Cisco
CVE-2008-4128: Cisco IOS Cross-Site Request Forgery Vulnerability
Legacy Cisco IOS 12.4 request forgery can misuse a signed-in administrator's browser to issue commands. The linked retirement notice does not identify a fixed image; confirm a hardware-compatible supported migration and preserve management evidence.
CVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
Unified CM and Unified CM SME systems with WebDialer enabled face unauthenticated file writes that may later enable root escalation. Check actual service state, then select Cisco's update or assess temporary disablement's workflow impact.
CVE-2026-20262: Cisco Catalyst SD-WAN Manager arbitrary file write
Authenticated attackers can create or overwrite files through Catalyst SD-WAN Manager path traversal. Preserve admin-tech and upload logs, install the branch-specific fix, and involve Cisco TAC when suspicious uploads or other indicators appear.
CVE-2026-20349: Cisco ASA and FTD remote-access VPN denial of service
Affected Cisco ASA and FTD remote-access listeners can let unauthenticated attackers trigger a reload. Check SSL VPN, IKEv2 and ZTNA configuration, then install the branch-specific hardening release to address the service-disruption risk.
CVE-2026-20316: Cisco FMC static credential is exploited and ransomware-linked
A hard-coded FMC password can expose sensitive data through a low-privileged account. Restrict management access, install Cisco's current hardening release, and review indicators; the initial access is not itself root access.
CVE-2026-76460: Cisco ISE authentication bypass is actively exploited
Cisco reports active exploitation of an ISE and ISE-PIC authentication bypass that can lead to root access. Check every node, preserve off-device evidence, and separate patch installation from investigation and trusted recovery.
CVE-2026-76461: Cisco Secure Email Gateway crafted-email root command execution
Cisco Secure Email Gateway SQL injection can give unauthenticated attackers root command execution. Preserve mail and network evidence, match the AsyncOS upgrade path, and use Cisco TAC when compromise is suspected.
CVE-2026-20079: Cisco FMC unauthenticated authentication bypass to root
Cisco FMC authentication bypass can give unauthenticated attackers root access. Restrict management exposure, preserve evidence, and follow release-specific hardening and compromise assessment; patching alone does not resolve an existing intrusion.
Cisco Catalyst C9550 vs C9350: Choose the Right Campus Role
Map C9350 access requirements and an incumbent C9500 design to a C9550 model, then verify software, optics, licensing, failure tests, and rollback before migration.
Cisco Live 2026 Lab Build: A Small-Scale Reference Architecture
Plan an isolated lab for segmentation, branch routing, private-app access, telemetry, and governed changes, with failure and rollback exercises; this is a proposed build, not reported test results.