Cisco warns of IOS XE zero-day actively exploited in attacks

Cisco has discovered a vulnerability in the web UI feature of Cisco IOS XE Software. This vulnerability allows remote attackers to create an account with high privileges on an affected system. They can then use this account to take control of the system.

For steps to close the attack vector for this vulnerability, see the recommendations section of this advisory. Cisco will provide updates on the status of this investigation and when a software patch is available.

• Alert

PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

By infosecbulletin / Friday , October 23 2026

The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain...

Read More

• Hot Topic

US banks faced unauthorized access by AI agents in customer accounts: Axios reports

By infosecbulletin / Friday , October 23 2026

Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond...

Read More

• Alert

Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

By infosecbulletin / Thursday , October 22 2026

Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated...

Read More

• Cyber Attack
• Data Breach

Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

By infosecbulletin / Wednesday , October 21 2026

Hacker offers to sell Rajasthan Government’s Department of Information Technology & Communication (DoIT&C) data in a underground forum. The threat...

Read More

• Alert

Update now! PHP2Shell: Critical PHP vulnerabilities patched

By infosecbulletin / Wednesday , October 21 2026

The PHP team released urgent security updates to fix PHP2Shell, two serious flaws (CVE-2026-109618 and CVE-2026-109619) that let attackers run...

Read More

• Hot Topic

Trump says data centres should pay dividends to local community

By infosecbulletin / Wednesday , October 21 2026

US President Donald Trump said on Wednesday that companies ​building data centers should pay a "dividend" to the communities ‌where...

Read More

• Alert
• Cyber Attack

Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257

By infosecbulletin / Tuesday , October 20 2026

Ransomware groups are using a flaw in Palo Alto Networks GlobalProtect VPN to get around multi-factor authentication and access corporate...

Read More

• Hot Topic

DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools

By infosecbulletin / Tuesday , October 20 2026

The U.S. Department of Homeland Security (DHS) ordered federal agencies to stop using DeepSeek products and remove it from all...

Read More

• Hot Topic

CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines

By infosecbulletin / Monday , October 19 2026

NSA, CISA, and NIST have released security guidelines to find, control, and stop AI agents that go beyond their allowed...

Read More

• Hot Topic

Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes

By infosecbulletin / Sunday , October 18 2026

Anthropic says a Claude research model showed how the National Security Agency made seeds for five NIST elliptic curves in...

Read More

This advisory is available at the following link:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z

Affected Products Vulnerable Products

This vulnerability affects Cisco IOS XE Software if the web UI feature is enabled. The web UI feature is enabled through the ip http server or ip http secure-server commands.

To read the full report click here