Security News > 2018 > March > Cisco Patches Two Critical RCE Bugs in IOS XE Software

2018-03-28 21:35
Cisco releases 22 patches as part of its semiannual Cisco IOS and IOS XE software security advisory.
News URL
http://threatpost.com/cisco-patches-two-critical-rce-bugs-in-ios-xe-software/130852/
Related news
- Gladinet’s Triofox and CentreStack Under Active Exploitation via Critical RCE Vulnerability (source)
- Critical Erlang/OTP SSH pre-auth RCE is 'Surprisingly Easy' to exploit, patch now (source)
- Critical Erlang/OTP SSH RCE bug now has public exploits, patch now (source)
- Critical Commvault RCE vulnerability fixed, PoC available (CVE-2025-34028) (source)
- Critical Langflow RCE flaw exploited to hack AI app servers (source)
- SysAid Patches 4 Critical Flaws Enabling Pre-Auth RCE in On-Premise Version (source)
- Cisco Patches CVE-2025-20188 (10.0 CVSS) in IOS XE That Enables Root Exploits via JWT (source)
- Cisco fixes max severity IOS XE flaw letting attackers hijack devices (source)
- Unpatched critical bugs in Versa Concerto lead to auth bypass, RCE (source)