Major vulnerability found in ancient TACACS+ networking protocol

Reported 25 Sep 2026 by otx · Severity: medium

Australian security firm Elttam discovered a critical pre-authentication remote code execution vulnerability in TACACS+, a 33-year-old protocol handling authentication on networking equipment. The protocol, released by Cisco in 1993 and now baked into almost all modern networking