Cisco, Google, Oracle Face Critical Exploited Vulnerabilities
Cisco, Google, and Oracle products hit by critical, actively exploited vulnerabilities, with multiple authentication bypass and RCE flaws disclosed.
Cisco Secure Firewall Management Center (FMC) Software is affected by CVE-2026-20079, a critical vulnerability allowing unauthenticated, remote attackers to bypass authentication and gain root access. This flaw has been actively exploited by both nation-state actors, including Sandworm, and ransomware groups like Qilin, who have used it to steal credentials and deploy malware. Cisco has released patches for this vulnerability. The Hacker News reported.
Cisco Identity Services Engine (ISE) is facing multiple critical vulnerabilities, including CVE-2026-76460 and CVE-2026-76423, which allow unauthenticated, remote attackers to bypass authentication and gain administrative access. These flaws are due to insufficient authentication controls on API endpoints. CVE-2026-76460 has been added to the CISA Known Exploited Vulnerabilities (KEV) catalog, indicating active exploitation. Cisco has issued advisories and patches for these issues. CyberScoop noted.
Google Pixel devices are vulnerable to CVE-2026-58704, a critical privilege escalation flaw in the cellular modem that can be exploited remotely with proximal or adjacent network access. This vulnerability does not require user interaction and has been observed in targeted attacks. Google has released a patch for this issue, and it has been added to the CISA KEV catalog. Malwarebytes Labs advised.
Arista Networks' EOS software is impacted by CVE-2026-73456 and CVE-2026-73453, both critical vulnerabilities that could allow unauthenticated attackers to achieve arbitrary code execution. CVE-2026-73456 affects the gRPC Network Packet Sampling Interface (gNPSI), while CVE-2026-73453 impacts the P4Runtime interface. These flaws pose a significant risk to network infrastructure.
A critical deserialization of untrusted data vulnerability, CVE-2026-70416, affects Dell ObjectScale versions prior to 4.4.0.0. This flaw allows an unauthenticated remote attacker to achieve remote code execution, potentially leading to a complete system compromise. Dell has released a patch to address this vulnerability. Cyber Security News reported.
Oracle products are affected by a series of critical vulnerabilities, including CVE-2026-87230 in Hyperion Financial Management, CVE-2026-83099 in Forms, CVE-2026-83059 in Internet Directory, CVE-2026-83021 in WebLogic Server, CVE-2026-83020 in Platform Security for Java, and CVE-2026-71133 in Access Manager. These vulnerabilities are easily exploitable by unauthenticated network attackers and could lead to significant security breaches. Oracle has released updates to mitigate these risks.
ASUS Control Center is vulnerable to CVE-2026-75754, a critical flaw combining missing authentication, server-side request forgery (SSRF), and hard-coded credentials. An unauthorized user can exploit this to obtain encryption keys, leading to local service disruption and potential further compromise.
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 are susceptible to critical vulnerabilities CVE-2026-90823 (stack-based buffer overflow) and CVE-2026-90822 (OS command injection). These flaws allow unauthenticated remote attackers to compromise the affected management interfaces. Users are strongly advised to upgrade to supported firmware versions.
WordPress plugins Login with QR (CVE-2026-86710) and Pressengine (CVE-2026-86709) contain critical vulnerabilities that allow unauthenticated attackers to log in as any user, including administrators. These flaws stem from improper session handling and authentication checks, posing a severe risk to WordPress sites. Patches are available for these plugins.