Cisco patches dozens of flaws across product line
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
CERT-FR details 26 Cisco CVEs spanning IOS XR/XE, Secure FTD, Unified CM, Expressway, Snort 3 and Secure Client with no confirmed in-the-wild exploitation yet.
CERT-FR has published a consolidated advisory (CERTFR-2026-AVI-1360) covering eight Cisco security bulletins released on 21-22 October 2026, affecting a wide range of Cisco products including IOS XE and IOS XR software (ASR9k platforms), Secure FTD, Unified Communications Manager and related voice/collaboration products, Expressway Series, Secure Client, Cyber Vision, and Snort 3. Collectively, the flaws could allow a remote attacker to execute arbitrary code, escalate privileges, cause denial of service, bypass security policy, or compromise data confidentiality and integrity, depending on the specific product and vulnerability.
Affected versions are extensive: IOS XE releases prior to 17.12.8/17.15.6/17.18.5/26.1.2/26.2.1; IOS XR releases across the 7.x, 24.x branches prior to their respective fixed versions and SMUs; Secure FTD 7.x and 10.x branches prior to patched builds; Unified CM family and Unity Connection prior to 15SU5; Expressway Series prior to X15.5.20; Secure Client prior to 5.1.20.333; Cyber Vision prior to 5.6.0; and Snort 3 prior to 3.12.4.0. One bulletin (cisco-sa-vcs-static-cred) references static/default credential issues on Expressway/VCS, and another (cisco-sa-sec-client-priv-esc) covers a Secure Client privilege escalation flaw.
No exploitation in the wild is reported by CERT-FR; the advisory is a vulnerability/patch notice, directing administrators to Cisco's own PSIRT bulletins for authoritative details and fixed releases. Defenders running any of the listed Cisco products should inventory affected versions, prioritize patching internet-facing components (IOS XE/XR routers, FTD firewalls, Expressway/VCS gateways), and review Cisco's advisories for CVE-specific exploitability and mitigation guidance.
Mentioned in this report
Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1360
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 13,960 reports from 143 sources, 519 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them — about forty a week that are yours, not the four hundred that are not.
Create a free account What it costs