QCS Security Advisory Desk
Security Advisory Desk.
Monitor network-edge vulnerabilities, known exploitation, affected products, mitigations, and vendor patch guidance without waiting for a weekly editorial cycle.
QCS pathSource-to-action path
- 01Official sourceMonitor vendors and trusted authorities.
- 02Verify contextCheck products, exposure, and evidence.
- 03Set prioritySeparate urgent action from useful reading.
- 04Act or learnPatch, mitigate, investigate, or prepare.
Live intelligence
See the items that can change today's patch or mitigation plan.
Priority combines source severity, known exploitation, remote attack conditions, recency, and network-edge relevance.
medium
Cisco / Priority 82
Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability
A security flaw in the web management interface of Cisco Industrial Ethernet 1000 Series Switches lets an attacker who has legitimate access inject malicious code. This can trick users into running harmful scripts without their knowledge. Cisco has released updates to fix this issue, but there are no other temporary fixes available.
- Published
- 19 Aug 2026
- CVSS
- Not scored
- Verified
- 19 Aug 2026
medium
Cisco / Priority 82
Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability
Cisco discovered a security flaw in two of its contact center products that could let a person with a valid login trick the system into sending unauthorized network requests. This flaw happens because the system doesn't properly check certain web requests. Cisco has fixed this problem in updated software versions, and no temporary fixes are available.
- Published
- 19 Aug 2026
- CVSS
- Not scored
- Verified
- 19 Aug 2026
medium
Cisco / Priority 82
Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability
Cisco found a weakness in their Industrial Ethernet 1000 Series Switches that lets someone from outside overload the system's management features, like the web interface or remote command access, making them stop working. This won’t affect the actual data passing through the switch, but it does block access to control and monitor the device. Cisco has fixed this by releasing updated software and advises users to upgrade. There’s no temporary fix or workaround available.
- Published
- 19 Aug 2026
- CVSS
- Not scored
- Verified
- 19 Aug 2026
medium
Cisco / Priority 82
Cisco RoomOS Stack Overflow Vulnerability
A flaw in the USB driver of Cisco RoomOS devices lets someone with physical access to the USB port run harmful software with the highest system privileges. They do this by plugging in a malicious USB device, which exploits a coding error to take control. Cisco has fixed this in updated software, but currently, there are no other ways to avoid this risk except updating.
- Published
- 19 Aug 2026
- CVSS
- Not scored
- Verified
- 19 Aug 2026
medium
Cisco / Priority 82
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
A security flaw in the Cisco Catalyst SD-WAN Manager's web interface lets someone with basic login access see sensitive information in plain text, like passwords, by viewing certain logs. This problem happens because the system doesn’t properly restrict access to some types of templates that should be encrypted. Attackers could use these leaked details to take over parts of the network. Cisco has released software updates that fix this issue, but there are no temporary workarounds.
- Published
- 7 Aug 2026
- CVSS
- Not scored
- Verified
- 7 Aug 2026
medium
Cisco / Priority 82
Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability
A flaw in Cisco IOS XE's web management system lets a remote user with low access rights cause the device to restart unexpectedly, resulting in downtime. This happens because the system incorrectly handles errors when verifying certificates. There's no temporary fix, but Cisco has issued software updates to resolve this issue.
- Published
- 5 Aug 2026
- CVSS
- Not scored
- Verified
- 6 Aug 2026
medium
Cisco / Priority 82
Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
A weakness in the web interface of Cisco Integrated Management Controller (IMC) allows an attacker who is logged in remotely to trick another user into clicking a harmful link. This can let the attacker run malicious scripts in the user's web browser or steal sensitive information.
- Published
- 5 Aug 2026
- CVSS
- Not scored
- Verified
- 6 Aug 2026
medium
Cisco / Priority 82
Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities
Cisco Identity Services Engine (ISE) contains two stored cross-site scripting vulnerabilities in its guest-portal management interface. An attacker with valid administrative credentials could place malicious script code into specific interface pages. The code could then run in another user's browser within the affected interface, potentially exposing sensitive browser-based information. Cisco rates the advisory Medium with a CVSS 3.1 base score of 4.8.
- Published
- 20 Jul 2026
- CVSS
- Not scored
- Verified
- 29 Jul 2026
medium
Microsoft / Priority 82
CVE-2026-50376: Windows Remote Desktop Client Information Disclosure Vulnerability
A vulnerability in the Windows Remote Desktop Protocol (RDP) client can expose sensitive information to attackers. This happens when a user connects to a malicious server and has Remote Audio Playback and Recording enabled, potentially letting the attacker see uninitialized memory contents from the user's system.
- Published
- 14 Jul 2026
- CVSS
- 6.5
- Verified
- 5 Sep 2026
medium
Microsoft / Priority 76
CVE-2026-98189: wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()
A security issue was found in the wireless wifi driver for the wilc1000 device in the Azure Linux 3.0 kernel version 6.6.157.1-1. This problem could cause the system to write outside its allowed memory area when processing received wifi data, potentially leading to system instability or other malicious impacts. Microsoft has addressed this issue in a newer kernel version to prevent such problems.
- Published
- 13 Oct 2026
- CVSS
- 7.1
- Verified
- 15 Oct 2026
medium
Cisco / Priority 76
Cisco NX-OS Software Python Sandbox Escape Vulnerability
A security weakness in the Python interpreter used by Cisco NX-OS Software allows a low-privileged, authenticated user to break out of the protected Python environment. This flaw lets the user run commands on the device's underlying operating system with their own permissions, risking unauthorized access. To exploit this, the attacker must already have permission to run Python code on the device. Cisco has released software updates to fix this issue, and no workarounds exist. Users should upgrade their systems to these fixed versions to stay protected.
- Published
- 7 Oct 2026
- CVSS
- Not scored
- Verified
- 9 Oct 2026
medium
Palo Alto Networks / Priority 76
CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)
A medium-severity security flaw affects Palo Alto Networks GlobalProtect apps on multiple operating systems. When the app connects to a Portal or Gateway, a buffer overflow vulnerability can allow an attacker on the same network to disrupt processes or possibly run harmful code with full system rights. This affects many versions on Windows, macOS, Linux, Android, and ChromeOS, but not iOS. Palo Alto Networks has released updated app versions that fix this problem. No user interaction is needed for an attack, and no exploitation has been reported yet.
- Published
- 2 Oct 2026
- CVSS
- Not scored
- Verified
- 5 Oct 2026