Cisco IOS Vulnerability CVE-2008-4128 Under Active Exploitation

CISA warns that CVE-2008-4128, a CSRF flaw in Cisco IOS 12.4 (affecting 871 ISRs), is being actively exploited since July 2026 and has been added to the Known Exploited Vulnerabilities Catalog; attacks, potentially tied to Russian state actors, target poorly configured routers worldwide and administrators are urged to update or replace vulnerable devices and follow CISA mitigation guidance.