Cisco · week of 12 Oct 2026
Cisco security note
Records on this stack that changed between 12 Oct 2026 and the following Monday. Versions come from the stored ranges. A quiet week is not proof the stack is clear.
What changed
CVE-2026-104935 — Patch now
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Affected: 22.8
What we still do not know
CVE-2026-96951 — Patch now
Microsoft Windows Command Injection Vulnerability
No version range is stored, so an installed version cannot be checked.
CVE-2026-76519 — Patch now
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
No version range is stored, so an installed version cannot be checked.
CVE-2025-20341 — Open the advisory
A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected system.
No version range is stored, so an installed version cannot be checked.
CVE-2026-97745 — Check if you run it
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
No version range is stored, so an installed version cannot be checked.
CVE-2026-97739 — Check if you run it
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
No version range is stored, so an installed version cannot be checked.
CVE-2026-100211 — Check if you run it
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
No version range is stored, so an installed version cannot be checked.
CVE-2026-100210 — Check if you run it
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
No version range is stored, so an installed version cannot be checked.
CVE-2026-100209 — Check if you run it
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
No version range is stored, so an installed version cannot be checked.
Share this note
Cisco security note, week of 12 Oct 2026: 1 record has a version a customer can check, and 8 still do not. https://zerodayfindings.com/technologies/cisco/notes/2026-W42