Cisco
CVE-2026-20300: Cisco ISE SQL Injection Vulnerability
Even a low-privileged ISE administrator can exploit SQL injection to read or modify database records. Apply the CVE-specific patch and assess data exposure and changes; operating-system command execution is not established by this notice.
CVE-2026-20305: Cisco ISE Command Injection Vulnerability
Administrative diagnostic-tool access can lead to command execution and root privileges in ISE and ISE-PIC. Match each product to its fix and account for the network-admission impact of losing a single ISE node.
CVE-2026-20306: Cisco ISE Command Injection Vulnerability
Administrators can inject commands through the ISE or ISE-PIC REST API and elevate to root. Preserve API and account evidence, then apply the product-specific patch; this is separate from the companion diagnostic-tool flaw.
CVE-2026-20242: Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability
An attacker controlling an allowed External Database Access host can execute root commands on vulnerable FMC software. Check the feature and host list, evaluate temporary disablement, and install the CVE-specific fixed release.
CVE-2026-20307: Cisco ISE Remote Code Execution Vulnerability
A low-privileged ISE administrator can submit a crafted serialized Java object and elevate to root. Apply this CVE's patch and assess earlier access separately; the higher privilege requirement of other ISE flaws does not apply.
CVE-2026-20247: Cisco ISE Unauthenticated SQL Injection Vulnerability
Unauthenticated SQL injection can modify Cisco ISE database contents. Apply the CVE-specific patch and investigate earlier data changes separately; the reviewed impact does not establish database disclosure or operating-system control.
CVE-2026-20309: Cisco Identity Services Engine Cross-Site Scripting Vulnerability
An attacker can lure an ISE management user into clicking a crafted link that runs script in the trusted interface. Apply the CVE-specific patch; user interaction is required for this reflected cross-site scripting path.
CVE-2026-20248: Cisco Secure Firewall ASA and FTD TCP DNS Denial of Service Vulnerability
A crafted DNS-over-TCP reply can reload vulnerable ASA or FTD devices. Assess the answering DNS service and response path, then install fixed software; the attacker must control or alter the device's DNS exchange.
CVE-2026-20322: Cisco Nexus Dashboard hardening: Improper Access Control
Cisco's Nexus Dashboard hardening entry covers improper access control without identifying an endpoint or account boundary. Check the Dashboard release itself and follow its fixed-build or migration guidance, not the version of a managed switch.
CVE-2026-20249: Cisco Secure Firewall ASA and FTD IKEv2 Certificate Authentication Denial of Service Vulnerability
Crafted certificates can crash IKEv2 and reload affected ASA or FTD devices. Verify both IKEv2 enablement and certificate authentication, then install the CVE-specific update; the reported result is disruption, not successful VPN authentication.