Every ZeroDayFeed story on Cisco — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
Cisco says attackers are exploiting CVE-2026-76504 (CVSS 9.8), a URI-encoding authentication bypass in Catalyst SD-WAN Manager that grants unauthenticated admin-level API access. There is no workaround. CISA's October 3 federal patch deadline has passed.
Read the story →Cisco has fixed five critical NX-OS flaws in Nexus 3000 and 9000 switches that can be reached when NX-API, NGOAM or MPLS OAM is enabled, plus four License On-Prem bugs rated as high as CVSS 10.0.
Cisco says attackers are exploiting CVE-2026-76519 (CVSS 9.8), which lets an unauthenticated attacker gain root on a Secure Email Gateway with File Reputation enabled by sending a crafted attachment; there is no workaround, and CISA's October 17 KEV deadline has passed.
Free daily briefing — breaches, actively exploited bugs, ransomware, and the patches to prioritize.
You're in. ✓
Check your inbox to confirm your subscription.No spam. Unsubscribe any time. Read our privacy policy.
