Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service...
Affected productsEmergency Responder, Prime Collaboration Deployment, Unified CM, Unified CM IM&P
Vendor guidance
To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulnerab...
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internall...
Vendor guidance
To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulnerab...
Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMT...
Affected products1000 Series Integrated Services Routers (ISRs), 4000 Series ISRs, 8100 Series Secure Routers, 8200 Series Secure Routers
Vendor guidance
Cisco has released software updates that address this vulnerability.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple inte...
To assist customers in patching and to streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulne...
Multiple Cisco products are affected by vulnerabilities in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition. For more information ab...
Affected products1000 Series Integrated Services Routers (ISRs), 4000 Series ISRs, 8100 Series Secure Routers, 8200 Series Secure Routers
Vendor guidance
Cisco has released software updates that address these vulnerabilities.
Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected restart of the Snort 3 Detection Engine. ...
Affected productsConnectivity Over Security, Balanced Security and Connectivity, Security Over Connectivity, Maximum Detection
Vendor guidance
Cisco has released software updates that address this vulnerability.
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition. The vulnerability is due to a f...
Affected products1000 Series Integrated Services Routers (ISRs), 4000 Series ISRs, 8100 Series Secure Routers, 8200 Series Secure Routers
Vendor guidance
Cisco has released software updates that address this vulnerability.
On October 21, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories.
Affected productsSnort 3, Cisco Expressway and Unified Communications Products, Cisco IOS XR Software and Secure Client
Vendor guidance
To remediate the vulnerabilities that were disclosed on October 21, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.
A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due to the use of persisten...
Vendor guidance
Cisco has released software updates that address this vulnerability.
A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-s...
Vendor guidance
Cisco has released software updates that address this vulnerability.
A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local us...
Vendor guidance
Cisco has released software updates that address this vulnerability.
A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to ...
Affected productsASR 9000 Series Aggregation Services Routers if they have a Lightspeed- or Lightspeed-Plus-based line card installed, ASR 9900 Series Aggregation Services Routers if they have a Lightspeed- or Lightspeed-Plus-based line card installed, ASR 9902 Compact High-Performance Routers, ASR 9903 Compact High-Performance Routers
Vendor guidance
Cisco has released software updates that address this vulnerability.
A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulner...
Vendor guidance
Cisco has released software updates that address this vulnerability.
A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to insufficient authorization checks of HTTP requests during Mobile and Remote Access (MRA) provisionin...
Vendor guidance
Cisco has released software updates that address this vulnerability.
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied inp...
Vendor guidance
Cisco has released software updates that address this vulnerability.
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnera...
Affected productsCampus Gateways, Meraki MG Cellular Gateways, Meraki MR Wireless Access Points, Meraki MS Series Switches
Vendor guidance
To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulnerab...
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases t...
Vendor guidance
To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulnerab...
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when ...
Affected productsThe File Reputation service, which is part of Cisco AMP, is enabled and assigned to a mail policy., The Content Scanner Tools version is earlier than 25.3.0.5525.
Vendor guidance
Cisco has released software updates that address this vulnerability.
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker ...
Affected products5000 Series Enterprise Network Compute Systems (ENCS) (CSCwu42927), UCS B-Series Blade Servers (CSCwt77804), UCS C-Series Rack Servers (CSCwt77804), UCS C845A M8 Rack Server (CSCwt77950)
Vendor guidance
Cisco has released software updates that address this vulnerability.
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input valid...
Affected productsNexus 3000 Series Switches (CSCwu46199), Nexus 9000 Series Switches in standalone NX-OS mode (CSCwu46199), UCS 6300 Series Fabric Interconnects (CSCwu58579)
Vendor guidance
Cisco has released software updates that address this vulnerability.
To remediate the vulnerabilities that were disclosed on October 7, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vu...
Affected productsMDS 9000 Series Multilayer Switches, Nexus 3000 Series Switches, Nexus 7000 Series Switches, Nexus 9000 Series Fabric Switches in ACI mode
Vendor guidance
To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulnerab...
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that addr...
Vendor guidance
To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulnerab...
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in softwar...
Vendor guidance
To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulnerab...
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.