Cisco patches 24 vulnerabilities across product line
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
CERT-FR advisory details 24 CVEs in Cisco IOS XE/XR, FTD, Unified CM, Secure Client and Snort 3 enabling RCE, privilege escalation and DoS.
CERT-FR has published a consolidated advisory covering 24 CVEs disclosed by Cisco across a broad range of products, including IOS XE and IOS XR software, Secure FTD, Unified Communications Manager and related collaboration products, Expressway Series, Secure Client, Cyber Vision, and Snort 3. The flaws collectively enable remote code execution, privilege escalation, denial of service, security bypass, and impacts to data confidentiality and integrity, depending on the specific product and vulnerability. Affected version ranges are extensive and product-specific, spanning multiple IOS XE and IOS XR release trains as well as several FTD branches.
No in-the-wild exploitation is indicated in the advisory. CERT-FR directs administrators to the eight corresponding Cisco Security Advisories (covering ASR9k hardening, Expressway Series hardening, Snort 3 hardening and open-source issues, Secure Client privilege escalation, VCS static credentials, voice product hardening, and a PHP-related advisory) for patch availability and version-specific remediation guidance. Given the breadth of affected infrastructure and collaboration products, defenders should prioritize patching internet-facing and core network devices (IOS XE/XR routers, FTD firewalls) first, followed by collaboration and endpoint components.
This is a routine Cisco multi-product security bulletin aggregation rather than a report of active exploitation or a single critical zero-day; however, the presence of multiple RCE and privilege-escalation vulnerabilities across widely deployed network infrastructure warrants prompt patch management review.
Mentioned in this report
Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1360
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 14,237 reports from 143 sources, 591 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them — about forty a week that are yours, not the four hundred that are not.
Create a free account What it costs