QCS Security Advisory Desk
Security Advisory Desk.
Monitor network-edge vulnerabilities, known exploitation, affected products, mitigations, and vendor patch guidance without waiting for a weekly editorial cycle.
QCS pathSource-to-action path
- 01Official sourceMonitor vendors and trusted authorities.
- 02Verify contextCheck products, exposure, and evidence.
- 03Set prioritySeparate urgent action from useful reading.
- 04Act or learnPatch, mitigate, investigate, or prepare.
Live intelligence
See the items that can change today's patch or mitigation plan.
Priority combines source severity, known exploitation, remote attack conditions, recency, and network-edge relevance.
critical Exploitation reported
Cisco / Priority 100
Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability
A serious security flaw was found in Cisco Secure Firewall Management Center software that lets attackers bypass login screens and run commands as the system's most privileged user, called root. This flaw happens because the system starts an incorrect process when it boots up. Attackers can send specially crafted web requests to exploit this issue. If the system's management interface isn't accessible from the public internet, the risk is less. Cisco has released new software versions that fix this issue, and there are no temporary workarounds to protect against this problem.
- Published
- 16 Sep 2026
- CVSS
- Not scored
- Verified
- 17 Sep 2026
critical
Cisco / Priority 100
Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability
A security flaw in Cisco Secure Firewall Management Center (FMC) software could let attackers who control certain approved hosts run any commands they want with full system rights. This problem happens because the software improperly processes certain Java data streams it receives from these hosts. Attackers can send crafted data to a specific port to exploit this. If the FMC interface isn't accessible over the public internet, the risk is lower. Cisco released updates to fix this vulnerability but no simple workaround exists.
- Published
- 16 Sep 2026
- CVSS
- Not scored
- Verified
- 17 Sep 2026
critical
Cisco / Priority 100
Cisco Identity Services Engine Remote Code Execution Vulnerabilities
Cisco Identity Services Engine (ISE), a network security device, has several security weaknesses that let someone with administrator access run malicious software remotely. This can lead to full control of the device and disrupt network access. Cisco has released updates to fix these issues, and no workarounds exist. Users should promptly apply these updates to protect their systems.
- Published
- 16 Sep 2026
- CVSS
- Not scored
- Verified
- 17 Sep 2026
critical
Cisco / Priority 100
Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability
A security weakness in certain Cisco Nexus 9000 Series Switches lets an attacker connect remotely without needing to log in and run harmful commands with full admin rights. This happens because specific network ports (43210 and 43211) are open by default, letting attackers send malicious data. Exploiting this could also crash a key process, forcing the device to restart. Cisco has published software updates and workarounds to protect devices.
- Published
- 2 Sep 2026
- CVSS
- Not scored
- Verified
- 3 Sep 2026
critical Exploitation reported
Cisco / Priority 100
Cisco Crosswork Security Hardening Release: August 2026
Cisco has identified multiple security weaknesses in its Crosswork product line after an internal review. These issues could allow attackers to control software functionality, access protected credentials, execute harmful database commands, or manipulate files improperly. Cisco released software updates to fix these problems, and no workaround solutions are available. Users are advised to upgrade their software promptly to protect their systems.
- Published
- 21 Aug 2026
- CVSS
- Not scored
- Verified
- 31 Aug 2026
critical
Cisco / Priority 100
Cisco Secure Workload Software Security Hardening Release: August 2026
Cisco conducted an internal security review of its Secure Workload software and found several security weaknesses that could allow attackers to take control, bypass protections, or cause harmful crashes. These issues were discovered during internal testing and are not known to be exploited in the wild. Cisco has released software updates to fix these problems, but there are no temporary fixes available. Customers should update their software as soon as possible to protect their systems.
- Published
- 19 Aug 2026
- CVSS
- Not scored
- Verified
- 19 Aug 2026
high
Cisco / Priority 100
Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability
Cisco UCS servers and UCS-based appliances have a security vulnerability that allows attackers to bypass UEFI Secure Boot, a security feature that helps prevent unauthorized software from loading during startup. This flaw arises because certain memory write commands remain accessible in the UEFI Shell when Secure Boot is enabled. Attackers with either valid user credentials or physical access can exploit this to run unauthorized software. Cisco has released software updates to fix this issue, but no temporary workarounds are available; upgrading to the fixed versions is strongly recommended.
- Published
- 13 Oct 2026
- CVSS
- Not scored
- Verified
- 13 Oct 2026
high
Cisco / Priority 100
Cisco Finesse Server-Side Request Forgery Vulnerability
Cisco Finesse, a web-based management tool used in contact center environments, has a vulnerability that lets attackers trick the server into sending unauthorized requests. This vulnerability exists because the system doesn't properly check certain incoming web requests. Attackers can exploit this by sending specially crafted HTTP requests, potentially revealing some sensitive information related to the services running on the device. Cisco is working on software updates to fix this issue, but currently, there are no temporary workarounds available.
- Published
- 7 Oct 2026
- CVSS
- Not scored
- Verified
- 9 Oct 2026
high
Cisco / Priority 100
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service Vulnerability
A security flaw affects Cisco Secure Firewall devices running Adaptive Security Appliance (ASA) or Threat Defense (FTD) software. An attacker who is not logged in can overload the device’s memory by sending many new secure connection requests, causing the device’s VPN service to slow down or stop working. This is a denial of service (DoS) problem. Cisco has released software updates that fix this issue, but no other workarounds exist. To restore service quickly after an attack, manual device reload may be needed.
- Published
- 23 Sep 2026
- CVSS
- Not scored
- Verified
- 1 Oct 2026
high
Cisco / Priority 100
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability
A weakness in Cisco Secure Firewall devices can let an attacker remotely overload the system's processor by sending many fake connection requests. This causes the firewall to slow down or stop working properly, leading to a denial of service. Cisco has released software updates to fix this issue, and there are temporary ways to reduce the risk until updates are applied.
- Published
- 18 Sep 2026
- CVSS
- Not scored
- Verified
- 19 Sep 2026
high
Cisco / Priority 100
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service Vulnerability
A security flaw in Cisco Secure Firewall 3100 and 4200 Series devices allows remote attackers to crash the device by sending special DTLS network messages, causing a denial of service. Cisco has released software updates and workarounds to address this issue.
- Published
- 18 Sep 2026
- CVSS
- Not scored
- Verified
- 19 Sep 2026
high
Cisco / Priority 100
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability
Cisco Secure Firewall devices that use the IKEv2 VPN feature with certificate authentication can be crashed remotely by unauthenticated attackers. This means attackers can cause the firewall to restart or stop responding, denying legitimate users access to network resources. There are no temporary fixes, so users must update to the latest Cisco software version to resolve the problem.
- Published
- 18 Sep 2026
- CVSS
- Not scored
- Verified
- 19 Sep 2026