Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard
Cisco patches dozens of critical vulnerabilities in FMC, ISE, and Nexus Dashboard.
Run Cisco?
Get an email when a reviewed story names Cisco, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Cisco has released patches for numerous critical vulnerabilities affecting its Secure Firewall Management Center (FMC), Identity Services Engine (ISE), and Nexus Dashboard. The updates address issues including SQL injection, command execution, authentication bypass, and remote code execution, with some flaws already publicly disclosed or exploited in the wild as zero-days.
The lesson from this incident
Full lessonCisco disclosed and patched dozens of serious vulnerabilities across core network security products, including flaws enabling SQL injection, authentication bypass, and remote code execution. The severity is compounded by the fact that some vulnerabilities were already publicly disclosed or actively exploited as zero-days before patches were available. Organizations relying on these products for firewall management, identity services, and network orchestration face significant risk if updates are not applied promptly. This highlights the persistent danger of unpatched network infrastructure, particularly in devices that are themselves responsible for enforcing security controls.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
Indicators of Compromise
- cve — CVE-2026-20282
- cve — CVE-2026-20283
- cve — CVE-2026-20284
- cve — CVE-2026-20332
- cve — CVE-2026-20079
- cve — CVE-2026-20316