CISA Warns of Decades

Cybersecuritynews •Abinaya • July 14, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that attackers are actively exploiting CVE-2008-4128, a cross-site request forgery (CSRF) vulnerability affecting Cisco IOS versions 12.4(12) and 12.4(4). This vulnerability was added to CISA’s Known Exploited Vulnerabilities Catalog on July 13, 2026, underscoring that even legacy networking flaws can pose security risks […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco IOS Vulnerability CVE-2008-4128 Under Active Exploitation CISA has warned of ongoing attacks exploiting the CVE-2008-4128 vulnerability in Cisco IOS 12.4, a cross-site request forgery flaw. This vulnerability, which has been known since 2008, allows attackers to execute arbitrary commands on affected routers. The vulnerability was added to CISA's Known Exploited Vulnerabilities Catalog on July 13, 2026. Attackers, potentially linked to Russian state actors, are targeting poorly configured devices globally. The advisory emphasizes the need for IT managers to check for vulnerable devices and apply necessary updates or replacements. CISA has provided a protection guide detailing countermeasures against these attacks. The vulnerability affects Cisco's 871 Integrated Services Router and poses a medium risk (CVSS 4.3). Recent attacks have highlighted the ongoing threat posed by legacy vulnerabilities in critical infrastructure. Security professionals are urged to implement recommended security measures immediately. 5 sources 80

Extracted Entities

CISA Warns of Decades

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)