Advisories
Cisco PSIRT to Release Security Hardening Advisories for BroadWorks, ISE, Nexus Dashboard, Secure Firewall, and ThousandEyes on Sep 16, 2026
Cisco’s Product Security Incident Response Team (PSIRT) will publish a set of security hardening advisories on September 16, 2026, covering vulnerabilities in BroadWorks CommPilot Application Software, Identity Services Engine (ISE), Nexus Dashboard, Secure Firewall Adaptive Security Appliance (ASA), Secure Firewall Management Center (FMC), Secure Firewall Threat Defense (FTD), and ThousandEyes Virtual Appliance. The advisories will detail the flaws and provide fixed software releases. Cisco urges customers to apply the updates promptly and notes the shift to a risk‑based vulnerability disclos
Upcoming Advisories
Cisco PSIRT will publish advisories on September 16, 2026, revealing security vulnerabilities and corresponding fixes for a range of products.
Affected Products
- BroadWorks CommPilot Application Software
- Identity Services Engine (ISE) – security hardening release
- Nexus Dashboard – security hardening release
- Secure Firewall Adaptive Security Appliance (ASA) – security hardening release
- Secure Firewall Management Center (FMC) – security hardening release
- Secure Firewall Threat Defense (FTD) – security hardening release
- ThousandEyes Virtual Appliance
What to Do
All advisories will include fixed software versions. Cisco strongly recommends that customers upgrade immediately to mitigate the disclosed vulnerabilities.
Disclosure Model
Cisco is transitioning to a risk‑based vulnerability disclosure model, which prioritizes the release of information based on the potential impact and severity of the flaw.
Impact Rating
Security Impact Rating: Informational.
Related articles
Cisco PSIRT Unveils Batch of Critical & Medium Vulnerabilities – Immediate Patch Required
On Aug. 19 2026, Cisco’s PSIRT released a suite of advisories covering 12 CVEs across Crosswork, Secure Workload, BroadWorks, Unified Intelligence Center, RoomOS, Industrial Ethernet 1000 Series, and Contact Center products. Four critical (CVSS 10.0) affect Crosswork and Secure Workload hardening releases, while a high‑severity XML‑External‑Entity flaw hits BroadWorks. Medium‑rated issues include SQL injection, stack overflow, XSS, DoS, and server‑side request forgery. Cisco urges customers to deploy the fixed builds immediately and notes updates to its vulnerability disclosure process.
Read briefing
Cisco PSIRT Releases August 2026 Security Advisories: 13 Critical CVEs Across SD‑WAN, IOS XE, and More
On Aug 5 2026 Cisco’s Product Security Incident Response Team issued a wave of advisories covering 13 CVEs that span SD‑WAN, IOS XE, Integrated Management Controller, and other components. The most severe flaws—rated 9.8‑9.9 on CVSS—include argument‑injection and denial‑of‑service vectors that could cripple network control planes. Cisco has pushed hardening releases for Catalyst SD‑WAN and IOS XE, urging customers to patch or reconfigure to mitigate the risks.
Read briefing
Critical Cisco Hardening Release: ASA, FTD, FMC Patch Internal Exploits
Cisco’s security team has rolled out a hardening update for its Secure Firewall Adaptive Security Appliance, Threat Defense, and Management Center software, addressing a suite of internally discovered flaws. Eight CVEs (CVE‑2026‑20329 through CVE‑2026‑20336) cover issues ranging from static credential exposure to authentication bypass, with two vulnerabilities already being actively exploited. No workarounds exist; customers must install the patches promptly to mitigate the critical risk.
Read briefing
ABB Ability Edgenius Hit by CVE‑2026‑31431: Linux Kernel Privilege Escalation
ABB’s industrial gateway platform, Ability Edgenius, is vulnerable to the CVE‑2026‑31431 “Copy Fail” Linux kernel flaw, allowing local or container‑based attackers to gain root privileges. Versions 3.2.0.0‑3.2.4.0 are affected and are fixed in 3.2.4.1. The flaw originates in the kernel’s cryptographic subsystem and poses a serious risk to critical manufacturing, energy, water, and chemical facilities worldwide. Operators should apply the patch ASAP and limit SSH/cockpit access to reduce exposure.
Read briefing