Skip to content
OpenAdvisories
High NCSC-2026-0338 10 CVEs

Kwetsbaarheden verholpen in Cisco Nexus 9000 Series, IOS XR Software en Secure Email

Published Sep 3, 2026 · Updated Sep 3, 2026 · nl

Vendor: Cisco Product: AsyncOS Product: IOS XR Product: ios_xr_software Product: Nexus Product: Nexus 9000 Series Switches Product: NX-OS Software Product: Secure Email Gateway Product: secure_email

Summary

Cisco heeft kwetsbaarheden verholpen in Cisco Nexus 9000 Series Switches met Silicon One technologie, Cisco IOS XR Software en Cisco Secure Email.

Details

Interpretaties
De ernstigste kwetsbaarheid betreft Nexus 9000-switches: als TCP 43210 of 43211 bereikbaar is, kan een aanvaller zonder authenticatie code met rootrechten uitvoeren en de switch laten herstarten. De IOS XR-kwetsbaarheden kunnen, afhankelijk van platform en configuratie, diverse beveiligingsfuncties ondermijnen. De Secure Email-kwetsbaarheden kunnen alleen bij een man-in-the-middlepositie en S/MIME-gebruik leiden tot het ontsleutelen van e-mail en het aanpassen van verkeer tussen e-mail gateways.

Oplossingen
Cisco heeft updates uitgebracht voor Cisco Nexus 9000 Series Switches, IOS XR Software en Secure Email om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 10

  • Critical 9.8
    CVE-2026-20212 Public exploit

    Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability

    A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the de…

    Cisco Cisco NX-OS Software Network devices
  • Critical 9.8
    CVE-2026-20274

    Cisco IOS XR Software Security Hardening Release: September 2026

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple int…

    Cisco Cisco IOS XR Software iOS Network devices
  • Critical 9.8
    CVE-2026-20279

    Cisco IOS XR Software Security Hardening Release: September 2026

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple int…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 8.8
    CVE-2026-20275

    Cisco IOS XR Software Security Hardening Release: September 2026

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple int…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 8.8
    CVE-2026-20278

    Cisco IOS XR Software Security Hardening Release: September 2026

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple int…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 8.8
    CVE-2026-20280

    Cisco IOS XR Software Security Hardening Release: September 2026

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multipl…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 8.6
    CVE-2026-20276

    Cisco IOS XR Software Security Hardening Release: September 2026

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple int…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 8.2
    CVE-2026-20277

    Cisco IOS XR Software Security Hardening Release: September 2026

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple int…

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 5.9
    CVE-2026-20354

    Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

    Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are…

    Cisco Cisco Secure Email Network devices
  • Medium 5.9
    CVE-2026-20355

    Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

    Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are…

    Cisco Cisco Secure Email Network devices

Revision history

  1. #1.0.0

    Initiele versie

References

  • Reference
    https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-smime-disc-dzw4rEdY
  • Reference
    https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM
  • Reference
    https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9k-s1-rce-EH8dEtr