Cisco Security Advisories

Affected Environment
Cisco Identity Services Engine, Secure Firewall FMC, ASA, FTD, Nexus Dashboard, and ThousandEyes appliances.

Threat Overview
Dozens of vulnerabilities enable remote code execution, authentication bypass, SQL injection, and denial of service.

Exposure Timeline
Published 17 September 2026; fixed patch releases are available now across all affected product lines.

Attack Surface
ISE web management and REST APIs, FMC sftunnel protocol, and ASA/FTD VPN and DNS services.

Technical Root Cause
Insecure deserialization, missing authentication, SQL injection, and improper access control across multiple components.

Exploitation Pathway
Authenticated or unauthenticated attackers send crafted requests to execute code or bypass authentication controls.