Cisco security advisories, September 2026

Every Cisco security advisory published in September 2026, from Cisco Security Advisories, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 43
Critical: 17
High: 11
In CISA KEV: 4
CVEs: 113

Cisco advisories published in September 2026

Sep 30, 2026
Critical [CVE-2026-76504] Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability
Critical9.8ExploitedCISA KEV
Sep 30, 2026
Advisory [CVE-2026-20032 +13] Cisco Advance Notification for Publication of October 7, 2026, Security Advisories
Unrated
Sep 16, 2026
Critical [CVE-2026-20324] Cisco Secure Firewall Management Center Software sftunnel Root Arbitrary Code Execution Vulnerability
Critical9.9
Sep 16, 2026
Critical [CVE-2026-20242] Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability
Critical9.8
Sep 16, 2026
Critical [CVE-2026-20176 +2] Cisco Identity Services Engine Remote Code Execution Vulnerabilities
Critical9.9
Sep 16, 2026
Critical [CVE-2026-20282 +2] Cisco Identity Services Engine Authenticated Remote Code Execution and API Vulnerabilities
Critical9.1
Sep 16, 2026
Critical [CVE-2026-76423 +5] Cisco Identity Services Engine Vulnerabilities
Critical10.0
Sep 16, 2026
Critical [CVE-2026-20340 +4] Cisco Secure Firewall Management Center Software Vulnerabilities
Critical9.1
Sep 16, 2026
Critical [CVE-2026-20329 +7] Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026
Critical9.9Exploited
Sep 16, 2026
Critical [CVE-2026-20130 +5] Cisco Identity Services Engine Hardening Release: September 2026
Critical10.0Exploited
Sep 16, 2026
Critical [CVE-2026-20305 +1] Cisco Identity Services Engine Command Injection Vulnerabilities
Critical9.1
Sep 16, 2026
Critical [CVE-2026-76460] Cisco Identity Services Engine Authentication Bypass Vulnerability
Critical10.0ExploitedCISA KEV
Sep 16, 2026
Critical [CVE-2026-76412 +2] Cisco Secure Firewall Management Center Software Vulnerabilities
Critical9.0
Sep 16, 2026
Critical [CVE-2026-20322 +5] Cisco Nexus Dashboard Software Security Hardening Release: September 2026
Critical9.9Exploited
Sep 16, 2026
High [CVE-2024-20260] Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service Vulnerability
High8.6
Sep 16, 2026
High [CVE-2026-20250] Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service Vulnerability
High8.6
Sep 16, 2026
High [CVE-2026-20352] Cisco Identity Services Engine RADIUS Denial of Service Vulnerability
High8.6
Sep 16, 2026
High [CVE-2026-20295 +1] Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Vulnerabilities
High8.6
Sep 16, 2026
High [CVE-2026-20135] Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability
High
Sep 16, 2026
High [CVE-2026-20222] Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability
High7.4
Sep 16, 2026
High [CVE-2026-20154] Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability
High8.6
Sep 16, 2026
High [CVE-2026-20249] Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability
High8.6
Sep 16, 2026
High [CVE-2026-20247 +1] Cisco Identity Services Engine SQL Injection Vulnerabilities
High7.5
Sep 16, 2026
Medium [CVE-2026-20071 +1] Cisco Identity Services Engine 802.1X Session Hijack and Information Disclosure Vulnerabilities
Medium4.9
Sep 16, 2026
Medium [CVE-2026-20248] Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability
Medium6.8
Sep 16, 2026
Medium [CVE-2026-20350] Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability
Medium4.7
Sep 16, 2026
Medium [CVE-2026-20290] Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability
Medium5.8
Sep 16, 2026
Medium [CVE-2026-76431 +3] Cisco Identity Services Engine Multiple Path Traversal Vulnerabilities
Medium5.3
Sep 16, 2026
Medium [CVE-2026-20309] Cisco Identity Services Engine Cross-Site Scripting Vulnerability
Medium6.1
Sep 16, 2026
Medium [CVE-2026-20120 +1] Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Object Group Access Control List Bypass Vulnerabilities
Medium5.8
Sep 16, 2026
Medium [CVE-2026-20285 +1] Cisco Identity Services Engine Authorization Bypass Vulnerabilities
Medium4.3
Sep 16, 2026
Medium [CVE-2026-76438] Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability
Medium6.5
Sep 16, 2026
Medium [CVE-2026-76439 +3] Cisco Identity Services Engine Authentication Bypass Vulnerabilities
Medium5.3
Sep 16, 2026
Medium [CVE-2026-76448 +3] Cisco Identity Services Engine SQL and HQL Injection Vulnerabilities
Medium4.9
Sep 16, 2026
Medium [CVE-2026-20235] Cisco Identity Services Engine Information Disclosure Vulnerability
Medium4.9
Sep 14, 2026
Critical [CVE-2026-20353 +4] Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
Critical9.8Exploited
Sep 14, 2026
Critical [CVE-2026-76461] Cisco Secure Email Gateway SQL Injection Vulnerability
Critical9.8ExploitedCISA KEV
Sep 9, 2026
Advisory [CVE-2026-20130 +23] Cisco Advance Notification for Publication of September 16, 2026, Security Advisories
UnratedExploitedCISA KEV
Sep 8, 2026
High [CVE-2026-20293] Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability
High7.1PoC reported
Sep 2, 2026
Critical [CVE-2026-20274 +6] Cisco IOS XR Software Security Hardening Release: September 2026
Critical9.8Exploited
Sep 2, 2026
Critical [CVE-2026-20212] Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability
Critical9.8
Sep 2, 2026
High [CVE-2026-20281] Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability
High7.5
Sep 2, 2026
Medium [CVE-2026-20354 +1] Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities
Medium5.9

Get an email when Cisco publishes the next one.

See Cisco's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Cisco

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.