Cisco and industrial hardware vendors issue critical security patches

Cisco has released security updates to address 35 vulnerabilities across its enterprise networking products. The patches target several product lines, including Nexus switches and the License On-Prem platform. One vulnerability, CVE-2026-76482, has received a maximum CVSS score of 10.0 due to improper cryptographic signature verification, which allows for network-based attacks without user interaction or authentication.

In the operational technology (OT) sector, CISA has issued advisories regarding vulnerabilities in Red Lion N-Tron 700 Series industrial Ethernet switches. These flaws include hard-coded credentials and authentication bypasses that could allow unauthorized administrative access to configuration files. Additionally, CISA reported vulnerabilities in Grid Protection Alliance openPDC and openHistorian software, involving unauthenticated access and unsafe deserialization.

While there is currently no evidence of active exploitation for the Cisco flaws, administrators are urged to apply updates immediately as no manual workarounds exist for the most severe risks.