Back to Feed
VulnerabilitiesSep 17, 2026

Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard

Cisco patches dozens of critical vulnerabilities in FMC, ISE, and Nexus Dashboard.

Vendor Watch

Run Cisco?

Get an email when a reviewed story names Cisco, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

Summary

Cisco has released patches for numerous critical vulnerabilities affecting its Secure Firewall Management Center (FMC), Identity Services Engine (ISE), and Nexus Dashboard. The updates address issues including SQL injection, command execution, authentication bypass, and remote code execution, with some flaws already publicly disclosed or exploited in the wild as zero-days.

The lesson from this incident

Full lesson

Cisco disclosed and patched dozens of serious vulnerabilities across core network security products, including flaws enabling SQL injection, authentication bypass, and remote code execution. The severity is compounded by the fact that some vulnerabilities were already publicly disclosed or actively exploited as zero-days before patches were available. Organizations relying on these products for firewall management, identity services, and network orchestration face significant risk if updates are not applied promptly. This highlights the persistent danger of unpatched network infrastructure, particularly in devices that are themselves responsible for enforcing security controls.

What helps against this

How we list vendors

Indicators of Compromise

  • cve — CVE-2026-20282
  • cve — CVE-2026-20283
  • cve — CVE-2026-20284
  • cve — CVE-2026-20332
  • cve — CVE-2026-20079
  • cve — CVE-2026-20316

Entities

Secure Firewall Management Center (product)Identity Services Engine (product)Nexus Dashboard (product)Secure Firewall Adaptive Security Appliance (product)Secure Firewall Threat Defense (product)Cisco (vendor)