Cisco Publishes Nine Security Advisories
NEOSEC enrichment — no mirror of the original source
This week, Cisco published nine security advisories to address 14 CVEs across its product line. Five of the CVEs are rated high-severity: a remote code execution vulnerability (CVE-2026-20034) and a server-side request forgery vulnerability
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2026-20035A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected…
- CVE-2026-20034A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an…
- CVE-2026-20185A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Series Managed Switches (SG350) and Cisco 350X Series Stackable …
- CVE-2026-20188Following the initial publication of the Security Advisory about a denial of service (DoS) condition in Cisco Crosswork Network Controller and Cisco Network …
- CVE-2026-20167A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges t…
Affected vendors and products
More on Advisories
Other advisories
- CriticalCVE-2026-116785FreeSWITCH: exploited SIP MESSAGE command execution (CVE-2026-116779) plus 20 more advisories
- MediumCVE-2026-123552OpenAM before 16.1.4: unauthenticated session-token theft, unsigned SAML assertions and self-registration admin takeover (18 advisories, now CVE-2026-123536–123553)
- CriticalCVE-2026-122314Kyverno: 24 advisories fixed in 1.19.2, including namespace-user-to-cluster-admin privilege escalation and image signature verification bypasses
- MediumCVE-2026-81868SteeltoeOSS Security-advisories: Umgehung der Authentifizierung über alternativen Pfad
- HighCVE-2026-81516SteeltoeOSS Security-advisories: fehlerhafte Behandlung von Ausnahmebedingungen
- HighCVE-2026-81515SteeltoeOSS Security-advisories: fehlerhafte Behandlung von Ausnahmebedingungen
- MediumCVE-2026-75523SteeltoeOSS Security-advisories: Offenlegung vertraulicher Informationen
- HighCVE-2026-81515SteeltoeOSS Security-advisories: fehlerhafte Behandlung von Ausnahmebedingungen
Other news entries
- Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as RootNewsThe Hacker News
- Cisco Advance Notification for Publication of November 4, 2026, Security AdvisoriesNewsCisco PSIRT
- Cisco Advance Notification for Publication of October 21, 2026, Security AdvisoriesNewsCisco PSIRT
- There's only so much code: the rise in vulnerability numbersNewsCisco Talos
- ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover FlawNewsSecurityWeek
- Cisco warns of critical flaws allowing Nexus switch takeoverNewsBleepingComputer
- Cisco Advance Notification for Publication of October 7, 2026, Security AdvisoriesNewsCisco PSIRT
- Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security AdvisoriesNewsSecurityWeek
Source: https://www.bleepingcomputer.com/
ID