NewsThe Hacker News2026-08-06 17:13 UTC

Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs

Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software as part of a comprehensive internal security review. The security issues affect Cisco Catalyst SD-WAN Software, regardless of device configuration, and Cisco IOS XE Software when it is running in autonomous or controller mode. "These vulnerabilities were found

Other advisories

osv:CLEANSTART-2026-HP63301none
Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4
osv:CLEANSTART-2026-VB20350none
undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still ...
osv:CLEANSTART-2026-AY49632none
Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason
osv:CLEANSTART-2026-XM93571none
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
CVE-2026-73607none
SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check in github.com/siyuan-note/siyuan/kernel
osv:CLEANSTART-2026-SY79520none
Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4
osv:CLEANSTART-2026-IY13000none
Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason
osv:CLEANSTART-2026-PU41775none
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

Other news entries

Newsdarkreading2026-10-07
Anthropic Gives Vetted Defenders Fewer Claude Guardrails
Newsbleepingcomputer2026-10-07
Hackers exploit critical Atlassian flaw after public PoC release
Newsbleepingcomputer2026-10-06
Atlassian warns of critical file-access flaw in Jira, Confluence
Newstheregister-security2026-10-06
Denmark's ID register spills more people's details than the country has residents
Newsthehackernews2026-10-06
Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
Newsbleepingcomputer2026-10-02
Frontline Education breach exposes school district employee data
Newsbleepingcomputer2026-10-01
Kiteworks patches max severity code injection vulnerability
Newsthehackernews2026-09-30
AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

Source: https://thehackernews.com/2026/08/cisco-patches-12-sd-wan-and-ios-xe.html

More on Including