Cisco
CVE-2026-76409: Cisco Nexus Dashboard hardening: Improper Limitation of a Pathname
Nexus Dashboard path handling may let a pathname escape its intended directory, but the affected file operation is undisclosed. Follow the fixed-release or migration guidance rather than assuming a restriction on one upload page resolves it.
CVE-2026-20331: Cisco ASA, FTD, and FMC hardening: Protection Mechanism Failure Vulnerabilities
Cisco's ASA, FTD and FMC hardening update groups protection-mechanism failures without detailing an individual exploit sequence. Fixed-release selection must account for affected ASA hotfixes, including builds with numerically higher suffixes.
CVE-2026-76412: Cisco Secure FMC Software Privilege Escalation to root Vulnerability
An authenticated FMC user can misuse the remote diagnostics debugger in a multistage escalation to root. Apply the specific fix and review diagnostics and privilege changes; patching does not remove privileges already granted.
CVE-2026-20287: Cisco ISE hardening: Improper Privilege Management Vulnerabilities
Cisco's ISE privilege-management hardening entry does not identify a specific affected operation. Check migration guidance carefully: legacy patches limited to Critical fixes do not establish coverage for this category merely because the umbrella advisory is Critical.
CVE-2026-20290: Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability
Crafted SSL setup requests can restart the Snort 2 detection engine. Check standalone Snort and the engine actually running on FTD, then follow their respective update paths; a full firewall reload is not established here.
CVE-2026-20295: Cisco Secure FMC Software and Secure FTD Software sftunnel Memory Exhaustion DoS Vulnerability
Crafted frames during sftunnel TLS setup can exhaust memory on vulnerable FMC and FTD devices. Inventory both ends of the management connection, preserve resource-pressure evidence, and install each platform's CVE-specific fixed release.
CVE-2026-20300: Cisco ISE SQL Injection Vulnerability
Even a low-privileged ISE administrator can exploit SQL injection to read or modify database records. Apply the CVE-specific patch and assess data exposure and changes; operating-system command execution is not established by this notice.
CVE-2026-20305: Cisco ISE Command Injection Vulnerability
Administrative diagnostic-tool access can lead to command execution and root privileges in ISE and ISE-PIC. Match each product to its fix and account for the network-admission impact of losing a single ISE node.
CVE-2026-20306: Cisco ISE Command Injection Vulnerability
Administrators can inject commands through the ISE or ISE-PIC REST API and elevate to root. Preserve API and account evidence, then apply the product-specific patch; this is separate from the companion diagnostic-tool flaw.
CVE-2026-20242: Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability
An attacker controlling an allowed External Database Access host can execute root commands on vulnerable FMC software. Check the feature and host list, evaluate temporary disablement, and install the CVE-specific fixed release.