Back to vendor advisories
Cisco Security Advisoriescisco-sa-notice-I8z3n6lK

Cisco Advance Notification for Publication of November 4, 2026, Security Advisories

3 CVEs Published Nov 4, 2026 at 4:01 PM UTC

3 advisories 3 CVEs 1 product group

Summary

On November 4, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories:

Products covered

A separate affected-products list was not included in the collected bulletin.

3 advisories

Published advisories

To remediate the vulnerabilities that were disclosed on November 4, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.

Important: The Cisco PSIRT does not plan to publish any more security hardening advisories to disclose security vulnerability information for the remainder of calendar year 2026. The next planned publication of advisories for security-hardened releases will be January 20, 2027.

For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer-Focused Response to AI-Accelerated Vulnerability Discovery.

  1. Cisco UCS Central Software Remote Code Execution Vulnerability

    HighCVSS 7.6
  2. Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

    MediumCVSS 6.1
  3. Cisco Identity Services Engine Authorization Bypass Vulnerability

    MediumCVSS 5.3

Remediation

To remediate the vulnerabilities that were disclosed on November 4, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.

CVEs in this advisory 3

Updates

  1. Published by Cisco

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.