Cisco IOS Vulnerability CVE-2008-4128 Under Active Exploitation

CISA warns that CVE-2008-4128, a CSRF vulnerability in Cisco IOS 12.4 affecting Cisco 871 routers, is being actively exploited since July 2026 and was added to CISA's Known Exploited Vulnerabilities Catalog; attacks are possibly linked to Russian state actors and organizations are urged to identify and remediate or replace vulnerable devices using CISA guidance.