Skip to content

BadCandy Webshell threatens unpatched Cisco IOS XE devices, warns Australian government

Securityaffairs.Co •Pierluigi Paganini • November 1, 2025

Australia warns of attacks on unpatched Cisco IOS XE devices exploiting CVE-2023-20198, allowing BadCandy webshell install. The Australian Signals Directorate (ASD) warns of ongoing attacks on unpatched Cisco IOS XE devices exploiting CVE-2023-20198, allowing BadCandy webshell infections and admin takeover. “Cyber actors are installing an implant dubbed ‘BADCANDY’ on Cisco IOS XE devices that are vulnerable […]

Extracted Entities

Attack Types (1)

Malware

Countries (1)

Australia

Malware (1)

Badcandy

Platforms (1)

Cisco IOS XE