CISA Flags Cisco, Chrome, and Arista Vulnerabilities Amid Active Attacks

CISA has added Cisco, Chrome, and Arista vulnerabilities to its KEV catalog as evidence of active exploitation emerges.

Key Points:

• Cisco's flaw allows local attackers to execute arbitrary commands on SD-WAN Manager.
• Google Chrome's vulnerability enables remote code execution via crafted HTML pages.
• Arista's EOS flaw may lead to unexpected traffic processing without a planned patch.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified three critical vulnerabilities in popular software and hardware from Cisco, Google Chrome, and Arista, acknowledging reports of their active exploitation. The vulnerability in Cisco Catalyst SD-WAN Manager (CVE-2026-20245) holds a CVSS score of 7.8, allowing authenticated local attackers to execute arbitrary commands as root. This poses significant risks, especially in environments where proper user access controls are not effectively enforced.

Google Chrome's vulnerability (CVE-2026-11645), rated at 8.8, involves the V8 engine and is particularly severe as it allows remote attackers to execute arbitrary code through specially crafted HTML pages. This could lead to widespread compromise of users if not urgently addressed. Lastly, the Arista Extensible Operating System (EOS) vulnerability (CVE-2026-7473) lacks a planned patch despite being reported as exploited in the wild. The issue mainly affects specific Arista series products, and Arista has indicated that any existing configurations could break if a patch were applied. They recommend mitigating this risk through access control lists (ACLs) on upstream devices or directly on affected devices to manage tunnel traffic effectively.

What steps do you think organizations should take to protect themselves from these newly identified vulnerabilities?

Learn More: The Hacker News

Want to stay updated on the latest cyber threats?

👉 [Subscribe to r/PwnHub](https://www.reddit.com/r/pwnhub)