cisco-sa-notice-I8z3n6lK: Cisco Advance Notification for Publication of November 4, 2026, Security Advisories

Published Oct 28, 2026

Updated

On November 4, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products:Identity Services Engine (ISE)UCS Central SoftwareUnified Communications ManagerTo remediate vulnerabilities to be disclosed on November 4, 2026, Cisco strongly recommends that customers upgrade to the fixed software indicated in the advisories.Important: The Cisco PSIRT does not plan to publish any more security hardening advisories to disclose security vulnerability information for the remainder of calendar year 2026. The next planned publication of advisories for security-hardened releases will be January 20, 2027.For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer-Focused Response to AI-Accelerated Vulnerability Discovery.

Affected Software

3 affected components

Cisco Identity Services Engine (ISE)

Cisco UCS Central Software

Cisco Unified Communications Manager

Event History

Oct 28, 2026

Advisory Published

via Cisco·04:00 PM

Data Sourced

via Cisco·04:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which products should be reviewed when the advisories are published?

Review deployments of Cisco Identity Services Engine (ISE), Cisco UCS Central Software, and Cisco Unified Communications Manager. The notice states that vulnerability information and fixed software releases for these products are planned for publication on November 4, 2026.

Are fixed releases available yet?

No fixed release versions are identified in this advance notice. Customers should check the November 4, 2026 advisories for the applicable fixed software and upgrade guidance.

Can this notice be used to determine whether an installation is vulnerable?

No. The notice does not provide affected versions, vulnerability details, exploit prerequisites, or indicators of compromise. Exposure can only be assessed after the product-specific advisories are published.

When is the next planned publication for security-hardened releases after this advisory cycle?

Cisco PSIRT states that it does not plan further security-hardening advisories for the rest of calendar year 2026. The next planned publication for security-hardened releases is January 20, 2027.

cisco-sa-notice-I8z3n6lK: Cisco Advance Notification for Publication of November 4, 2026, Security Advisories

Affected Software

Event History

Frequently Asked Questions

Which products should be reviewed when the advisories are published?

Are fixed releases available yet?

Can this notice be used to determine whether an installation is vulnerable?

When is the next planned publication for security-hardened releases after this advisory cycle?

Company

Resources

Contact

Frequently Asked Questions

Which products should be reviewed when the advisories are published?

Are fixed releases available yet?

Can this notice be used to determine whether an installation is vulnerable?

When is the next planned publication for security-hardened releases after this advisory cycle?