Sicherheitslücken (CVE) darkreading

Cisco Zero-Day Highlights API Endpoint Authentication Issues

The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.

Sicherheitslücken (CVE) The CyberWire

Cisco patches a maximum-severity zero-day.

Gyazo data breach affects more than 23 million user records. China's FamousSparrow deploys a new backdoor.

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-20224 | Cisco ASA/Firepower Threat Defense IKEv2 memory leak (cisco-sa-asa-ftd-ios-dos-DOESHWHy / Nessus ID 331355)

A vulnerability has been found in Cisco ASA and Firepower Threat Defense and classified as problematic.

Sicherheitslücken (CVE) CSO Online

Cisco patches max-severity ISE flaw, the second critical zero-day this week

Cisco released patches for an actively exploited authentication bypass vulnerability in its Cisco Identity Services Engine (ISE) platform, which is…

Sicherheitslücken (CVE) CyberScoop

Cisco alerts customers to second actively exploited zero-day in as many days

Cisco disclosed its second actively exploited zero-day vulnerability in as many days, presenting its customers with back-to-back threats to address…

Sicherheitslücken (CVE) Latest from TechRadar

Cisco hit by max severity zero-day exploit targeting Identity Services Engine, so it's time to patch up

Cisco fixed critical ISE flaw (CVE‑2026‑76460) allowing unauthenticated API authentication bypassActively exploited; no workarounds exist—patching is…

Sicherheitslücken (CVE) theregister.com

Cisco drops another exploited zero-day, this time a perfect 10

Cisco admins who have spent their week patching email gateways now face a perfect-10 Identity Services Engine flaw under active attack.

Sicherheitslücken (CVE) Cyber Security News

Cisco Warns of Critical ISE 0-Day Vulnerability Exploited in Attacks

Cisco has issued an urgent security advisory for a critical zero-day vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive…

Sicherheitslücken (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…

Cisco warnt vor Zero-Day in ISE: Authentifizierung lässt sich umgehen (CVE-2026-76460)

LONDON (IT BOLTWISE) – Cisco meldet einen Zero-Day mit maximaler Kritikalität in Identity Services Engine (ISE), der bereits aktiv ausgenutzt wird.

Sicherheitslücken (CVE) BleepingComputer

Cisco warns of max severity ISE zero-day exploited in attacks

Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in…

Sicherheitslücken (CVE) The Hacker News

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

Cisco has warned of a fresh maximum-severity security flaw impacting Identity Services Engine (ISE) that has come under active exploitation.

Sicherheitslücken (CVE) SecurityWeek

Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day

Remote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests.

Sicherheitslücken (CVE) Cybersecurity Dive

Hackers exploit zero-day flaw in Cisco email gateway

Researchers warn the vulnerability could be used by state-linked actors for espionage.

Sicherheitslücken (CVE) IT Security News

Cisco Secure Email Gateway Zero-Day Exploited for Root Command Execution

Cisco Secure Email Gateway flaw CVE-2026-76461 is under active exploitation, with no workaround and urgent patching required for affected AsyncOS…

Sicherheitslücken (CVE) IT Security News

Cisco zero-day goes straight to root, BambooToken branches into Linux, CenterPoint breach claim hits 7M+

Cisco zero-day goes straight to root BambooToken branches into Linux CenterPoint breach claim hits 7M+ Get the show notes here…

Sicherheitslücken (CVE) Network World

Critical Cisco Secure Email Gateway zero-day gives attackers root access

Cisco released emergency patches for a critical vulnerability in its Secure Email Gateway appliance that could allow attackers to take over the…

Sicherheitslücken (CVE) CyberScoop

Cisco warns customers of actively exploited zero-day in email gateways

Attackers of unknown origins and motivations are exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway, authorities and…

Sicherheitslücken (CVE) Cyber Security News

CISA Warns of Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks

CISA has added a critical Cisco Secure Email Gateway vulnerability to its Known Exploited Vulnerabilities catalog, warning that attackers are…

Sicherheitslücken (CVE) IT Security News

Cisco Email Gateway Zero-Day Actively Exploited

Cisco has disclosed that attackers are actively exploiting a zero-day SQL injection vulnerability in its Secure Email Gateway appliances.

Sicherheitslücken (CVE) Security Affairs

Cisco Warns of Ongoing Exploitation of Critical Email Gateway Zero-Day

Cisco warns of a critical zero-day in Secure Email Gateway, exploited in the wild to gain root access through malicious emails.

Sicherheitslücken (CVE) BSI RSS-Newsfeed BSI-IT-Sic…

Version 1.0: Cisco Secure Email Gateway - Aktive Ausnutzung einer Zero-Day-Schwachstelle

Sicherheitslücken (CVE) Help Net Security

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)

Attackers have leveraged a zero-day SQL injection vulnerability (CVE-2026-76461) to compromise Cisco Secure Email Gateway appliances, Cisco confirmed…

Sicherheitslücken (CVE) IT Security News

Cisco Secure Email Gateway 0-day Vulnerability Actively Exploited in the Wild to Run Malicious Code

Cisco has issued an urgent warning regarding an actively exploited zero-day vulnerability in its Secure Email Gateway appliances that allows remote…

Sicherheitslücken (CVE) BleepingComputer

Cisco patches Secure Email Gateway zero-day exploited in attacks

Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks. [...]

Sicherheitslücken (CVE) SecurityWeek

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation

An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.

IT Security Nachrichten «Hacker News» 🗞️🦾 IT BOLTWI…

CISA setzt KEV-Frist: Cisco, Citrix und Fortinet müssen bis 12. Sept. patchen

LONDON (IT BOLTWISE) – Die US-Cybersicherheitsbehörde CISA hat drei als aktiv ausnutzbar eingestufte Schwachstellen in den Known Exploited…

IT Security Nachrichten «Hacker News» 🗞️🦾 IT BOLTWI…

CISA nimmt Cisco-, Citrix- und Fortinet-Lücken in KEV auf – Patch bis 12.09.2026

LONDON (IT BOLTWISE) – Die US-Cybersicherheitsbehörde CISA hat drei als ausnutzbar eingestufte Sicherheitslücken in den KEV-Katalog aufgenommen.

IT Security Nachrichten itsecuritynews.info

Weekly Cyber Security Newsletter– Claude Hacked 3 Companies, Cisco 0-Day, Word Copilot and VMware Flaw +20 Stories

AI systems moved from experimental risk to confirmed attacker, a Cisco firewall zero-day was actively exploited in the wild, and a critical VMware… →

IT Security Nachrichten it-boltwise.de

CVE-2026-20316 in Cisco Secure FMC: Zero-Day per KEV bestätigt und Hotfix nötig

LONDON (IT BOLTWISE) – CISA hat eine neue Schwachstelle in Cisco Secure Firewall Management Center (FMC) in den KEV-Katalog aufgenommen, weil sie…

IT Security Nachrichten thecyberexpress.com

CVE-2026-20316 Zero-Day Actively Exploited, Cisco Releases Fix

Cisco has released security updates for an actively exploited zero-day vulnerability, CVE-2026-20316, affecting Cisco Secure FMC (Secure Firewall…

IT Security Nachrichten thehackernews.com

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall…

IT Security Nachrichten gbhackers.com

CISA Adds Cisco IOS CSRF Flaw Enabling Arbitrary Command Execution to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2008-4128, a cross-site request forgery (CSRF) vulnerability affecting…

IT Security Nachrichten google.com

Cisco Catalyst SD-WAN: Zero-Day-Exploit-Kette mit Root-Rechten - Börse Express

Merit America beginnt am 13. August 2026 mit einem neuen Cybersicherheitskurs – ein 20-wöchiges Programm, das das Google Cybersecurity Certificate…

IT Security Nachrichten thecyberexpress.com

CVE-2026-20245 Zero-Day Exploited in Cisco Catalyst SD-WAN Manager to Gain Root Access

A newly disclosed zero-day vulnerability, CVE-2026-20245, has been exploited by a threat actor targeting Cisco Catalyst SD-WAN Manager.

IT Security Nachrichten gbhackers.com

CISA Adds Actively Exploited Cisco Unified CM Flaws to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting Cisco Unified Communications Manager…

IT Security Nachrichten itsecuritynews.info

Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited Months Before Disclosure

Hackers exploited Cisco Catalyst SD-WAN flaw CVE-2026-20245 as a zero-day months before disclosure, enabling privileged command execution.