Cisco patches RCE flaws across multiple platforms
Cisco disclosed a dozen vulnerabilities across Smart Software Manager, IMC, EPNM, NFVIS, and Nexus Dashboard products that could allow arbitrary code execution; no exploitation observed yet.
Sourcecisecurity.org — open the original
What to check
- Applies to
- The 12 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation
- No exploitation in the wild and no public exploit is recorded for the CVEs named.
Cisco has released patches for multiple vulnerabilities spanning several product lines including Smart Software Manager On-Prem, Integrated Management Controller (IMC), Evolved Programmable Network Manager, NFVIS, Nexus Dashboard, Nexus Dashboard Insights, and Nexus Dashboard Fabric Controller. The most severe flaws could allow an attacker to achieve arbitrary code execution, potentially leading to complete compromise of affected devices. All identified vulnerabilities map to exploitation of public-facing applications as the initial access vector.
Affected systems include widely deployed enterprise infrastructure components such as UCS C-Series and E-Series rack servers, Cisco Telemetry Broker appliances, Secure Endpoint Private Cloud appliances, Secure Network Analytics appliances, and Catalyst 8300 Series edge uCPE devices. As of publication, there are no reports of in-the-wild exploitation, but given the breadth of affected management and orchestration platforms, timely patching is recommended.
MS-ISAC recommends organizations apply Cisco's updates after testing, enforce least-privilege access, restrict administrative accounts, conduct regular vulnerability scanning and penetration testing, and maintain network segmentation to limit exposure of these management interfaces.
Mentioned in this report
Source reporting: https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-cisco-products-could-allow-for-arbitrary-code-execution_2026-029
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,436 reports from 149 sources, 661 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs