CISA Warns of Exploitation of 18-Year-Old Cisco IOS Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding active exploitation of CVE-2008-4128, a cross-site request forgery (CSRF) vulnerability in Cisco IOS versions 12.4(12) and 12.4(4). This vulnerability was added to CISA's Known Exploited Vulnerabilities Catalog on July 13, 2026. Attacks are reportedly linked to Russian state actors targeting poorly configured network devices worldwide. CISA has collaborated with international IT security authorities to provide a protection guide for administrators. The vulnerability, known since 2008, allows attackers to trick users into performing actions on vulnerable websites. IT managers are advised to check for affected devices and implement security measures. The attacks may compromise critical infrastructure networks globally. Cisco products remain attractive targets for cybercriminals due to their widespread use.

Key Points: • CISA warns of active exploitation of CVE-2008-4128 in Cisco IOS. • Attacks linked to Russian state actors targeting vulnerable network devices. • IT managers urged to secure routers and update vulnerable systems.