Cisco Email Gateways Are Being Turned Into Root Shells

Cisco says attackers are exploiting a Secure Email Gateway flaw that can let unauthenticated attackers execute commands as root.

Cisco says attackers are exploiting a Secure Email Gateway flaw that can let unauthenticated attackers execute commands as root.

Cisco has identified several critical vulnerabilities in its IOS XR operating system, prompting an update release to address these issues. The flaws could allow unauthorized access and execution of code on affected devices.

Cisco has identified several significant vulnerabilities in its Secure Workload Software, impacting both SaaS and on-premises users. Immediate updates are required to mitigate these risks.

Cisco has released patches for multiple high-severity vulnerabilities affecting its Catalyst SD-WAN and IOS XE Software, including three flaws with a CVSS score of 9.8.

A critical vulnerability in Cisco's Catalyst SD-WAN Manager is currently being exploited, allowing attackers to gain root privileges. Cisco has issued a patch, but the flaw remains a concern for users.

A critical zero-day vulnerability in Cisco's SD-WAN management software is currently being exploited, with no patch available yet.

Cisco has identified a severe authentication bypass vulnerability in its Catalyst SD-WAN Controller, which is currently being exploited in limited attacks. The flaw, tracked as CVE-2026-20182, allows unauthorized remote access to administrative privileges.

A previously unknown backdoor malware named Firestarter has been detected in a U.S. federal agency, prompting alerts across government and critical infrastructure sectors.

CISA has issued an urgent warning regarding three vulnerabilities in Cisco's Catalyst SD-WAN Manager, urging federal agencies to apply patches within four days.

Cisco has disclosed that over 230 models of its Wi-Fi access points are accumulating 5MB of undeletable data daily, hindering software updates and potentially causing operational issues.