Cisco
Cisco Secure Email Gateway File-Write Flaw Is Actively Exploited
Cisco reports active exploitation of a Critical Secure Email Gateway file-write flaw. Update AsyncOS or Content Scanner Tools and preserve forensics.
Cisco Fixes Exploited Catalyst SD-WAN Manager Authentication Bypass
Cisco confirms exploitation of a Catalyst SD-WAN Manager authentication bypass. Prioritize on-premises branch updates, restrict management access and preserve evidence; Cisco-managed Cloud Hosted remediation does not establish the state of customer-operated systems.
CVE-2026-76447: Cisco ISE Certificate Reload Vulnerability
Unauthenticated requests can force the ISE or ISE-PIC OCSP responder to reload certificate and key material. Update and review unexpected reloads; this is an availability concern, not established private-key theft or certificate replacement.
CVE-2026-76448: Cisco Identity Services Engine SQL Injection Vulnerability
Cisco ISE and ISE-PIC database injection requires administrative credentials. Follow this advisory's own patch or migration mapping, including ISE-PIC's 3.4 support limit, rather than borrowing fixes or impacts from neighboring vulnerabilities.
CVE-2026-76449: Cisco Identity Services Engine SQL Injection Vulnerability
Cisco's authenticated database-injection entry covers ISE and ISE-PIC without identifying this CVE's exact query endpoint. Match product and branch to the fixed patch; the ISE 3.5 target is not an ISE-PIC upgrade path.
CVE-2026-76450: Cisco Identity Services Engine SQL Injection Vulnerability
This authenticated database-injection flaw affects ISE, not ISE-PIC. Match the ISE patch guidance and review administrative API access; the shared advisory does not identify this CVE's exact query or establish operating-system command execution.
CVE-2026-76425: Cisco ISE SQL Injection Vulnerability
An ISE administrator can inject SQL through API parameters to read database content and cause server-side requests. Apply the specific fix and examine outbound traffic as well as data access; root execution is not established.
CVE-2026-76451: Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability
Certificate-management SQL injection affects ISE and ISE-PIC and requires administrative credentials. Follow the product-specific patch guidance; the shared description names no particular certificate field and does not establish private-key theft or command execution.
CVE-2026-76426: Cisco ISE REST API SQL Injection Vulnerability
An authenticated administrator can read the ISE or ISE-PIC monitoring database through REST API SQL injection. Apply the CVE-specific update and assess disclosure; the stated impact is not database modification or operating-system control.
CVE-2026-76427: Cisco ISE XML External Entity Injection Vulnerability
An ISE administrator can upload a crafted offline profiler feed that reads local files or contacts internal systems through XML entities. Apply the update and preserve suspect packages and outbound-request evidence.