CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct9 so far
Exploited only
32 articles · 22 Jan – 15 Oct

Thu 15 Oct· 1 article

  1. Attackers Exploit Critical Cisco Email Gateway Flaw to Gain Root Access

    Cisco has disclosed that attackers are actively exploiting a critical vulnerability in its Secure Email Gateway (SEG), tracked as CVE-2026-76519 with a CVSS of 9.8/10. The flaw affects the AMP (Advanced Malware Protection) component and arises when…

    SecurityWeekCVE-2026-76519CVE-2026-76519Exploited

Thu 8 Oct· 1 article

  1. Cisco Patches 35 Flaws, Including Critical NX-OS Bugs Enabling Root Access

    Cisco has released patches for 35 vulnerabilities across its product lines, with more than a dozen rated critical. The update covers Meraki, License On-Prem, NX-OS, Application Policy Infrastructure Controller (APIC) and Finesse, among others. The most…

    SecurityWeekCVE-2026-76464CVE-2026-76464

Thu 1 Oct· 1 article

  1. Cisco Patches Actively Exploited SD-WAN Manager Auth Bypass

    Cisco has released urgent patches for a critical authentication bypass in Catalyst SD-WAN Manager, which has been exploited in the wild. The flaw, tracked as CVE-2026-76504 with a CVSS score of 9.8, targets the API session-based authentication mechanism. It…

    SecurityWeekCVE-2026-76504CVE-2026-76504Exploited

Thu 17 Sep· 2 articles

  1. Cisco Patches Dozens of Flaws as ISE Zero Day Faces Exploitation

    Cisco has released patches for dozens of vulnerabilities in Secure Firewall Management Centre (FMC), Identity Services Engine (ISE) and Nexus Dashboard. The ISE update addresses 20 CVEs, including 12 rated critical. Three vulnerabilities — CVE-2026-20282,…

    SecurityWeekCVE-2026-20282CVE-2026-20282Exploited
  2. Cisco Patches Zero Day Letting Attackers Take Root Access in ISE

    Cisco has released urgent patches for a critical authentication-bypass vulnerability in Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC), after confirming that it is being exploited in the wild as a zero-day. Tracked as…

    SecurityWeekCVE-2026-76460CVE-2026-76460Exploited

Tue 15 Sep· 1 article

  1. Cisco Secure Email Gateways Hit by Actively Exploited Root Flaw

    Cisco has warned that attackers are actively exploiting CVE-2026-76461, a zero-day vulnerability in the AsyncOS software used by its Secure Email Gateway appliances. The flaw has a CVSS score of 9.8 and can reportedly be exploited remotely without…

    SecurityWeekCVE-2026-76461CVE-2026-76461Exploited

Thu 10 Sep· 1 article

  1. Cisco Firewall Flaw Exploited by Sandworm and Qilin Ransomware

    Cisco and the US Cybersecurity and Infrastructure Security Agency (CISA) have warned that CVE-2026-20079, a critical authentication bypass flaw in Cisco Secure Firewall Management Center (FMC), has been exploited in the wild. Disclosed earlier in 2026, the…

    SecurityWeekCVE-2026-20079CVE-2026-20079Exploited

Thu 3 Sep· 1 article

  1. Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities

    Cisco has announced the public disclosure of two unpatched vulnerabilities, CVE-2026-20354 and CVE-2026-20355, affecting its Secure Email product. These medium-severity issues can allow attackers to intercept and modify email traffic. Cisco advises that…

    SecurityWeekCVE-2026-20354CVE-2026-20354

Wed 12 Aug· 1 article

  1. Cisco patches critical ASA/FTD zero day as attacks spike

    Cisco has released patches for a zero-day vulnerability (CVE-2026-20349) affecting its Secure Firewall ASA and FTD software. This vulnerability allows unauthenticated remote attackers to cause denial-of-service (DoS) conditions by sending specially crafted…

    SecurityWeekCVE-2026-20349CVE-2026-20349Exploited

Mon 10 Aug· 1 article

  1. Cisco flags ClamAV bugs in Secure Endpoint Connector, risking DoS

    Cisco has issued a warning regarding vulnerabilities in its Secure Endpoint Connector products for Windows, macOS, and Linux, stemming from seven ClamAV vulnerabilities. These vulnerabilities, identified as CVE-2026-20337 to CVE-2026-20339 and CVE-2026-20345…

    SecurityWeekCVE-2026-20337CVE-2026-20337

Thu 6 Aug· 1 article

  1. Cisco fixes critical flaws in Catalyst SDWAN and firewall gear

    Cisco has released patches for 24 vulnerabilities across its products, focusing on critical bugs in Catalyst SD-WAN, IOS XE, and Secure Firewall Management Center (FMC). Key issues include critical CVEs with very high CVSS scores, such as CVE-2026-20303 and…

    SecurityWeekCVE-2026-20303CVE-2026-20303Exploited

Thu 30 Jul· 1 article

  1. Cisco patches zero day flaw in Secure FMC after July attacks

    Cisco has announced patches for a high-severity zero-day vulnerability (CVE-2026-20316) in its Secure Firewall Management Center (FMC), which allows attackers to exploit default credentials to access sensitive data. This vulnerability has been actively…

    SecurityWeekCVE-2026-20316CVE-2026-20316Exploited

Tue 14 Jul· 1 article

  1. Russian APT exploits Cisco router SNMP flaw to hit vital sectors

    Russian state-sponsored APT actors are targeting networking devices worldwide to compromise critical infrastructure, as reported by the US and allied countries. The attacks focus on poorly secured routers across sectors like communication, healthcare, and…

    SecurityWeekCVE-2008-4128CVE-2008-4128Exploited

Thu 2 Jul· 1 article

  1. Cisco Warns of Exploit in Manager SSRF Flaw CVE-2026-20230

    Cisco has confirmed that a critical vulnerability, CVE-2026-20230, in its Unified Communications Manager and its session management edition has been exploited in the wild. The vulnerability, which has a CVSS score of 8.6, is due to improper validation of…

    SecurityWeekCVE-2026-20230CVE-2026-20230Exploited

Thu 25 Jun· 1 article

  1. Cisco SDWAN flaw lets attackers run root commands, Mandiant warns

    Google's Mandiant team has disclosed the exploitation of a Cisco Catalyst SD-WAN vulnerability, CVE-2026-20245, which allowed local authenticated attackers to execute arbitrary commands with root privileges. This flaw, the seventh SD-WAN product flaw…

    SecurityWeekCVE-2026-20245CVE-2026-20245Exploited

Wed 24 Jun· 1 article

  1. Cisco Unified CM flaw lets hackers gain root access via SSRF

    A critical vulnerability (CVE-2026-20230) in Cisco's Unified Communications Manager (Unified CM) has been exploited by attackers. This flaw allows unauthenticated remote access for Server Side Request Forgery (SSRF) attacks and could enable privilege…

    SecurityWeekCVE-2026-20230CVE-2026-20230Exploited

Thu 18 Jun· 1 article

  1. Cisco patches critical ISE command execution flaw CVE-2026-20181

    Cisco has issued critical security patches for a command execution vulnerability (CVE-2026-20181) affecting its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC), which could allow attackers with admin credentials to execute…

    SecurityWeekCVE-2026-20181CVE-2026-20181

Tue 16 Jun· 1 article

  1. Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks

    Cisco has issued a warning regarding a zero-day vulnerability, tracked as CVE-2026-20262, affecting its Catalyst SD-WAN Manager. This medium-severity flaw allows attackers to exploit specially crafted HTTP requests to create or overwrite files on the…

    SecurityWeekCVE-2026-20262CVE-2026-20262Exploited

Fri 5 Jun· 1 article

  1. Cisco SDWAN flaw lets attackers gain root via CLI exploit

    Cisco has reported a newly exploited SD-WAN product vulnerability, CVE-2026-20245, affecting the CLI of Cisco Catalyst SD-WAN Manager. This vulnerability allows authenticated local attackers to execute arbitrary commands as root through specially crafted…

    SecurityWeekCVE-2026-20245CVE-2026-20245Exploited

Thu 4 Jun· 1 article

  1. Cisco patches CVE-2026-20230 UC Manager flaw enabling root access

    Cisco has released patches for a critical vulnerability (CVE-2026-20230, CVSS score 8.6) in its Unified Communications Manager and Session Management Edition, which could allow server-side request forgery attacks leading to root access. The vulnerability is…

    SecurityWeekCVE-2026-20230CVE-2026-20230Exploited

Thu 21 May· 1 article

  1. Cisco Patches Critical Vulnerability in Secure Workload

    Cisco has released patches for a critical-severity vulnerability (CVE-2026-20223) in its Secure Workload software that could allow attackers to gain Site Admin privileges access through insufficient validation in REST API endpoints, affecting both SaaS and…

    SecurityWeekCVE-2026-20223CVE-2026-20223

Fri 15 May· 1 article

  1. Cisco patches SDWAN zero day CVE-2026-20182 exploited by UAT8616

    Cisco has released patches for another SD-WAN zero-day, the sixth to be exploited in 2026, tracked as CVE-2026-20182. The flaw is described as an authentication bypass that could let a remote attacker gain admin privileges via specially crafted packets and…

    SecurityWeekCVE-2026-20182CVE-2026-20182Exploited

Thu 7 May· 1 article

  1. Cisco patches five high severity flaws across enterprise products

    Cisco says it has patched multiple high-severity flaws across its enterprise product line, addressing five high-severity bugs in total. Two high-severity issues, CVE-2026-20034 and CVE-2026-20035, could enable server-side request forgery in Cisco Unity…

    SecurityWeekCVE-2026-20034CVE-2026-20034

Fri 24 Apr· 1 article

  1. US Agency Hit by Firestarter Backdoor on Cisco Firepower Gear

    According to CISA, at least one US federal agency was infected with the Firestarter backdoor through a vulnerable Cisco Firepower device, with the backdoor providing remote access and control and persisting beyond remediation. The campaign linked to…

    SecurityWeekCVE-2025-20333CVE-2025-20333Exploited

Tue 21 Apr· 1 article

  1. CISA Adds Cisco SD WAN, Zimbra XSS Flaws to KEV Catalog

    According to CISA, the Known Exploited Vulnerabilities (KEV) catalog was expanded to include eight more flaws, three of which had not previously been flagged as exploited. The most recent addition is CVE-2026-20133, a high-severity information disclosure bug…

    SecurityWeekCVE-2026-20133CVE-2026-20133Exploited

Thu 2 Apr· 1 article

  1. Cisco Patches Critical and High-Severity Vulnerabilities

    Cisco on Wednesday announced fixes for two critical and six high-severity vulnerabilities that could be exploited for authentication bypass, remote code execution, privilege escalation, and information disclosure. One of the critical bugs, tracked as…

    SecurityWeekCVE-2026-20160CVE-2026-20160

Thu 19 Mar· 1 article

  1. Cisco Firewall Vulnerability Exploited as Zero-Day in Interlock Ransomware Attacks

    According to Amazon threat intelligence, a vulnerability patched earlier this month by Cisco in its firewalls has been exploited as a zero-day since at least late January, tracked as CVE-2026-20131 affecting the Secure Firewall Management Center (FMC)…

    SecurityWeekCVE-2026-20131CVE-2026-20131Exploited

Sun 8 Mar· 1 article

  1. Cisco Catalyst SDWAN flaw CVE-2026-20127 fuels internet attacks

    SecurityWeek reports that a recent Cisco Catalyst SD-WAN vulnerability, initially exploited as a zero-day, is now being used more widely. WatchTowr says exploitation of four Catalyst SD-WAN vulnerabilities is in the wild, including CVE-2026-20127, which was…

    SecurityWeekCVE-2026-20127CVE-2026-20127Exploited

Thu 5 Mar· 2 articles

  1. Catalyst SD WAN flaws CVE-2026-20128 exploited, Cisco warns

    Cisco warns that two recently patched Catalyst SD-WAN vulnerabilities are being exploited in the wild, with patches already available for five Catalyst SD-WAN flaws. According to Cisco, CVE-2026-20128 is an information-disclosure issue in the Data Collection…

    SecurityWeekCVE-2026-20128CVE-2026-20128Exploited
  2. Cisco patches 50 flaws after authentication bypass CVE-2026-20079

    Cisco has rolled out patches for 50 vulnerabilities across its Firewall ASA, Secure FMC, and Secure FTD appliances, with 48 of them affecting those enterprise networking products. According to Cisco, the March 2026 bundled publication contains 25 security…

    SecurityWeekCVE-2026-20079CVE-2026-20079Exploited

Thu 26 Feb· 1 article

  1. Cisco patches exploited Catalyst SD WAN zero day CVE-2026-20127

    Cisco has rolled out emergency patches for a critical Catalyst SD-WAN zero-day (CVE-2026-20127, CVSS 10/10) that has been exploited in the wild, with fixes affecting Catalyst SD-WAN Controller and Manager versions listed in the advisory. The flaw allows…

    SecurityWeekCVE-2026-20127CVE-2026-20127Exploited

Thu 22 Jan· 1 article

  1. Hackers Targeting Cisco Unified CM Zero-Day

    Cisco has released patches for CVE-2026-20045, a critical vulnerability affecting several unified communications products including Cisco Unified Communications Manager and its SME, Unified CM IM & Presence Service, Unity Connection, and Webex Calling…

    SecurityWeekCVE-2026-20045CVE-2026-20045Exploited

No older articles match these filters.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device