Cisco
CVE-2026-20344: Cisco Secure FMC Software SQL Injection Vulnerability
FMC Security Approver, Access Admin or Network Admin accounts can obtain database information and an Administrator's session credentials. Apply the CVE-specific fix and review these starting roles, not only full-administrator login activity.
CVE-2026-20350: Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability
A ThousandEyes Virtual Appliance administrator can save crafted web-interface configuration that executes commands as root. Check and update the appliance's own software, preserving sign-in and configuration evidence rather than relying on a separate agent version.
CVE-2026-20352: Cisco Identity Services Engine RADIUS Denial of Service Vulnerability
Crafted RADIUS requests can make an ISE node unavailable and block new endpoint authentication. Check each Policy Service Node and Session Services state; disabling that service on a RADIUS node also disables legitimate RADIUS access.
CVE-2026-20326: Cisco Nexus Dashboard hardening: Missing Authentication for Critical Function
Cisco identifies a Nexus Dashboard function missing authentication but does not name the operation. Verify the Dashboard fixed release or migration path; updating managed switches does not establish that the Dashboard itself is patched.
CVE-2026-20360: Cisco Nexus Dashboard hardening: Information Exposure & Insecure Handling
Nexus Dashboard hardening covers sensitive-information exposure and insecure handling without naming a particular data store. Apply the Dashboard-specific update guidance; the category does not establish theft of a particular credential or dataset.
CVE-2026-20329: Cisco ASA, FTD, and FMC hardening: Exceptional Conditions Handling Vulnerabilities
Cisco's ASA, FTD and FMC hardening entry addresses unsafe handling of unexpected program states. Follow product-and-release guidance, including affected ASA hotfix exceptions; the brief category does not establish a universal protocol-specific crash sequence.
CVE-2026-20361: Cisco Nexus Dashboard hardening: SQL Injection
Unsafe SQL input handling is grouped with disclosure and unsafe defaults in this Nexus Dashboard hardening entry. Follow the Dashboard update guidance; no particular query endpoint or operating-system control is established by the brief record.
CVE-2026-20330: Cisco ASA, FTD, and FMC hardening: Improper Neutralization Vulnerabilities
ASA, FTD and FMC hardening covers structured data handled unsafely between components, without a disclosed parser or injection path. Match the release table and ASA hotfix exceptions rather than relying on a higher build number.
CVE-2026-76409: Cisco Nexus Dashboard hardening: Improper Limitation of a Pathname
Nexus Dashboard path handling may let a pathname escape its intended directory, but the affected file operation is undisclosed. Follow the fixed-release or migration guidance rather than assuming a restriction on one upload page resolves it.
CVE-2026-20331: Cisco ASA, FTD, and FMC hardening: Protection Mechanism Failure Vulnerabilities
Cisco's ASA, FTD and FMC hardening update groups protection-mechanism failures without detailing an individual exploit sequence. Fixed-release selection must account for affected ASA hotfixes, including builds with numerically higher suffixes.