A logic flaw in Cisco ASA/FTD’s SSL VPN handling lets an unauthenticated attacker send a crafted connection request and force the firewall to reload, knocking out VPN and firewall service.
Posts tagged: Cisco
Vulnerabilities in Node.js Affecting Cisco Products: October 2026
On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical …
Vulnerabilities in node.js Affecting Cisco Products: October 2026
On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical …
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
A path traversal bug in Cisco Secure Email Gateway’s attachment-scanning feature lets an attacker email a crafted file to the gateway and gain root on the underlying OS without logging in.
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
A hex-encoding trick in URI handling lets an unauthenticated attacker slip past an access restriction on a Catalyst SD-WAN Manager API endpoint and operate with full admin rights.
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
An unauthenticated attacker can bypass login on Cisco ISE and ISE-PIC’s web management interface and gain access to the device outright, with no patch yet available.
Cisco Secure Email Gateway SQL Injection Vulnerability
An unauthenticated attacker can send a single crafted email to a Cisco Secure Email Gateway and gain root control of the appliance through a SQL injection flaw in its message-parsing logic.
Cisco IOS XR Software Security Hardening Release: September 2026
A single Cisco advisory bundles seven internally-found IOS XR flaws by weakness class, two of them unauthenticated and remotely exploitable for full device compromise, with fixes spread across dozens of per-train SMUs.
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
An unauthenticated attacker can send crafted HTTP requests to Cisco Firewall Management Center’s web interface and gain root on the underlying host, no login needed.
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
An unauthenticated attacker can trigger a heap memory fault over the network on Cisco ASA and FTD firewalls, forcing an unplanned reload and knocking down the firewall’s availability.