Serial number: AV26-430
Date: May 6, 2026
On May 6, 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included were updates for the following:
- Cisco Crosswork Network Controller (CNC) – version 7.1 and prior
- Cisco IoT Field Network Director (FND) – version 4 and prior
- Cisco IoT Field Network Director (FND) – versions prior to 5.0.0-117
- Cisco Network Services Orchestrator (NSO) – version 6.3 and prior
- Cisco Network Services Orchestrator (NSO) – versions prior to 6.4.1.3
- Cisco SG350 and SG350X Managed Switch – multiple versions and models
- Cisco Unity Connection – versions prior to 12.5
- Cisco Unity Connection – versions prior to 14SU5
- Cisco Unity Connection – versions prior to 15SU4
The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested recommendations, and apply the necessary updates when available.
- Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities
- Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vulnerability
- Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Connection Exhaustion Denial of Service Vulnerability
- Cisco IoT Field Network Director Vulnerabilities
- Cisco Security Advisories