Cisco AP patch flaw
- A flawed Cisco software update causes wireless access‑point logs to grow until flash storage fills. - Logs can grow by about 5MB per day, eventually preventing devices from receiving further patches. - That edge‑device fragility can disrupt scanners, cameras, and IoT in warehouses and hinder future patching (csoonline.com).
Cisco is telling customers to patch some wireless access points after a software bug began filling their flash storage with logs, blocking future upgrades. (cisco.com) The company’s April 14, 2026 field notice says the problem affects access points running Cisco IOS XE 17.12.4, 17.12.5, 17.12.6, or 17.12.6a. Cisco rated the notice “Critical” and said the devices can fail to download new software images or Access Point Service Packs after space runs out. (cisco.com) An access point is the radio that turns a wired network into Wi‑Fi, and its flash storage is the built‑in memory it uses to keep software and logs. Cisco said a library update makes one file on that flash memory keep growing until the device no longer has room for updates. (cisco.com) Cisco said the file can expand by as much as 5 megabytes a day. SDxCentral reported that the overflow can eventually leave affected units unable to install later fixes or stuck in a boot loop. (cisco.com) (sdxcentral.com) The risk lands at the network edge, where access points often support barcode scanners, cameras, handhelds, and other warehouse or retail devices over Wi‑Fi. Network World reported that more than 200 IOS XE-based access-point models are in scope, which turns a logging bug into a fleet-management problem for large operators. (networkworld.com) Cisco’s fix is a software upgrade, not a hardware recall. The field notice says customers should move to a recommended release before flash space is exhausted, because an access point that can no longer take an image may need extra recovery work. (cisco.com) Cisco publishes field notices for significant product issues that require customer action, separate from its security advisories. In this case, the problem is not a remote break-in bug; it is an update defect that can strand devices before the next patch arrives. (cisco.com) (csoonline.com) The immediate job for administrators is simple and time-sensitive: identify access points on the four affected IOS XE releases and upgrade them while they still have space left. Cisco’s warning is that once the flash fills, even the fix can become harder to deliver. (cisco.com)
