news.mlab.sh
Back to the feed
threat-intel

Multiples vulnérabilités dans les produits Cisco (17 septembre 2026)

CriticalCVSS 10.0
Summary

Multiple vulnerabilities have been discovered in Cisco products, including the Adaptive Security Appliance (ASA), Firewall Management Center (FMC), and Identity Services Engine (ISE). Several of these vulnerabilities allow an attacker to cause remote code execution, privilege escalation, and denial-of-service attacks. Cisco has indicated that CVE-2026-76460 is actively exploited. The ISE versions 3.2 and 3.1 are no longer supported, and ISE-PIC is no longer commercially available. Cisco recommends referring to their security advisory for detailed information and patches.

Multiple vulnerabilities have been discovered within Cisco products, impacting network security infrastructure. These vulnerabilities range from remote code execution and privilege escalation to denial-of-service attacks. The vulnerabilities affect products including the Adaptive Security Appliance (ASA), Firewall Management Center (FMC), and Identity Services Engine (ISE).

Specifically, the vulnerabilities allow an attacker to cause remote code execution, privilege escalation, and denial-of-service attacks. Cisco has indicated that CVE-2026-76460 is actively exploited.

ISE versions 3.2 and 3.1 are no longer supported, and ISE-PIC is no longer commercially available. Cisco has stated that these versions will not receive further security updates.

Cisco recommends referring to their security advisory (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-logging-dos-ZXXNesfN, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-dtls-dos-Kp57HkyO, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-eigrp-dos-GOhNejSj, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2cert-dos-uWyc2xtv, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-javarce-y2NypXwk, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-mulivulns-4PsnFwvx, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sftunn-codex-c3O4Jft2, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc2-multivulns-HXgcqRG, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tls1, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ndw1-psFvnrg, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-cmd-inj-e2CuZCYZ, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-mult-vul-ymSsTLCc, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-hrP9jQSQ, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-radius-dos-wR3hYPMw, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-sql-inj-3QTKR947, https://www.cve.org/CVERecord?id=CVE-2026-20130, https://www.cve.org/CVERecord?id=CVE-2026-20135, https://www.cve.org/CVERecord?id=CVE-2026-20154, https://www.cve.org/CVERecord?id=CVE-2026-20176, https://www.cve.org/CVERecord?id=CVE-2026-20192, https://www.cve.org/CVERecord?id=CVE-2026-20194, https://www.cve.org/CVERecord?id=CVE-2026-20211, https://www.cve.org/CVERecord?id=CVE-2026-20222, https://www.cve.org/CVERecord?id=CVE-2026-20234, https://www.cve.org/CVERecord?id=CVE-2026-20237, https://www.cve.org/CVERecord?id=CVE-2026-20242, https://www.cve.org/CVERecord?id=CVE-2026-20247, https://www.cve.org/CVERecord?id=CVE-2026-20249, https://www.cve.org/CVERecord?id=CVE-2026-20250, https://www.cve.org/CVERecord?id=CVE-2026-20282, https://www.cve.org/CVERecord?id=CVE-2026-20283, https://www.cve.org/CVERecord?id=CVE-2026-20284, https://www.cve.org/CVERecord?id=CVE-2026-20287, https://www.cve.org/CVERecord?id=CVE-2026-20295, https://www.cve.org/CVERecord?id=CVE-2026-20300, https://www.cve.org/CVERecord?id=CVE-2026-20306, https://www.cve.org/CVERecord?id=CVE-2026-20307, https://www.cve.org/CVERecord?id=CVE-2026-20322, https://www.cve.org/CVERecord?id=CVE-2026-20323, https://www.cve.org/CVERecord?id=CVE-2026-20324, https://www.cve.org/CVERecord?id=CVE-2026-20325, https://www.cve.org/CVERecord?id=CVE-2026-20326, https://www.cve.org/CVERecord?id=CVE-2026-20329, https://www.cve.org/CVERecord?id=CVE-2026-20330, https://www.cve.org/CVERecord?id=CVE-2026-20331, https://www.cve.org/CVERecord?id=CVE-2026-20332, https://www.cve.org/CVERecord?id=CVE-2026-20333, https://www.cve.org/CVERecord?id=CVE-2026-20334, https://www.cve.org/CVERecord?id=CVE-2026-20335, https://www.cve.org/CVERecord?id=CVE-2026-20336

Read the full article at CERT-FR