Cisco released security updates to address vulnerabilities in Cisco Secure Client and Secure Client for Linux. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected device.

CISA encourages users and administrators to review the following security releases and apply the necessary updates:

 Cisco Secure Client Carriage Return Line Feed Injection Vulnerability
 Cisco Secure Client for Linux with ISE Posture Module Privilege Escalation Vulnerability