[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fah_5U5JsvRI7p0px-cNtcA0KM7bGRCXpWWpli4w_IK4":3},{"article":4,"iocs":49,"watch_terms":67,"solutions":68,"lesson":162},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"46ae5b43-d538-4e18-bab9-2c93f28edad9","Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard","cisco-fixes-dozens-of-flaws-across-fmc-ise-and-nexus-dashboard-c67445","The vulnerabilities may lead to root access, command execution, bypasses, SQL injection, and remote code execution. The post Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard appeared first on SecurityWeek.","Cisco has released patches for numerous critical vulnerabilities affecting its Secure Firewall Management Center (FMC), Identity Services Engine (ISE), and Nexus Dashboard. The updates address issues including SQL injection, command execution, authentication bypass, and remote code execution, with some flaws already publicly disclosed or exploited in the wild as zero-days.","Cisco patches dozens of critical vulnerabilities in FMC, ISE, and Nexus Dashboard.","https:\u002F\u002Fwww.securityweek.com\u002Fcisco-fixes-dozens-of-flaws-across-fmc-ise-and-nexus-dashboard\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F02\u002FCisco-company-logo.jpeg","2026-09-17T12:17:40+00:00","2026-09-17T14:00:22.378564+00:00",9,[17,20,22,24,26,28],{"name":18,"type":19},"Secure Firewall Management Center","product",{"name":21,"type":19},"Identity Services Engine",{"name":23,"type":19},"Nexus Dashboard",{"name":25,"type":19},"Secure Firewall Adaptive Security Appliance",{"name":27,"type":19},"Secure Firewall Threat Defense",{"name":29,"type":30},"Cisco","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,44],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54,56,59,62,65],{"type":51,"value":52,"context":53},"cve","CVE-2026-20282","SQL injection, data tampering, arbitrary command execution vulnerability in ISE",{"type":51,"value":55,"context":53},"CVE-2026-20283",{"type":51,"value":57,"context":58},"CVE-2026-20284","Insufficient validation of user-supplied input, DoS condition in ISE",{"type":51,"value":60,"context":61},"CVE-2026-20332","Vulnerability in FMC, ASA, FTD",{"type":51,"value":63,"context":64},"CVE-2026-20079","Exploited vulnerability in FMC, ASA, FTD",{"type":51,"value":66,"context":64},"CVE-2026-20316",[29,18,21],{"controls":69,"vendors":156},[70,99,128],{"slug":71,"name":72,"problem":73,"products":74},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[75,83,91],{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":100,"name":101,"problem":102,"products":103},"patch-management","Automated patch management","Known holes get closed in days, not months.",[104,112,120],{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":48,"name":129,"problem":130,"products":131},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[132,140,148],{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","agentic-threat-intelligence-platform","Agentic Threat Intelligence Platform","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fagentic-threat-intelligence-platform\u002F","Threat intelligence platform, formerly ThreatConnect TI Ops, that collects, scores and structures intelligence and pushes it into security tools.",{"vendor_slug":141,"vendor_name":142,"vendor_logo":143,"product_slug":144,"product_name":145,"url":146,"description":147},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":149,"vendor_name":150,"vendor_logo":151,"product_slug":152,"product_name":153,"url":154,"description":155},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",[157],{"slug":158,"name":29,"logo_path":159,"roles":160},"cisco","\u002Fvendor-logos\u002Fcisco.png",[161],"affected",{"slug":163,"title":164,"body":165,"framework_refs":166,"framework_notes":177},"cisco-releases-critical-patches-for-fmc-ise-and-nexus-dashboard","Cisco Releases Critical Patches for FMC, ISE, and Nexus Dashboard","Cisco disclosed and patched dozens of serious vulnerabilities across core network security products, including flaws enabling SQL injection, authentication bypass, and remote code execution. The severity is compounded by the fact that some vulnerabilities were already publicly disclosed or actively exploited as zero-days before patches were available. Organizations relying on these products for firewall management, identity services, and network orchestration face significant risk if updates are not applied promptly. This highlights the persistent danger of unpatched network infrastructure, particularly in devices that are themselves responsible for enforcing security controls.",[167,168,169,170,171,172,173,174,175,176],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 4: Secure Configuration of Enterprise Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST CM-6: Configuration Settings","NIST AC-17: Remote Access","NIST RA-5: Vulnerability Monitoring and Scanning","ISO\u002FIEC 27001:2022 Annex A 8.8: Management of Technical Vulnerabilities","ITIL 4: Change Enablement \u002F Vulnerability Management Practice",{"NIST AC-17: Remote Access":178,"NIST SI-2: Flaw Remediation":179,"NIST CM-6: Configuration Settings":180,"NIST RA-5: Vulnerability Monitoring and Scanning":181,"CIS Control 12: Network Infrastructure Management":182,"CIS Control 7: Continuous Vulnerability Management":183,"CIS Control 4: Secure Configuration of Enterprise Assets":184,"NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management":185,"ITIL 4: Change Enablement \u002F Vulnerability Management Practice":186,"ISO\u002FIEC 27001:2022 Annex A 8.8: Management of Technical Vulnerabilities":187},"Restricting remote access to Cisco management interfaces reduces who can exploit authentication bypass flaws.","Flaw remediation of the SQL injection, authentication bypass and code execution flaws closes these attack routes.","Hardening configuration settings limits what attackers can reach on Cisco management platforms while patches are deployed.","Scanning identifies which Cisco devices run vulnerable versions and need urgent updates.","Managing network security infrastructure includes restricting management interfaces and applying Cisco updates quickly.","Prompt patching of Cisco FMC, ISE and Nexus Dashboard is essential, as some flaws were exploited as zero-days.","Secure configuration, such as disabling unused services on Cisco devices, reduces exposure to the disclosed flaws.","Patch management planning should treat core network security products as high priority given their critical role.","Change enablement with emergency procedures allows rapid patching of critical network security products.","Managing technical vulnerabilities ensures Cisco flaws are assessed and patched, especially those already exploited."]