Cisco warns of IOS XE zero-day actively exploited in attacks

Cisco has discovered a vulnerability in the web UI feature of Cisco IOS XE Software. This vulnerability allows remote attackers to create an account with high privileges on an affected system. They can then use this account to take control of the system.

For steps to close the attack vector for this vulnerability, see the recommendations section of this advisory. Cisco will provide updates on the status of this investigation and when a software patch is available.

• Cyber Attack
• Data Breach

India’s Tata Electronics hit by cyber breach: Hacker target 630 GB record

By infosecbulletin / Tuesday , June 23 2026

A cyber attack seems to have affected one of India's top electronics companies. Tata Electronics has said there was a...

Read More

• Hot Topic

Anthropic’s Mythos reportedly broke NSA classified systems in hours

By infosecbulletin / Monday , June 22 2026

The recent finding shows how powerful Mythos is: the AI can access the US government's secret networks in just a...

Read More

• International

OpenAI New Method “Deployment Simulation” Predicts AI Risks Before Deployment

By infosecbulletin / Monday , June 22 2026

Test before going live is important for AI developers. But there's a problem: testing usually uses fake scenarios that often...

Read More

• Cyber Attack

AryStinger botnet infected thousands of D-Link routers globally

By infosecbulletin / Sunday , June 21 2026

AryStinger has taken control of over 4,000 old D-Link routers to use them as proxies for harmful traffic. The team...

Read More

• International

Hacker suspected of sending alerts across Brazil

By infosecbulletin / Sunday , June 21 2026

Brazil's government suspects a hacking attack triggered an unauthorized ‌alert sent to cell phones across parts of the country early...

Read More

• Hot Topic

CyberSentinel AI features 33 security tools like Nmap, SQLMap, and ZAP, utilizing Claude and GPT

By infosecbulletin / Sunday , June 21 2026

A new open-source cybersecurity tool named CyberSentinel AI v3.0 has come out. It is an important step in self-operated security...

Read More

• Event

Barracuda hosts Dhaka roundtable on cyber resilience

By infosecbulletin / Saturday , June 20 2026

Barracuda gathered industry people in Dhaka on 18 June 2026 for a roundtable talk about cyber resilience. The company shared...

Read More

• Alert
• International

CISA Alerts Fortinet Users as FortiBleed Affects 86,644 FortiGate Devices

By infosecbulletin / Saturday , June 20 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) asked Fortinet users with FortiGate devices on Thursday to act to protect...

Read More

• Alert

CISA: Splunk flaw under active exploit, patch by Sunday

By infosecbulletin / Saturday , June 20 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has asked federal agencies to protect their systems by Sunday from a...

Read More

• Cyber Attack
• Data Breach

Texas data breach exposes 3 million driver’s licenses

By infosecbulletin / Saturday , June 20 2026

The Texas Parks and Wildlife Department (TPWD) revealed a data leak at its license system provider. This leak exposed private...

Read More

This advisory is available at the following link:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z

Affected Products Vulnerable Products

This vulnerability affects Cisco IOS XE Software if the web UI feature is enabled. The web UI feature is enabled through the ip http server or ip http secure-server commands.

To read the full report click here