerabilities (CWE-664), identified through Cisco's internal security review as part of a proactive hardening release. The CVSS 3.1 score is ...

CVE-2026-20249

A logic error in the IKEv2 certificate authentication phase of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated, remote attacker to send a crafted certificate during IKEv2 VPN connection setup, crashing the IKEv2 process and causing an unexpected device reload (DoS). The vulne...

CVE-2026-20350

CVE-2026-20350 affects the web-based management interface of Cisco ThousandEyes Virtual Appliance , where improper validation of user-supplied input allows an authenticated attacker with administrative credentials to inject arbitrary operating system commands by saving configuration details conta...

CVE-2026-76409

Cisco Nexus Dashboard is affected by an improper limitation of a pathname vulnerability (CWE-22), discovered during an internal security review and addressed in a software hardening release published in September 2026. The vulnerability is rated CVSS 3.1: 8.8 (HIGH) , with a vector of AV:N/AC:L/P...

CVE-2026-20340

Cisco Secure Firewall Management Center (FMC) Software is affected by an unsecured deserialization vulnerability in web-management user-controlled data. An authenticated remote attacker with at least the Security Analyst (read-only) role can send a crafted HTTP payload to the device, save it, and...

CVE-2026-20335

CVE-2026-20335 affects Cisco Secure Adaptive Security Appliance (ASA) Software , Secure Firewall Threat Defense (FTD) Software , and Secure Firewall Management Center (FMC) Software . The vulnerability involves incorrect calculation issues classified under CWE-682 , discovered during an internal ...

CVE-2026-20295

CVE-2026-20295 affects the sftunnel inter-device communication protocol in Cisco Secure Firewall Management Center (FMC) and Cisco Secure Firewall Threat Defense (FTD) Software. The root cause is improper management of memory resources during sftunnel TLS connection setup , allowing an unauthenti...

CVE-2026-20250

Cisco Secure Firewall ASA and FTD Software for 3100 Series and 4200 Series devices are affected by a Denial of Service vulnerability in Datagram TLS (DTLS) message handling . The root cause is improper resource management when processing certain DTLS messages. An unauthenticated, remote attacker ...

CVE-2026-20176

Cisco Identity Services Engine (ISE) contains a remote code execution vulnerability caused by insufficient validation of user-supplied input in an HTTP endpoint. An attacker with high-privileged administrative credentials can send a crafted HTTP request to achieve system-level access on the under...

CVE-2026-20341

CVE-2026-20341 is a critical deserialization flaw (CVSS 9.1) in the sftunnel inter-device communication protocol of Cisco Secure FMC Software . The root cause is unsecured deserialization of untrusted data over the sftunnel management connection. An authenticated remote attacker holding valid adm...

CVE-2026-20242

CVE-2026-20242 affects the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software . The root cause is insecure deserialization of a user-supplied Java byte stream. An unauthenticated, remote attacker who controls a host in the configured external database acces...

CVE-2026-20237

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) are affected by improper input validation vulnerabilities (CWE-20) identified during an internal security review. Cisco released a software hardening release to address these issues. The CVSS 3.1 score is 9.1 ...

CVE-2026-76423

CVE-2026-76423 affects the REST API web service in Cisco ISE and Cisco ISE-PIC , where insufficient authorization checks allow an unauthenticated remote attacker to gain administrative access by sending a crafted HTTP request to the exposed REST API port. A successful exploit permits the attacker...

CVE-2026-20130

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) are affected by multiple internally discovered vulnerabilities grouped under CWE-74 (Improper Neutralization of Special Elements), addressed as part of a software hardening release following an internal securi...