Cisco alerts about a critical unpatched zero-day security vulnerability in its IOS XE software that's under active exploitation.