Search threats, CVEs… ⌘K
Back to vendor advisories
Cisco Security Advisoriescisco-sa-notice-jfxK98ZP

Cisco Advance Notification for Publication of September 16, 2026, Security Advisories

79 CVEs Published Sep 16, 2026 at 4:07 PM UTC

32 advisories 79 CVEs 3 product groups

Get alerts for Identity Services Engine

Summary

On September 16, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the advisories that are listed in the following tables.

To remediate these vulnerabilities, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.

For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer-Focused Response to AI-Accelerated Vulnerability Discovery.

Products covered

  • Cisco Identity Services Engine

  • Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software

  • Cisco Nexus Dashboard, BroadWorks, and ThousandEyes Virtual Appliance

15 advisories

Cisco Identity Services Engine

  1. Cisco Identity Services Engine Hardening Release: September 2026

    CriticalCVSS 10.0
    CVE-2026-20130CVE-2026-20192CVE-2026-20194CVE-2026-20234CVE-2026-20237CVE-2026-20287

  2. Cisco Identity Services Engine Vulnerabilities

    CriticalCVSS 10.0
    CVE-2026-76423CVE-2026-76425CVE-2026-76426CVE-2026-76427CVE-2026-76428CVE-2026-76424

  3. Cisco Identity Services Engine Authentication Bypass Vulnerability

    CriticalCVSS 10.0
    CVE-2026-76460

  4. Cisco Identity Services Engine Remote Code Execution Vulnerabilities

    CriticalCVSS 9.9
    CVE-2026-20211CVE-2026-20176CVE-2026-20307

  5. Cisco Identity Services Engine Authenticated Remote Code Execution and API Vulnerabilities

    CriticalCVSS 9.1
    CVE-2026-20282CVE-2026-20283CVE-2026-20284

  6. Cisco Identity Services Engine Command Injection Vulnerabilities

    CriticalCVSS 9.1
    CVE-2026-20306CVE-2026-20305

  7. Cisco Identity Services Engine RADIUS Denial of Service Vulnerability

    HighCVSS 8.6
    CVE-2026-20352

  8. Cisco Identity Services Engine SQL Injection Vulnerabilities

    HighCVSS 7.5
    CVE-2026-20247CVE-2026-20300

  9. Cisco Identity Services Engine Cross-Site Scripting Vulnerability

    MediumCVSS 6.1
    CVE-2026-20309

  10. Cisco Identity Services Engine Authentication Bypass Vulnerabilities

    MediumCVSS 5.3
    CVE-2026-76439CVE-2026-76446CVE-2026-76447CVE-2026-76444

  11. Cisco Identity Services Engine Multiple Path Traversal Vulnerabilities

    MediumCVSS 5.3
    CVE-2026-76434CVE-2026-76433CVE-2026-76431CVE-2026-76432

  12. Cisco Identity Services Engine Information Disclosure Vulnerability

    MediumCVSS 4.9
    CVE-2026-20235

  13. Cisco Identity Services Engine SQL and HQL Injection Vulnerabilities

    MediumCVSS 4.9
    CVE-2026-76449CVE-2026-76451CVE-2026-76450CVE-2026-76448

  14. Cisco Identity Services Engine Authorization Bypass Vulnerabilities

    MediumCVSS 4.3
    CVE-2026-20286CVE-2026-20285

  15. Cisco Identity Services Engine 802.1X Session Hijack and Information Disclosure Vulnerabilities

    MediumCVSS 3.8
    CVE-2026-20071CVE-2026-20072
14 advisories

Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software

Note: For more information about Cisco Secure FMC Software, including recently disclosed vulnerabilities and their available fixes, see the Cisco Talos blog post.

  1. Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026

    CriticalCVSS 9.9
    CVE-2026-20334CVE-2026-20330CVE-2026-20335CVE-2026-20331CVE-2026-20332CVE-2026-20329CVE-2026-20333CVE-2026-20336

  2. Cisco Secure Firewall Management Center Software sftunnel Root Arbitrary Code Execution Vulnerability

    CriticalCVSS 9.9
    CVE-2026-20324

  3. Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

    CriticalCVSS 9.8
    CVE-2026-20242

  4. Cisco Secure Firewall Management Center Software Vulnerabilities

    CriticalCVSS 9.1
    CVE-2026-20344CVE-2026-20341CVE-2026-20340CVE-2026-20342CVE-2026-20343

  5. Cisco Secure Firewall Management Center Software Vulnerabilities

    CriticalCVSS 9.0
    CVE-2026-76412CVE-2026-76413CVE-2026-76420

  6. Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Vulnerabilities

    HighCVSS 8.6
    CVE-2026-20295CVE-2026-20323

  7. Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability

    HighCVSS 8.6
    CVE-2026-20249

  8. Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service Vulnerability

    HighCVSS 8.6
    CVE-2026-20250

  9. Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability

    HighCVSS 8.6
    CVE-2026-20154

  10. Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability

    HighCVSS 8.6
    CVE-2026-20135

  11. Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability

    HighCVSS 7.4
    CVE-2026-20222

  12. Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability

    MediumCVSS 6.8
    CVE-2026-20248

  13. Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability

    MediumCVSS 5.8
    CVE-2026-20290

  14. Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Object Group Access Control List Bypass Vulnerabilities

    MediumCVSS 5.8
    CVE-2026-20120CVE-2026-20121
3 advisories

Cisco Nexus Dashboard, BroadWorks, and ThousandEyes Virtual Appliance

  1. Cisco Nexus Dashboard Software Security Hardening Release: September 2026

    CriticalCVSS 9.9
    CVE-2026-20360CVE-2026-20361CVE-2026-20322CVE-2026-20325CVE-2026-20326CVE-2026-76409

  2. Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability

    MediumCVSS 6.5
    CVE-2026-76438

  3. Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability

    MediumCVSS 4.7
    CVE-2026-20350

Remediation

To remediate these vulnerabilities, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.

CVEs in this advisory 79

CVE-2026-20130CVE-2026-20192CVE-2026-20194CVE-2026-20234CVE-2026-20237CVE-2026-20287CVE-2026-76423CVE-2026-76425CVE-2026-76426CVE-2026-76427CVE-2026-76428CVE-2026-76424CVE-2026-76460CVE-2026-20211CVE-2026-20176CVE-2026-20307CVE-2026-20282CVE-2026-20283CVE-2026-20284CVE-2026-20306CVE-2026-20305CVE-2026-20352CVE-2026-20247CVE-2026-20300CVE-2026-20309CVE-2026-76439CVE-2026-76446CVE-2026-76447CVE-2026-76444CVE-2026-76434CVE-2026-76433CVE-2026-76431CVE-2026-76432CVE-2026-20235CVE-2026-76449CVE-2026-76451CVE-2026-76450CVE-2026-76448CVE-2026-20286CVE-2026-20285CVE-2026-20071CVE-2026-20072CVE-2026-20334CVE-2026-20330CVE-2026-20335CVE-2026-20331CVE-2026-20332CVE-2026-20329CVE-2026-20333CVE-2026-20336CVE-2026-20324CVE-2026-20242CVE-2026-20344CVE-2026-20341CVE-2026-20340CVE-2026-20342CVE-2026-20343CVE-2026-76412CVE-2026-76413CVE-2026-76420CVE-2026-20295CVE-2026-20323CVE-2026-20249CVE-2026-20250CVE-2026-20154CVE-2026-20135CVE-2026-20222CVE-2026-20248CVE-2026-20290CVE-2026-20120CVE-2026-20121CVE-2026-20360CVE-2026-20361CVE-2026-20322CVE-2026-20325CVE-2026-20326CVE-2026-76409CVE-2026-76438CVE-2026-20350
Update history

What changed in later vendor updates

SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.

    • The vendor changed the advisory summary.
    • Severity changed from Unknown to Informational.
    • Added CVEs: CVE-2026-20071, CVE-2026-20072, CVE-2026-20120, CVE-2026-20121, CVE-2026-20135.
    • Added affected products: Cisco Identity Services Engine, Cisco Nexus Dashboard, BroadWorks, and ThousandEyes Virtual Appliance, Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management....
    • Removed affected products: Cisco Advance Notification for Publication of September 16, 2026, Security Advisories.
    • The vendor changed the advisory summary.
    • Added CVEs: CVE-2026-20130, CVE-2026-20176, CVE-2026-20192, CVE-2026-20194, CVE-2026-20211.
    • The vendor changed the advisory summary.
    • Severity changed from Informational to Unknown.
    • Added CVEs: CVE-2026-20352, CVE-2026-76460.
    • The vendor changed its remediation guidance.

Updates

  1. Added to SecurityAlert

    We collected the advisory from the official source.

  2. Published by Cisco

    The publication date reported by the vendor.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.

Keep investigating
See every advisory from this vendor