Product Security Incident Response Team

Cisco is actively addressing a critical zero-day SQL injection vulnerability (CVE-2026-76461) in its Secure Email Gateway appliances that allows unauthenticated…

Cisco disclosed two high-severity DoS vulnerabilities (CVE-2026-20337, CVE-2026-20338) in ClamAV's ZIP parser within Secure Endpoint Connector, triggered by malicious ZIP…

Cisco has released patches for a critical vulnerability (CVE-2026-20230) in its Unified Communications Manager (Unified CM) that allows unauthenticated attackers…

Cisco patched CVE-2026-20223, a maximum-severity vulnerability in its Secure Workload platform that allows unauthenticated attackers to gain Site Admin privileges…

Cisco has patched a critical Webex vulnerability (CVE-2026-20184) in its SSO integration, but customers must manually upload a new SAML…

Cisco has patched a critical authentication bypass flaw (CVE-2026-20093) in its Integrated Management Controller, allowing unauthenticated attackers to gain administrative…

A critical code injection vulnerability (CVE-2026-20045) in Cisco's unified communications products is being actively exploited, allowing attackers to execute malicious…

Cybersecurity experts warn of a serious threat exploiting a recently patched remote code execution vulnerability (CVE-2025-20352) in Cisco networking hardware,…

Cisco has issued an urgent alert for a critical vulnerability (CVE-2025-20265) in its Secure Firewall Management Center Software, allowing attackers…

CISA issued an urgent warning about three vulnerabilities, including two critical flaws in Cisco’s ISE software, which could allow attackers…