Cisco's Nov 4 advisories: authenticated RCE in UCS Central (CVE-2026-76506), ISE endpoint-certificate authorization bypass, CUCM XSS
- UCS Central: upgrade to 2.1(2c), and restrict the management UI to admin networks.
- ISE / ISE-PIC: apply the patch for your branch. A stolen endpoint certificate could let an attacker pose as a managed device to certificate-based network access, so check certificate issuance logs for requests you can't explain. ISE-PIC is end-of-sale, and 3.4 is its last supported release.
Sources: Cisco: UCS Central Software RCE (cisco-sa-cucs-rce-LzHSFRDQ) · Cisco: ISE Authorization Bypass (cisco-sa-ise-cert-mE9BD5GO) · Cisco: CUCM XSS (cisco-sa-cucm-xss-5mQn2U5z) · Cisco: Notice for Nov 4, 2026 advisories