As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20237 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-20.
CVE-2026-76423 is a critical authentication bypass vulnerability in the REST API of Cisco Identity Services Engine (ISE) software versions 3.1.0, 3.2.0, 3.3.0, 3.4.0, and 3.5.0. It allows an unauthenticated remote attacker to gain administrative access by exploiting insufficient authorization checks on the REST API web service. Successful exploitation enables reading and modifying ISE configuration and identity data with administrative privileges.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20130 are related to improper neutralization of special elements issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20361 are related to SQL injection issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20192 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands as root.
This vulnerability exists because a registered sftunnel peer has incorrect permissions to write an arbitrary file to any location on the device. An attacker could exploit this vulnerability by hijacking the sftunnel communication connection or being a valid registered sftunnel peer and sending an sftunnel command to write a malicious file to the disk of an affected device. A successful exploit could allow the attacker to write a file to the device that is executed with root privileges. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20325 are related to improper neutralization of special elements used in a command issue that are grouped under the Common Weakness Enumeration (CWE) CWE-77.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20194 are related to incorrect resource transfer between spheres that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-669.
CVE-2026-20211 is a critical vulnerability in Cisco Identity Services Engine (ISE) Software versions 3.1.0, 3.2.0, 3.3.0, 3.4.0, and 3.5.0. It allows an authenticated attacker with high-privileged administrative credentials to execute arbitrary commands on the underlying operating system via insecure deserialization of Java objects. Exploitation can lead to root privilege escalation and, in single-node deployments, denial of service by making the ISE node unavailable, disrupting network access for unauthenticated endpoints.
CVE-2026-20330 is a critical vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software involving improper neutralization issues classified under CWE-707. This vulnerability affects multiple specific versions of the ASA software. It has a very high CVSS score of 9.9, indicating network exploitable conditions with low attack complexity, requiring low privileges, and no user interaction, resulting in high confidentiality, integrity, and availability impacts. No public exploits are known at this time, and the vulnerability was identified through Cisco's internal security review process.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20322 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.
CVE-2026-20329 is a critical vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software involving improper handling of exceptional conditions. This flaw is part of a group of issues related to CWE-703. The vulnerability has a high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. Multiple specific versions of the ASA software are affected. No known exploits in the wild have been reported, and no patch or vendor advisory details are provided in the input.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20326 are related to missing authentication for critical function issues that are grouped under the Common Weakness Enumeration (CWE) CWE-306.
CVE-2026-20234 is a critical vulnerability in Cisco Identity Services Engine (ISE) Software versions 3.1.0 through 3.5.0. It involves insufficiently protected credentials, categorized under CWE-522. The vulnerability was identified during an internal security review by Cisco and addressed in a software hardening release. The CVSS 3.1 base score is 9.9, indicating high impact on confidentiality, integrity, and availability. No public exploits are known at this time.
CVE-2026-20331 is a critical vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software involving protection mechanism failures categorized under CWE-693. It affects multiple specific versions of the ASA software. The vulnerability has a high CVSS score of 9.6, indicating critical impact with high confidentiality, integrity, and availability consequences. There is no explicit vendor advisory or patch information provided in the input data. No known exploits in the wild have been reported.
CVE-2026-76420 is a critical vulnerability in Cisco Secure Firewall Management Center (FMC) affecting multiple 7.x and 10.x versions. It arises from improper initialization of encryption parameters in the Apache JServ Protocol (AJP) connector, allowing unauthenticated remote attackers to impersonate peer devices. Exploitation requires the sftunnel connection between FMC and Cisco Secure FTD to be down. Successful exploitation could lead to root command execution and full control over FMC REST APIs.
CVE-2026-20307 is a critical vulnerability in Cisco Identity Services Engine (ISE) software versions 3.1.0 through 3.5.0. It involves insecure deserialization of user-supplied Java byte streams in the web-based management interface. An authenticated attacker with low-privileged administrative credentials can exploit this flaw to execute arbitrary code on the device, escalate privileges to root, and potentially cause a denial of service in single-node deployments.
CVE-2026-20305 is a critical OS command injection vulnerability in Cisco Identity Services Engine (ISE) diagnostic tools. It allows an authenticated attacker with administrative credentials to execute arbitrary commands on the underlying OS and escalate privileges to root. Exploitation can cause denial of service in single-node deployments, disrupting network access for unauthenticated endpoints.
CVE-2026-20306 is a critical OS command injection vulnerability in the REST API of Cisco Identity Services Engine (ISE) version 3.4.0. An authenticated attacker with administrative credentials can exploit this flaw by sending crafted commands to the web management interface, leading to arbitrary code execution with root privileges. Exploitation in single-node deployments may cause a denial-of-service condition, making the ISE node unavailable and preventing unauthenticated endpoints from accessing the network.
CVE-2026-76461 is a critical vulnerability in Cisco AsyncOS Software for Cisco Secure Email Gateway. It arises from insufficient validation in the email parsing logic, allowing an unauthenticated remote attacker to send crafted emails containing malicious SQL statements. Successful exploitation can lead to arbitrary command execution with root privileges on the underlying operating system.