# Cisco patches 24 vulnerabilities across product line

Published: 2026-10-22 · Severity: high · Sectors: Telecommunications, Infrastructure
Canonical: https://vorant.io/reports/47a560e3-b0c0-5ffa-b5f0-b679b27ec71b/cisco-patches-24-vulnerabilities-across-product-line

> CERT-FR advisory details 24 CVEs in Cisco IOS XE/XR, FTD, Unified CM, Secure Client and Snort 3 enabling RCE, privilege escalation and DoS.

CERT-FR has published a consolidated advisory covering 24 CVEs disclosed by Cisco across a broad range of products, including IOS XE and IOS XR software, Secure FTD, Unified Communications Manager and related collaboration products, Expressway Series, Secure Client, Cyber Vision, and Snort 3. The flaws collectively enable remote code execution, privilege escalation, denial of service, security bypass, and impacts to data confidentiality and integrity, depending on the specific product and vulnerability. Affected version ranges are extensive and product-specific, spanning multiple IOS XE and IOS XR release trains as well as several FTD branches.

No in-the-wild exploitation is indicated in the advisory. CERT-FR directs administrators to the eight corresponding Cisco Security Advisories (covering ASR9k hardening, Expressway Series hardening, Snort 3 hardening and open-source issues, Secure Client privilege escalation, VCS static credentials, voice product hardening, and a PHP-related advisory) for patch availability and version-specific remediation guidance. Given the breadth of affected infrastructure and collaboration products, defenders should prioritize patching internet-facing and core network devices (IOS XE/XR routers, FTD firewalls) first, followed by collaboration and endpoint components.

This is a routine Cisco multi-product security bulletin aggregation rather than a report of active exploitation or a single critical zero-day; however, the presence of multiple RCE and privilege-escalation vulnerabilities across widely deployed network infrastructure warrants prompt patch management review.

## Mentioned in this report

- Vulnerabilities: CVE-2026-109618 (templated), CVE-2026-109619, CVE-2026-20043, CVE-2026-20236, CVE-2026-20291, CVE-2026-20356, CVE-2026-76462, CVE-2026-76466, CVE-2026-76473, CVE-2026-76474, CVE-2026-76475, CVE-2026-76476, CVE-2026-76477, CVE-2026-76478, CVE-2026-76479, CVE-2026-76481, CVE-2026-76490, CVE-2026-76491, CVE-2026-76492, CVE-2026-76493, CVE-2026-76494, CVE-2026-76495, CVE-2026-76496, CVE-2026-76497, CVE-2026-76505, CVE-2026-76524

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1360

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/47a560e3-b0c0-5ffa-b5f0-b679b27ec71b/cisco-patches-24-vulnerabilities-across-product-line.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup