CISCO Security Advisory
Published Date: Not specified
Advisory Summary
🗓️ Calendar Day: 30 Sep 2026
🔔 🛡️ Cisco PSIRT Advance Notice: October 7, 2026 Security Advisories + Security-Hardening Releases
💡 What’s happening
Cisco’s Product Security Incident Response Team (PSIRT) will publish security advisories on October 7, 2026, each paired with fixed software / security-hardening releases for the following product areas:
- Application Policy Infrastructure Controller (APIC) — security hardening release
- Cisco Finesse
- License On-Prem (formerly Cisco Smart Software Manager On-Prem) — security hardening release
- Meraki — security hardening release
- NX-OS Software for MDS 9000, Nexus 3000/7000/9000 Series, plus Nexus 9000 in ACI mode and UCS Fabric Interconnects — security hardening release
✅ Cisco’s recommended action
Cisco strongly advises customers to upgrade to the fixed software versions listed in the advisories to remediate the vulnerabilities to be disclosed on Oct 7, 2026.
- Update batching: Expect multiple vulnerability entries across networking, data center switching, and management components—plan for coordinated change windows.
- Dependence on management plane: Products named here commonly sit close to policy enforcement, licensing, analytics/telephony workflows, and fabric control, where issues can cascade into operational impact.
- Security-hardening releases: These may include configuration/security posture changes beyond a simple CVE patch—validate compatibility with existing automation and compliance baselines.
- Inventory affected deployments: APIC, Finesse, License On-Prem, Meraki orgs, NX-OS variants (including ACI mode), and UCS Fabric Interconnects.
- Stage testing: pre-stage candidate versions in a non-production environment to assess regressions (especially for ACI-mode and UCS FI upgrade paths).
- Change management: align network/fabric maintenance windows and define rollback criteria.
- Operational readiness: ensure teams can execute post-upgrade validation (health checks, service checks, licensing verification, and config drift review).
đź“Ś Information for how Cisco is handling disclosure
Cisco references changes to its PSIRT vulnerability disclosure approach, including AI-accelerated vulnerability discovery dynamics—useful context for how frequency/timing may evolve.
-OS
Reference: Vendor Advisory