Hackers Exploiting Cisco IOS XE Vulnerability in the Wild to Deploy BADCANDY Web Shell

Cybersecuritynews •Guru Baran • November 1, 2025

Share: View original

Cyber Security News is a Dedicated News Platform For Cyber News, Cyber Attack News, Hacking News & Vulnerability Analysis.

© - Cyber Security News

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco IOS XE Vulnerability Exploited for BADCANDY Web Shell Deployment Hackers are actively exploiting a vulnerability in Cisco IOS XE to deploy the BADCANDY web shell. This exploitation is occurring in the wild, affecting systems running the vulnerable software. The BADCANDY web shell allows attackers to gain unauthorized access and control over compromised devices. 3 sources 29

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)

Platforms (1)