Cisco is warning that some of its products have a zero-day vulnerability that is now being actively exploited in attacks.