As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20361 are related to SQL injection issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20192 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands as root.
This vulnerability exists because a registered sftunnel peer has incorrect permissions to write an arbitrary file to any location on the device. An attacker could exploit this vulnerability by hijacking the sftunnel communication connection or being a valid registered sftunnel peer and sending an sftunnel command to write a malicious file to the disk of an affected device. A successful exploit could allow the attacker to write a file to the device that is executed with root privileges. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20325 are related to improper neutralization of special elements used in a command issue that are grouped under the Common Weakness Enumeration (CWE) CWE-77.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20194 are related to incorrect resource transfer between spheres that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-669.
CVE-2026-20211 is a critical vulnerability in Cisco Identity Services Engine (ISE) Software versions 3.1.0, 3.2.0, 3.3.0, 3.4.0, and 3.5.0. It allows an authenticated attacker with high-privileged administrative credentials to execute arbitrary commands on the underlying operating system via insecure deserialization of Java objects. Exploitation can lead to root privilege escalation and, in single-node deployments, denial of service by making the ISE node unavailable, disrupting network access for unauthenticated endpoints.
CVE-2026-20330 is a critical vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software involving improper neutralization issues classified under CWE-707. This vulnerability affects multiple specific versions of the ASA software. It has a very high CVSS score of 9.9, indicating network exploitable conditions with low attack complexity, requiring low privileges, and no user interaction, resulting in high confidentiality, integrity, and availability impacts. No public exploits are known at this time, and the vulnerability was identified through Cisco's internal security review process.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20322 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.
CVE-2026-20329 is a critical vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software involving improper handling of exceptional conditions. This flaw is part of a group of issues related to CWE-703. The vulnerability has a high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. Multiple specific versions of the ASA software are affected. No known exploits in the wild have been reported, and no patch or vendor advisory details are provided in the input.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20326 are related to missing authentication for critical function issues that are grouped under the Common Weakness Enumeration (CWE) CWE-306.
Nuclei versions before 3.11.1 cache template signature verification based only on file modification time without content checksums. Attackers can replace verified templates with unsigned malicious content and restore the original modification time to bypass signature checks and execute arbitrary operating system commands.
CVE-2026-20234 is a critical vulnerability in Cisco Identity Services Engine (ISE) Software versions 3.1.0 through 3.5.0. It involves insufficiently protected credentials, categorized under CWE-522. The vulnerability was identified during an internal security review by Cisco and addressed in a software hardening release. The CVSS 3.1 base score is 9.9, indicating high impact on confidentiality, integrity, and availability. No public exploits are known at this time.
CVE-2026-20331 is a critical vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software involving protection mechanism failures categorized under CWE-693. It affects multiple specific versions of the ASA software. The vulnerability has a high CVSS score of 9.6, indicating critical impact with high confidentiality, integrity, and availability consequences. There is no explicit vendor advisory or patch information provided in the input data. No known exploits in the wild have been reported.
CVE-2026-76420 is a critical vulnerability in Cisco Secure Firewall Management Center (FMC) affecting multiple 7.x and 10.x versions. It arises from improper initialization of encryption parameters in the Apache JServ Protocol (AJP) connector, allowing unauthenticated remote attackers to impersonate peer devices. Exploitation requires the sftunnel connection between FMC and Cisco Secure FTD to be down. Successful exploitation could lead to root command execution and full control over FMC REST APIs.
CVE-2026-20307 is a critical vulnerability in Cisco Identity Services Engine (ISE) software versions 3.1.0 through 3.5.0. It involves insecure deserialization of user-supplied Java byte streams in the web-based management interface. An authenticated attacker with low-privileged administrative credentials can exploit this flaw to execute arbitrary code on the device, escalate privileges to root, and potentially cause a denial of service in single-node deployments.
CVE-2026-20305 is a critical OS command injection vulnerability in Cisco Identity Services Engine (ISE) diagnostic tools. It allows an authenticated attacker with administrative credentials to execute arbitrary commands on the underlying OS and escalate privileges to root. Exploitation can cause denial of service in single-node deployments, disrupting network access for unauthenticated endpoints.
CVE-2026-20306 is a critical OS command injection vulnerability in the REST API of Cisco Identity Services Engine (ISE) version 3.4.0. An authenticated attacker with administrative credentials can exploit this flaw by sending crafted commands to the web management interface, leading to arbitrary code execution with root privileges. Exploitation in single-node deployments may cause a denial-of-service condition, making the ISE node unavailable and preventing unauthenticated endpoints from accessing the network.
CVE-2026-80274 is a high-severity vulnerability in ISC BIND 9 that causes a denial of service. The issue arises when a BIND resolver queries a DNSSEC-signed authoritative zone and receives a specific sequence of DNS responses, including a valid wildcard answer with signed NSEC3 proof followed by an unsigned NSEC at the same owner name. This triggers a reachable assertion failure, causing the program to exit unexpectedly.
CVE-2026-77119 is a medium severity vulnerability in ISC BIND 9 involving an origin validation error. The flaw allows a validly signed NSEC3 record from an unrelated sibling zone to be incorrectly accepted as proof of insecurity. This can downgrade a secure delegation and permit acceptance of a forged unsigned DNS answer. The vulnerability affects multiple versions of BIND 9 ranging from 9.11.0 through 9.21.25, including some S1 variants.
CVE-2026-76163 is a reachable assertion vulnerability in ISC BIND 9 that can cause the DNS server to crash unexpectedly. The issue arises when BIND is configured without a global options block in the named.conf file and receives a DNS query of type TKEY. This vulnerability affects specific versions of BIND 9 and results in denial of service due to program exit. It has a high severity score of 7.5.