- 210/2026
- High
Cisco has released security updates to address several vulnerabilities affecting multiple Cisco products.
The addressed vulnerabilities could allow the attacker to conduct denial of service attacks or obtain sensitive information on the affected systems.
Sample of addressed vulnerabilities:
1. Cisco Catalyst Center Arbitrary File Read Vulnerability (CVE-2026-20191):
- CVSS: 7.5
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Obtain Information
2. ClamAV PE File Format Processing Memory Corruption Vulnerability (CVE- 2026-20213):
- CVSS: 7.5
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Denial of Service
The affected products:
- Cisco Secure Endpoint Connector.
- Cisco Catalyst Center.
Vulnerabilities
- CVE-2026-20213
- CVE-2026-20214
- CVE-2026-20215
- CVE-2026-20216
- CVE-2026-20217
- CVE-2026-20243
- CVE-2026-20244
- CVE-2026-20191
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.