Cisco has released emergency security fixes for major flaws in Identity Services Engine (ISE), Secure Firewall Management Center (FMC), and Nexus Dashboard that could let attackers bypass logins, run commands, or gain root control. The September 2026 updates include 20 ISE CVEs, 18 FMC CVEs, and six Nexus Dashboard CVEs; Cisco also said a separate critical ISE authentication-bypass flaw is being exploited as a zero-day. Publicly disclosed ISE issues include CVE-2026-20282, CVE-2026-20283, and CVE-2026-20284.
Why it matters: Organizations using these Cisco management and security platforms should treat this as high priority because the affected products sit in sensitive control points for identity, firewall, and network administration. Update quickly and review Cisco advisories, especially if you run ISE or FMC exposed to internal or external attackers.
Ionut Arghire
2026.09.17
100% relevant
This article establishes a broader September 2026 Cisco patch event centered on dozens of newly fixed critical flaws across ISE, FMC, and Nexus Dashboard, including an exploited ISE zero-day and multiple newly detailed CVEs not covered by the existing FMC-only tracked stories.
← Back to all stories