[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fW8PAPUAJDZgZetDekAMjUDVrIVZ3-0Eaq4lmTjI7EgU":3},{"article":4,"iocs":39,"watch_terms":90,"solutions":91,"lesson":186},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"e60724e7-4068-4bd8-8205-be9c95ad88a7","Cisco Patches a Dozen Critical Vulnerabilities","cisco-patches-a-dozen-critical-vulnerabilities-cf3dc8","The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution. The post Cisco Patches a Dozen Critical Vulnerabilities appeared first on SecurityWeek.","Cisco has announced patches for 35 vulnerabilities across its product lines, with more than a dozen classified as critical severity. These vulnerabilities, affecting products like Meraki, License On-Prem, NX-OS, and APIC, could lead to unauthorized access, information leaks, privilege escalation, denial-of-service, and remote code execution. Cisco has stated they are not aware of any of these vulnerabilities being actively exploited in the wild.","Cisco releases patches for 35 vulnerabilities, including over a dozen critical bugs.","https:\u002F\u002Fwww.securityweek.com\u002Fcisco-patches-a-dozen-critical-vulnerabilities\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F02\u002FCisco-company-logo.jpeg","2026-10-08T15:28:06+00:00","2026-10-08T16:00:12.652795+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"Cisco","vendor",{"name":21,"type":22},"Meraki","product",{"name":24,"type":22},"License On-Prem",{"name":26,"type":22},"NX-OS",{"name":28,"type":22},"Nexus 3000",{"name":30,"type":22},"Nexus 9000","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},[40,44,47,50,53,56,59,62,65,68,71,74,76,78,81,84,87],{"type":41,"value":42,"context":43},"cve","CVE-2026-76464","Memory issues including buffer overflows and out-of-bounds writes in Meraki",{"type":41,"value":45,"context":46},"CVE-2026-20328","Unauthorized access vulnerability in License On-Prem",{"type":41,"value":48,"context":49},"CVE-2026-76454","Denial of Service vulnerability in License On-Prem",{"type":41,"value":51,"context":52},"CVE-2026-76482","Missing authentication vulnerability in License On-Prem",{"type":41,"value":54,"context":55},"CVE-2026-76480","Improper verification of cryptographic signature vulnerability in License On-Prem",{"type":41,"value":57,"context":58},"CVE-2026-76483","Insufficiently protected credentials vulnerability in License On-Prem",{"type":41,"value":60,"context":61},"CVE-2026-76455","Improper access control vulnerability in NX-OS",{"type":41,"value":63,"context":64},"CVE-2026-76459","Out-of-bounds write vulnerability in NX-OS",{"type":41,"value":66,"context":67},"CVE-2026-76471","Remote code execution with root privileges vulnerability in NX-OS",{"type":41,"value":69,"context":70},"CVE-2026-76465","Denial of Service vulnerability in NX-OS",{"type":41,"value":72,"context":73},"CVE-2026-76485","Vulnerability affecting Nexus 3000\u002F9000 series switches with NGOAM enabled",{"type":41,"value":75,"context":73},"CVE-2026-76486",{"type":41,"value":77,"context":73},"CVE-2026-76501",{"type":41,"value":79,"context":80},"CVE-2026-76498","Improper access control vulnerability in APIC",{"type":41,"value":82,"context":83},"CVE-2026-76499","OS injection vulnerability in APIC",{"type":41,"value":85,"context":86},"CVE-2026-76500","Memory flaw vulnerability in APIC",{"type":41,"value":88,"context":89},"CVE-2026-20362","Server-Side Request Forgery (SSRF) flaw in Finesse",[18,21,24],{"controls":92,"vendors":180},[93,122,151],{"slug":94,"name":95,"problem":96,"products":97},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[98,106,114],{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":123,"name":124,"problem":125,"products":126},"patch-management","Automated patch management","Known holes get closed in days, not months.",[127,135,143],{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":136,"vendor_name":137,"vendor_logo":138,"product_slug":139,"product_name":140,"url":141,"description":142},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":144,"vendor_name":145,"vendor_logo":146,"product_slug":147,"product_name":148,"url":149,"description":150},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":152,"name":153,"problem":154,"products":155},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[156,164,172],{"vendor_slug":157,"vendor_name":158,"vendor_logo":159,"product_slug":160,"product_name":161,"url":162,"description":163},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":165,"vendor_name":166,"vendor_logo":167,"product_slug":168,"product_name":169,"url":170,"description":171},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":173,"vendor_name":174,"vendor_logo":175,"product_slug":176,"product_name":177,"url":178,"description":179},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",[181],{"slug":182,"name":18,"logo_path":183,"roles":184},"cisco","\u002Fvendor-logos\u002Fcisco.png",[185],"affected",{"slug":187,"title":188,"body":189,"framework_refs":190,"framework_notes":200},"cisco-patches-12-critical-flaws-across-major-product-lines","Cisco Patches 12+ Critical Flaws Across Major Product Lines","Cisco disclosed 35 vulnerabilities — over a dozen critical — spanning Meraki, NX-OS, APIC, and License On-Prem products, exposing organizations to remote code execution, privilege escalation, unauthorized access, and denial-of-service attacks. The breadth of affected products highlights the risk that widely deployed network infrastructure carries when vulnerabilities accumulate across product lines without timely remediation. While Cisco reports no active exploitation, critical-severity flaws in core networking equipment are high-value targets and often weaponized quickly after public disclosure. Organizations that lack a structured patch management process or accurate asset inventory are particularly at risk of missing critical updates for these devices.",[191,192,193,194,195,196,197,198,199],"CIS Control 7 – Continuous Vulnerability Management","CIS Control 12 – Network Infrastructure Management","CIS Control 4 – Secure Configuration of Enterprise Assets","NIST SP 800-40 Rev. 4 – Guide to Enterprise Patch Management","NIST SI-2 – Flaw Remediation","NIST CM-8 – Information System Component Inventory","NIST RA-5 – Vulnerability Scanning","ITIL Change Management – Emergency Change Procedures","ISO\u002FIEC 27001 – A.12.6.1 Management of Technical Vulnerabilities",{"NIST SI-2 – Flaw Remediation":201,"NIST RA-5 – Vulnerability Scanning":202,"CIS Control 12 – Network Infrastructure Management":203,"NIST CM-8 – Information System Component Inventory":204,"CIS Control 7 – Continuous Vulnerability Management":205,"ITIL Change Management – Emergency Change Procedures":206,"CIS Control 4 – Secure Configuration of Enterprise Assets":207,"NIST SP 800-40 Rev. 4 – Guide to Enterprise Patch Management":208,"ISO\u002FIEC 27001 – A.12.6.1 Management of Technical Vulnerabilities":209},"Flaw remediation means applying Cisco's fixes for remote code execution and privilege escalation flaws within defined timeframes.","Vulnerability scanning confirms which Cisco devices remain exposed to the disclosed flaws and verifies that patches were applied.","Network infrastructure management keeps Meraki, NX-OS and APIC devices on supported, current firmware, the core defence against flaws like these.","An accurate component inventory shows which Cisco Meraki, NX-OS, APIC and License On-Prem systems you run, so no affected device is missed.","Continuous vulnerability management ensures the dozen critical Cisco flaws are tracked and remediated before attackers develop exploits.","Emergency change procedures let critical network device patches go in quickly while still managing the risk of outage.","Secure configuration, such as disabling unused services and restricting management access, reduces exposure to Cisco flaws until patches are applied.","Patch management planning helps prioritise critical Cisco fixes across many product lines so the backlog does not accumulate.","Managing technical vulnerabilities requires timely assessment and patching of critical Cisco flaws affecting core network infrastructure."]