#cisco
8 articles
Between 2026-04-16 and 2026-10-11, ZCyberNews covered ten Cisco stories spanning critical vulnerabilities and active exploitation. Interlock and The Gentlemen feature among the threat actors tracked across this tag. Five CVEs anchor the coverage: CVE-2026-20079, CVE-2026-20127, and CVE-2026-20182 each carry a CVSS score of 10, while CVE-2026-105278 and CVE-2026-76504 score 9.8. The severity mix comprises seven critical and two high findings. Enterprise networking, critical infrastructure, government, telecommunications, and energy rank among the affected sectors, with reporting touching the United states, Global, North america, Turkey, and UK.
CRITICALCVE-2026-105278: openPDC Docker Image Ships Default Admin Login
CVE-2026-105278 (CVSS 9.8) leaves the published openPDC Docker image with a fixed administrative credential and no forced rotation, giving network-adjacent attackers full control.
CRITICALCISA Adds Cisco Catalyst SD-WAN Auth Bypass to KEV
CISA added CVE-2026-76504, a 9.8-CVSS auth bypass in Cisco Catalyst SD-WAN Manager, to its KEV catalog after reports of active exploitation.
CRITICALCISA Adds Cisco CVE-2026-20079 With Perfect 10.0 Score to KEV
CISA's KEV catalog now lists CVE-2026-20079, a CVSS 10.0 authentication bypass in Cisco software, alongside exploited Citrix and Fortinet flaws. Federal patch deadline: Sept. 12.
CRITICALCisco Catalyst SD-WAN Controller Flaw CVE-2026-20182 Scores Perfect
Rapid7 discovered CVE-2026-20182, a 10.0-CVSS authentication bypass in Cisco Catalyst SD-WAN Controller. Unauthenticated attackers can inject SSH keys and issue NETCONF commands.
CRITICALThe Gentlemen RaaS Internal Leak Exposes Admin, Affiliates, Tactics
A leaked backend database from The Gentlemen RaaS operation reveals 9 accounts, admin TOX ID, initial access via Fortinet/Cisco edge flaws, and a 190,000 USD ransom payout.
HIGHCisco DoS Flaw CVE-2026-20188 Requires Manual Reboot to Recover
CVE-2026-20188: Unauthenticated attackers can crash Cisco Crosswork Network Controller and NSO via low-complexity exploit. No patch for older releases; manual reboot required.
Cisco Acquires Astrix Security for Non-Human Identity Protection
Cisco announced plans to acquire Astrix Security to address non-human identity risks in AI and machine workloads. The deal expands Cisco's identity security portfolio.
CRITICALInterlock Ransomware Exploits Cisco FMC Zero-Day in Global Attacks
The Interlock ransomware group is actively exploiting a zero-day vulnerability in Cisco Firepower Management Center to breach networks. Recorded Future identified 31 high-impact flaws in March 2026, a 139% monthly increase.
Stay Updated
Get the latest cybersecurity news delivered to your inbox.