Reported by 6 outlets

Timeline

1. original reporting

   Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities

   securityweek.com · 40d ago · September 3rd, 2026

   Cisco on Wednesday warned that two unpatched vulnerabilities in its enterprise email security product Secure Email have been publicly disclosed. The two flaws, tracked as CVE-2026-20354 and CVE-2026-20355 , are medium-severity issues affecting the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of the threat protection solution. According to Cisco, insufficient validation of message integrity can allow an attacker to intercept and modify traffic between email gateways using a man-in-the-middle (MitM) technique. “A successful exploit could allow the attacker to obtain plaintext content from the encrypted communication,” Cisco says in its advisory , adding that all Secure Email devices running AsyncOS version 16.5.0 or earlier with S/MIME enabled are affected. Cisco warns that the security bugs have been publicly disclosed, but notes that it is not aware of any of them being exploited in the wild. On Wednesday, the tech giant also announced patches for multiple critical-severity security defects in IOS XR and Nexus 9000 series switches that could lead to remote code execution (RCE), authentication bypass, code injection, and other types of attacks. The fixes for IOS XR resolve multiple bugs grouped based on their underlying vulnerability classes under seven CVEs, including two with a CVSS score of 9.8: CVE-2026-20274 and CVE-2026-20279. These include memory corruption and memory safety bugs and improper a

2. update from cyberpress.org

   Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Attackers Execute Code as Root

   cyberpress.org · 40d ago · September 3rd, 2026

   Cisco has disclosed a critical remote code execution vulnerability in Nexus 9000 Series Switches equipped with Silicon One ASICs that could allow unauthenticated attackers to run arbitrary code with root privileges. Tracked as CVE-2026-20212, the flaw received a CVSS v3.1 score of 9.8 out of 10 and is documented in Cisco advisory cisco-sa-n9k-s1-rce-EH8dEtr. Cisco published the final advisory on September 2, 2026, and released software updates and temporary mitigations for affected customers. Critical Cisco Nexus 9000 Flaw The vulnerability exists in the Silicon One integration used by specific Cisco Nexus 9000 platforms. According to Cisco, TCP ports 43210 and 43211 are accessible through the default Layer 3 virtual routing and forwarding (VRF) instance. An unauthenticated remote attacker could connect to an exposed affected switch and send specially crafted input to these ports. Successful exploitation could result in attacker-supplied code being executed with root-level privileges on the device. Root access would give an attacker extensive control over the impacted network switch, potentially enabling configuration manipulation, credential collection, traffic interception, disruption of data-center connectivity, or use of the compromised device as a foothold for further network attacks. Cisco also warned that exploit attempts could crash the S1HAL process, potentially causing the affected device to reload. In data-center environments where Nexus switches support critical w

3. update from gbhackers.com

   Critical Cisco Nexus 9000 Flaw Lets Remote Attackers Execute Code as Root Without Authentication

   gbhackers.com · 40d ago · September 3rd, 2026

   Cisco Nexus 9000 Flaw […] The post Critical Cisco Nexus 9000 Flaw Lets Remote Attackers Execute Code as Root Without Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

4. update from malware.news

   Cisco security advisory (AV26-876)

   malware.news · 40d ago · September 3rd, 2026

   Serial Number: AV26-876 Date: September 3, 2026 As of September 2, 2026, Cisco is affected by vulnerabilities in the following products: Cisco IOS XR Software Multiple versions Cisco Nexus 9000 Series Switches Multiple products Cisco Desk Phone 9800 Series and Video Phone 8875 Prior to 5.0(1) IP Phone 7800 and 8800 Prior to 14.4(1)SR3 IP Phone 8845 and 8865 Prior to14.4(1)SR4 Wireless IP Phone 8821 Prior to 11.0(6)SR8 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

5. update from socprime.com

   CVE-2026-20212: Critical Cisco Nexus 9000 Flaw Enables Unauthenticated Root RCE

   socprime.com · 39d ago · September 4th, 2026

   Cisco said its Product Security Incident Response Team was not aware of malicious exploitation or public announcements targeting the flaw when the advisory was released on September 2, 2026. The vulnerability is especially significant because Nexus 9000 switches commonly operate at the center of enterprise and data-center networks. Root-level compromise could give an attacker extensive control over network configuration and potentially create opportunities for traffic interception, service disruption, persistence, or movement toward connected infrastructure. Contact Sales CVE-2026-20212 analysis The vulnerability is c

6. update from sekurak.pl

   Critical Vulnerability in Cisco Nexus 9000 Switches [CVE-2026-20212]: Unauthenticated RCE with Root Access

   sekurak.pl · 34d ago · September 9th, 2026

   Krytyczna luka w przełącznikach Cisco Nexus 9000 [CVE-2026-20212]. RCE bez uwierzytelnienia i dostęp do roota Firma Cisco opublikowała biule

   via Mastodon https://sekurak.pl/krytyczna-luka-w-przelacznikach-cisco-nexus-9000-cve-2026-20212-rce-bez-uwierzytelnienia-i-dostep-do-roota/

7. mentioned by sekurak.pl

   Critical vulnerability in Cisco Nexus 9000 switches [CVE-2026-20212]. Unauthenticated RCE and root access

   sekurak.pl · 34d ago · September 9th, 2026