Cisco announced patches for 34 security vulnerabilities across multiple products, including Expressway Series, IOS XR, Snort 3, and Unified Communications.
The vulnerability or weakness
| CVE | CVSS | Severity | In CISA KEV | KEV due date |
|---|---|---|---|---|
| CVE-2026-20043 | 9.0 | CRITICAL | No | - |
| CVE-2026-20236 | 7.5 | HIGH | No | - |
| CVE-2026-76462 | 5.5 | MEDIUM | No | - |
| CVE-2026-76466 | 9.8 | CRITICAL | No | - |
| CVE-2026-76473 | 9.8 | CRITICAL | No | - |
CVE data: NVD (nvd.nist.gov) and the CISA Known Exploited Vulnerabilities catalog.
Earlier attacks and coverage
- Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU (2026-10-22)
- Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches (2026-10-21)
Business impact
Organizations may face operational disruptions and potential data breaches if these vulnerabilities are exploited, impacting their operations and reputation.
Industries affected
The patches affect industries including telecommunications, enterprise networking, and security solutions providers.
Users affected
Users of Cisco’s Expressway Series, Unified Communications, Snort 3, and IOS XR products are advised to update to the latest versions to mitigate risks.
Build these skills
Watch the daily brief
Sources
- Cisco Patches 34 Vulnerabilities Across Multiple Products (SecurityWeek)
