Security Notices
CVE-2026-20323: Cisco Secure FMC Software and Secure FTD Software sftunnel Unauthorized Authentication Bypass Vulnerability
An adjacent-network attacker can impersonate an sftunnel peer and obtain root-equivalent manager access while the legitimate tunnel is down or disrupted. Update FMC and FTD, preserving peer-registration and interruption evidence for separate investigation.
CVE-2026-20250: Cisco Secure Firewall ASA and FTD for Firepower 3100 and 4200 Series DTLS Denial of Service Vulnerability
DTLS traffic can reload affected Secure Firewall 3100 and 4200 devices with flow offload enabled. Evaluate CPU and throughput impact before disabling offload temporarily, then install the platform-specific software fix.
CVE-2026-20324: Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Execution Vulnerability
With valid credentials and a registered or hijacked sftunnel connection, an attacker can write a file that executes as root on FMC. Check peers and tunnel state, preserve evidence, and install the specific fix.
CVE-2026-20282: Cisco ISE Authenticated Write Vulnerability
An ISE administrator can obtain operating-system write access through a crafted HTTP request, with an easy path to root. Apply the CVE-specific patch; a public announcement is not the same as reported malicious exploitation.
CVE-2026-20325: Cisco Nexus Dashboard hardening: Improper Neutralization of Special Elements used in a Command
Nexus Dashboard hardening addresses command, code and template-injection risks without identifying a particular endpoint. Follow the Dashboard release or migration path; the category score does not establish one universal exploit sequence.
CVE-2026-20283: Cisco ISE IPsec Open API Command Injection Vulnerability
ISE IPsec Open API command injection requires administrative access and the specified multi-interface, API-created tunnel configuration. Evaluate connectivity before using Cisco's web-interface recreation workaround, and obtain the permanent CVE-specific software update.
CVE-2026-20284: Cisco ISE SXP REST API SQL Injection Vulnerability
An ISE administrator can read or change database contents through the SXP REST API when SXP and a connection are configured. Apply the specific patch and check new endpoint authentication after maintenance.
CVE-2026-20285: Cisco ISE Authorization Bypass vulnerability
An authenticated Administrator can change file descriptions without required permission checks in ISE or ISE-PIC. Apply the product-specific fix, retaining ISE-PIC's support boundary; this is not established file-content access or root control.
CVE-2026-20286: Cisco ISE Authorization Bypass vulnerability
An ISE Administrator can bypass permission checks to modify file descriptions on management pages. Apply the ISE patch or supported migration; ISE-PIC is excluded from this CVE despite appearing in the shared advisory.
CVE-2026-20194: Cisco ISE hardening: Incorrect Resource Transfer Vulnerabilities
The ISE hardening entry concerns resources crossing security boundaries, but identifies no specific upload or disclosure path. Match ISE versus ISE-PIC to the patch table; an ISE release is not automatically an ISE-PIC upgrade.