Cisco has disclosed a new security vulnerability in its widely used network management software that has already been exploited by attackers, marking the latest in a sustained campaign targeting the company's products this year.