Cisco security advisories, October 2026

Every Cisco security advisory published in October 2026, from Cisco Security Advisories, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 35
Critical: 14
High: 5
In CISA KEV: 4
CVEs: 80

Cisco advisories published in October 2026

Oct 28, 2026
High [CVE-2026-76418] Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
High8.6ExploitedCISA KEV
Oct 28, 2026
Advisory [CVE-2026-20241 +2] Cisco Advance Notification for Publication of November 4, 2026, Security Advisories
Unrated
Oct 27, 2026
Critical [CVE-2026-105482 +3] Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
CriticalPoC reportedCISA KEV
Oct 23, 2026
Advisory Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Unrated
Oct 21, 2026
Critical [CVE-2026-109618 +1] Vulnerabilities in PHP Affecting Cisco Products: October 2026
CriticalExploitedCISA KEV
Oct 21, 2026
Critical [CVE-2026-20043 +3] Multiple Cisco Products Snort 3 Security Hardening Release: October 2026
Critical9.0Exploited
Oct 21, 2026
Critical [CVE-2026-76466] Cisco Expressway Series Remote Code Execution Vulnerability
Critical9.8
Oct 21, 2026
Critical [CVE-2026-76473 +7] Cisco Unified Communications Products Security Hardening Release: October 2026
Critical9.8Exploited
Oct 21, 2026
High [CVE-2026-76505] Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability
High7.5
Oct 21, 2026
High [CVE-2026-76490 +7] Cisco Expressway Series Security Hardening Release: October 2026
High8.6Exploited
Oct 21, 2026
High [CVE-2026-76524] Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability
High7.8
Oct 21, 2026
Medium [CVE-2026-76435] Cisco Expressway Series Information Disclosure Vulnerability
Medium5.3
Oct 21, 2026
Medium [CVE-2026-20011] Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
Medium5.8
Oct 21, 2026
Medium [CVE-2026-20019 +3] Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities
Medium5.8
Oct 21, 2026
Medium [CVE-2026-76487] Cisco Unified Communications Manager Improper Access Control Vulnerability
Medium5.3
Oct 21, 2026
Medium [CVE-2026-20218] Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability
Medium5.8
Oct 21, 2026
Medium [CVE-2026-20221] Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability
Medium5.8
Oct 21, 2026
Medium [CVE-2026-76462] Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability
Medium5.5
Oct 21, 2026
Medium [CVE-2026-76445] Multiple Cisco Products Snort 3 Denial of Service Vulnerability
Medium5.3
Oct 14, 2026
Critical [CVE-2026-76519] Cisco Secure Email Gateway Arbitrary File Write Vulnerability
Critical9.8ExploitedCISA KEV
Oct 14, 2026
Advisory [CVE-2026-20011 +12] Cisco Advance Notification for Publication of October 21, 2026, Security Advisories
Unrated
Oct 7, 2026
Critical [CVE-2026-76453 +5] Cisco NX-OS Software Security Hardening Release: October 2026
Critical9.8Exploited
Oct 7, 2026
Critical [CVE-2026-76465] Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability
Critical9.8
Oct 7, 2026
Critical [CVE-2026-76480 +3] Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026
Critical10.0Exploited
Oct 7, 2026
Critical [CVE-2026-76463 +6] Cisco Meraki Security Hardening Release: October 2026
Critical9.6Exploited
Oct 7, 2026
Critical [CVE-2026-76485 +2] Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities
Critical9.8
Oct 7, 2026
Critical [CVE-2026-76498 +2] Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026
Critical9.8Exploited
Oct 7, 2026
Critical [CVE-2026-76471] Cisco NX-OS Software NX-API Remote Code Execution Vulnerability
Critical9.8
Oct 7, 2026
Critical [CVE-2026-20328 +3] Cisco License (Smart Software Manager) On-Prem Vulnerabilities
Critical9.1
Oct 7, 2026
High [CVE-2026-20362] Cisco Finesse Server-Side Request Forgery Vulnerability
High7.2
Oct 7, 2026
Medium [CVE-2026-20032] Cisco NX-OS Software Python Sandbox Escape Vulnerability
Medium4.4
Oct 7, 2026
Medium [CVE-2026-76488] Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability
Medium6.5
Oct 7, 2026
Medium [CVE-2026-20321] Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability
Medium6.5
Oct 7, 2026
Medium [CVE-2026-20038] Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass Vulnerability
Medium5.8
Oct 7, 2026
Medium [CVE-2026-20173] Cisco NX-OS Software Control Plane Denial of Service Vulnerability
Medium5.8

Get an email when Cisco publishes the next one.

See Cisco's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Cisco

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.