Cisco Advance Notification for Publication of November 4, 2026, Security Advisories
Description
On November 4, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: Identity Services Engine (ISE) UCS Central Software Unified Communications Manager To remediate vulnerabilities to be disclosed on November 4, 2026, Cisco strongly recommends that customers upgrade to the fixed software indicated in the advisories. Important: The Cisco PSIRT does not plan to publish any more security hardening advisories to disclose security vulnerability information for the remainder of calendar year 2026. The next planned publication of advisories for security-hardened releases will be January 20, 2027. For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer-Focused Response to AI-Accelerated Vulnerability Discovery . Security Impact Rating: Informational
What to do
Install the fixed versions listed in the official advisory. If you cannot update right away, apply the workarounds or mitigations it describes and limit access to the affected service.
Turn on Cisco alerts
Details
- Vendor
- Cisco
- Product
- Cisco ISE, UCS Central, Unified Communications Manager
- CVSS score
- not yet available
- Actively exploited
- Not known at this time
- Source
- Cisco PSIRT – original advisory
- Published
- October 28, 2026
The description and the recommended action are quoted from the public advisory (the action is our generic advice); severity, exploitation status and affected versions are compiled automatically from public sources and may contain errors. The vendor's original advisory prevails: check it before taking action. This information is provided without warranty and does not replace a professional assessment.
More Cisco advisories
- Vulnerabilities in Node.js Affecting Cisco Products: October 2026
- Vulnerabilities in PHP Affecting Cisco Products: October 2026
- Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
- Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
- Cisco Finesse Server-Side Request Forgery Vulnerability