Updated just now · 12 advisories
Remotely exploitable — could allow full system takeover — no credentials needed
Remotely exploitable — could expose sensitive process data — no credentials needed
Remotely exploitable — could expose sensitive process data
This is an advance notice only; actual vulnerabilities and impacts are not yet disclosed. Until the September 2, 2026 advisories are published, affected Cisco products (IOS XR, Nexus 9000 switches, Secure Email, and SIP software) carry unknown security risks that could potentially impact network infrastructure and communications systems.
An attacker with valid user credentials could access sensitive information stored in the Smart Home system and bypass permission controls, potentially exposing tenant or property data and allowing unauthorized modifications to access rules.
An attacker with user-level web access could run arbitrary commands on your Zoneminder server with the permissions of the web server process, allowing them to access recorded video, modify system configurations, or disrupt video surveillance operations.
An attacker with network access could read sensitive data from PayRange payment terminals, disable them, or alter what they display to customers—disrupting payment processing and potentially tampering with transaction information.
An attacker could disable critical safety functions in the vehicle braking system, including ABS, steering assist, traction control, and speedometer, creating immediate risk of loss of control and collision.
An attacker with network access could gain administrative control of the NE2-D11 device, read sensitive configuration data, modify network or process settings, or take the device offline entirely. This could disrupt communications or control functions across connected industrial systems.
An attacker could alter AIS transponder settings on your vessel or offshore asset, potentially disabling or spoofing maritime position and identification broadcast. This could affect navigation safety, collision avoidance, and regulatory compliance for vessel tracking.
A local attacker with low privileges could extract user credentials from system memory, potentially gaining unauthorized access to the Incident Manager and connected building systems. This could allow them to alter alarm configurations, disable alerts, or access other networked systems that depend on this application.
An attacker with access to the OTTO Fleet Manager database could crack user passwords due to weak hashing, potentially gaining unauthorized access to the fleet management system and the autonomous mobile robots it controls.
An attacker could flood your IE 1000 Series Switch with traffic, making the management interface (web, SSH, or API) unavailable. Your operators would be unable to configure the switch or monitor its status, but data traffic through the switch would continue normally.
An authenticated attacker could inject malicious code into the switch's web interface that executes when other authorized users access it, potentially allowing them to capture credentials or perform unauthorized configuration changes to your network switches.
An attacker with network access to the TLS connection could potentially cause a denial-of-service condition by forcing repetitive TLS renegotiations, disrupting communication with the affected device. Data confidentiality and integrity are not compromised by this issue.
An attacker with valid credentials could execute arbitrary code on the Malcolm system or cause it to become unavailable, potentially disrupting network traffic analysis and security monitoring operations.
An attacker with engineering workstation credentials could tamper with serialized data sent to AVEVA Enterprise SCADA servers, leading to arbitrary code execution and potential control of industrial processes including shutdowns or unsafe setpoint changes.
An attacker could run commands with root-level access on your HMI gateway, potentially allowing them to modify process parameters, stop production systems, or compromise other connected industrial devices on your network.
An attacker with local access to an Airwall device could decrypt sensitive data and bypass authentication controls, potentially reading arbitrary files or accessing protected system resources.
An attacker on the local network could read sensitive data from the HIPASE-250 device or compromise connected engineering workstations, potentially exposing control system configuration or process parameters.
An attacker with low-privilege access could inject malicious code into Metasys that runs in other users' sessions, including administrators, potentially allowing them to hijack accounts and gain unauthorized control of building automation systems.
An attacker within Bluetooth range could manipulate brain stimulation settings and bypass safety limits on the FL-100 device, potentially causing harmful electrical stimulation or device malfunction.
This is an advance notification only; no vulnerabilities have been disclosed yet. Cisco will publish security advisories on August 19, 2026 for multiple products including firewalls, contact center systems, network switches, and collaboration platforms. Impact will be determined when the full advisories are released.
An attacker without authentication could run commands on PLCnext controllers, disrupt operations through denial of service, or bypass access controls—affecting production lines, water treatment processes, or power distribution automation. Integrity and confidentiality of control logic and operational data are at risk.
An attacker with network access to FortiManager could bypass authentication and issue commands that make it accept unauthorized Fortinet devices, allowing the attacker to masquerade as a trusted firewall and intercept or redirect traffic destined for your protected networks.
An attacker can send specially crafted HTTP/2 requests to cause a denial of service, making the affected gateway or access control device unavailable and disrupting network traffic or administrative access to critical systems.
An authenticated admin on FortiSIEM could use the vulnerability to make unauthorized requests to internal systems and cloud services that the FortiSIEM server can reach, potentially accessing sensitive data or triggering unintended actions on those systems.
An attacker could overflow a buffer in the WAD (Web Application Delivery) service to crash the FortiGate appliance or potentially execute arbitrary code, disrupting network connectivity and security services for your facility.
An attacker can send specially crafted network requests to cause the FortiGate web management interface to become unresponsive, preventing administrators from accessing the firewall's configuration and monitoring capabilities.
An attacker positioned on the network between a user and the VPN gateway could intercept and modify GlobalProtect app communications, potentially stealing credentials or session tokens used for authentication. VPN tunnel traffic itself remains encrypted and is not affected.
A locally authenticated user on a macOS system running the GlobalProtect client could exploit a race condition to gain root-level access, allowing them to modify VPN configuration, intercept traffic, or compromise the entire endpoint.
A local user on a Windows or macOS endpoint running the Prisma Access Agent could escalate their privileges and run arbitrary code with admin rights, potentially compromising the entire endpoint and gaining access to network resources your VPN protects.
An attacker with administrator-level access to a Windows computer running Prisma Access Agent could bypass security protections and gain unauthorized access to the agent's processes and data, potentially compromising the security of the endpoint and any connected industrial networks.
A local administrator on a Windows machine running Prisma Access Agent could bypass network security inspection, allowing them to inject malicious traffic or intercept sensitive data that should be protected by the agent.
A local user with basic access to a Linux machine running Prisma Access Agent could delete specific system files and disable the VPN agent, potentially disrupting secure remote access for the organization.
An attacker on your network can read sensitive information from URL filtering response pages without authentication, potentially exposing system details or internal data. This affects your network perimeter security posture but does not directly impact process control systems.
A user with regular (non-administrator) access to a Windows, macOS, or Linux workstation running GlobalProtect could escalate their privileges to full administrative control, allowing them to install malware, modify system settings, or access sensitive data on that device.
An attacker on the network path between a Windows computer and GlobalProtect gateway could run code with system privileges during user logon, potentially installing malware, stealing credentials, or disrupting VPN authentication before the user logs in.
An attacker positioned between a user and the VPN gateway during the UDP tunnel handshake could crash the GlobalProtect app or potentially execute code with system-level privileges, disrupting remote access and potentially compromising the endpoint.
An attacker on the network can force your firewall to reboot by sending a specially crafted request to the SSL VPN service, taking your firewall offline and blocking all traffic until it restarts. This directly interrupts network and operational access for your facility.
An attacker could trigger a buffer over-read in the SMB client to read sensitive data from system memory. While the direct risk to OT operations is limited, this could expose credentials or configuration details used by HMI systems and engineering workstations.
An attacker with valid domain credentials could bypass Active Directory security controls by exploiting weak encryption, potentially allowing unauthorized access to network resources or accounts they should not have permission to access.
An attacker with a local user account could gain system-level access to Windows servers or workstations, potentially allowing them to modify control logic, disable monitoring, or compromise the entire system.
An attacker with local access to a Windows workstation or server could exploit this flaw to gain system-level privileges, allowing them to install malware, modify control systems software, or disrupt operations.
An attacker with a valid user account on a Windows machine could gain full administrative control of that system, allowing them to install malware, modify critical files, or disrupt operations.
An attacker with local access to a Windows system can read sensitive data from NTFS filesystem memory that should not be accessible, such as file content or system information.
A user with local access to a Windows computer or server could exploit this buffer overflow vulnerability to gain administrative privileges and take full control of the system. In an OT environment, this means an attacker with physical or local network access could modify control logic, disable safety systems, or shut down critical processes.
A local user with standard privileges could read sensitive kernel memory and escalate to administrator access on Windows systems running NTFS. This could allow an attacker to gain full control of a supervisory or engineering workstation.