Vendor · Vulnerability hub
Cisco vulnerabilities
Vulnerabilities in Cisco IOS XE, ASA, and other network infrastructure — the gear that, when compromised, hands attackers the keys to entire networks.
We track 106 Cisco CVEs, 103 of them on CISA's Known Exploited Vulnerabilities catalog (7 flagged for ransomware use). The latest KEV addition is CVE-2026-20320, added .
- CVEs tracked
- 106
- On CISA KEV
- 103
- Ransomware use
- 7
- Rated critical
- 31
Most-exploited Cisco products
IOS and IOS XE21 on KEVIOS12 on KEVAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)10 on KEV · 3 ransomwareCatalyst SD-WAN Manager6 on KEVIOS XR6 on KEVSmall Business RV160, RV260, RV340, and RV345 Series Routers5 on KEVAdaptive Security Appliance (ASA)4 on KEVIOS XE4 on KEVIdentity Services Engine3 on KEVIOS, IOS XR, and IOS XE3 on KEVNX-OS1 on KEVSecure Firewall Management Center (FMC)3 on KEV · 2 ransomware
Latest Cisco coverage
Our reporting filed under Cisco, plus any story that cites one of its CVEs.
● Breaking
cisco
CISA Adds Cisco BroadWorks XXE Flaw to KEV, Patch Now
CISA says CVE-2026-20320 in Cisco BroadWorks is exploited in attacks. Cisco patched it in August; federal agencies have until November 24. Here is the order of work.
read →
cisco
Cisco Patches ASA/FTD VPN Zero-Day, Active Attacks
CVE-2026-76418 lets unauthenticated attackers crash Cisco ASA and FTD firewalls via SSL VPN. Cisco confirmed active exploitation; patches released October 29.
read →
cisco
Cisco Patches 34 CVEs, Six Critical Across Products
Cisco released patches for 34 CVEs across Expressway, Unified Communications, and Snort 3. Six are critical-severity; no exploitation confirmed.
read →
cisco
Cisco Patches Exploited Email Gateway File Write Bug
Cisco patches a second critical SEG zero-day in two months: unauthenticated attackers can write files to the OS. Exploitation is active. Patch immediately.
read →
cisco
Cisco Patches Five CVSS 9.8 Flaws in NX-OS
Cisco issued advisories for five critical NX-OS vulnerabilities, all CVSS 9.8, enabling unauthenticated remote code execution with root on Nexus data center switches.
read →
cloud
Fleet MDM Auth Bypass Allows Rogue Device Enrollment
CVE-2026-103264 (CVSS 9.1) in Fleet MDM before 4.87.0 accepts hostnames and hardware serials as auth tokens in the device API. Patch available: Fleet 4.87.0.
read →
- Cisco SD-WAN Manager Auth Bypass Exploited: Patch Now
- InfraTrust: Network Management Systems Under Attack
- kcp Front-Proxy Lets Attackers Impersonate Any User
- Microsoft Fabric Auth Bypass Reaches CVSS 10.0
- WSO2 CVSS 10 JWT Bypass Exploited in the Wild
- Cisco ISE Zero-Day CVSS 10.0 Under Active Exploitation
- Rapid7 Tracks Active Exploits Against GitLab Path Traversal
- Cisco Email Gateway SQLi Grants Root, Now in KEV
- Metasploit Drops 16 Modules, Five on CISA KEV
- Cisco FMC Hit by Qilin Ransomware, State-Sponsored Actors
- CISA Sept. 12: Patch Cisco, Citrix, Fortinet Today
- Cisco Confirms FMC CVSS 10 Auth Bypass Exploited
- MikroTik Patches Exploited SSH Auth Bypass
- Cisco Patches Critical RCE in Nexus 9000 Switches
- Chinese Fire Ant Buries Spy Tunnels in Cisco IOS XR
- Fortinet Patches Critical FortiWeb Auth Bypass, CVSS 9.8
- Cisco ASA/FTD VPN Flaw Exploited, CISA Sets Aug 14 Deadline
- CISA KEV: Cisco FMC Hard-Coded Password Now Exploited
- AIVD/MIVD: Russia hijacks IP cameras on NATO convoy routes
- Notarized Werkbit.app carries CrashStealer past Gatekeeper
- Cisco IOS 12.4 CSRF From 2008 Lands in CISA KEV
- First joint EU-UK cyber sanctions name 33 Russian targets
- Seven years on, CVE-2018-0171 draws a 13-state advisory
- Cisco Confirms Active Exploitation of Unified CM Flaw
›1 older article
Known exploited Cisco vulnerabilities
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV | Patch by |
|---|---|---|---|---|---|
| CVE-2026-20320 Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability | [ HIGH ] | 7.5 | 0.8% | ||
| CVE-2026-76418 Cisco ASA/FTD SSL VPN Secondary Auth Logic Error Enables Remote DoSwrite-up | [ HIGH ] | 8.6 | 0.8% | ||
| CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability | [ CRITICAL ] | 9.8 | 6.2% | ||
| CVE-2026-76504 Cisco Catalyst SD-WAN Manager Authentication Bypasswrite-up | [ CRITICAL ] | 9.8 | 38.9% | ||
| CVE-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerabilitywrite-up | [ CRITICAL ] | 10.0 | 75.6% | ||
| CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerabilitywrite-up | [ CRITICAL ] | 9.8 | 40.2% | ||
| CVE-2026-20079 Cisco FMC Authentication Bypass Enables Root OS Accesswrite-up | [ CRITICAL ] | 10.0 | 88.7% | ||
| CVE-2026-20349 Cisco ASA and FTD VPN Heap Inspection Denial-of-Service Flawwrite-up | [ HIGH ] | 8.6 | 1.0% | ||
| CVE-2026-20316 Hard-coded credential in Cisco Secure FMC enables unauthenticated loginransomware usewrite-up | [ MEDIUM ] | 5.3 | 35.1% | ||
| CVE-2008-4128 Cisco IOS 12.4 HTTP admin CSRF on the 871 Integrated Services Routerwrite-up | [ MEDIUM ] | 4.3 | 33.9% | ||
| CVE-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | [ HIGH ] | 8.6 | 88.5% | ||
| CVE-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | [ MEDIUM ] | 6.5 | 29.1% | ||
| CVE-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | [ HIGH ] | 7.8 | 25.3% | ||
| CVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | [ CRITICAL ] | 10.0 | 91.1% | ||
| CVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | [ MEDIUM ] | 6.5 | 35.3% | ||
| CVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | [ HIGH ] | 7.5 | 8.3% | ||
| CVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | [ MEDIUM ] | 5.4 | 25.8% | ||
| CVE-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerabilityransomware use | [ CRITICAL ] | 10.0 | 44.4% | ||
| CVE-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | [ CRITICAL ] | 10.0 | 87.6% | ||
| CVE-2022-20775 Cisco SD-WAN Path Traversal Vulnerability | [ HIGH ] | 7.8 | 12.0% | ||
| CVE-2026-20045 Cisco Unified Communications Products Code Injection Vulnerability | [ HIGH ] | 8.2 | 4.5% | ||
| CVE-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability | [ CRITICAL ] | 10.0 | 32.4% | ||
| CVE-2025-20352 Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | [ HIGH ] | 7.7 | 40.6% | ||
| CVE-2025-20362 Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | [ MEDIUM ] | 6.5 | 86.7% | ||
| CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | [ CRITICAL ] | 9.9 | 72.0% | ||
| CVE-2025-20337 Cisco Identity Services Engine Injection Vulnerability | [ CRITICAL ] | 10.0 | 74.5% | ||
| CVE-2025-20281 Cisco Identity Services Engine Injection Vulnerability | [ CRITICAL ] | 10.0 | 97.6% | ||
| CVE-2024-20439 Cisco Smart Licensing Utility Static Credential Vulnerability | [ CRITICAL ] | 9.8 | 97.1% | ||
| CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability | [ MEDIUM ] | 6.5 | 54.1% | ||
| CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability | [ MEDIUM ] | 6.1 | 22.6% | ||
| CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability | [ MEDIUM ] | 5.8 | 15.9% | ||
| CVE-2024-20399 Cisco NX-OS Command Injection Vulnerability | [ MEDIUM ] | 6.0 | 4.3% | ||
| CVE-2024-20359 Cisco ASA and FTD Privilege Escalation Vulnerability | [ MEDIUM ] | 6.0 | 18.8% | ||
| CVE-2024-20353 Cisco ASA and FTD Denial of Service Vulnerability | [ HIGH ] | 8.6 | 69.8% | ||
| CVE-2020-3259 Cisco ASA and FTD Information Disclosure Vulnerabilityransomware use | [ HIGH ] | 7.5 | 71.5% | ||
| CVE-2023-20273 Cisco IOS XE Web UI Command Injection Vulnerability | [ HIGH ] | 7.2 | 92.9% | ||
| CVE-2023-20198 Cisco IOS XE Web UI Privilege Escalation Zero-Daywrite-up | [ CRITICAL ] | 10.0 | 99.8% | ||
| CVE-2023-20109 Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | [ MEDIUM ] | 6.6 | 2.5% | ||
| CVE-2023-20269 Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerabilityransomware use | [ MEDIUM ] | 5.0 | 26.6% | ||
| CVE-2016-6415 Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability | [ HIGH ] | 7.5 | 87.7% | ||
| CVE-2004-1464 Cisco IOS Denial-of-Service Vulnerability | [ MEDIUM ] | 5.9 | 4.8% | ||
| CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 21.3% | ||
| CVE-2020-3433 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerabilityransomware use | [ HIGH ] | 7.8 | 10.0% | ||
| CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerabilityransomware use | [ MEDIUM ] | 6.5 | 28.5% | ||
| CVE-2019-15271 Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability | [ HIGH ] | 8.8 | 5.5% | ||
| CVE-2016-6367 Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 22.6% | ||
| CVE-2016-6366 Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability | [ HIGH ] | 8.8 | 87.6% | ||
| CVE-2022-20821 Cisco IOS XR Open Port Vulnerability | [ MEDIUM ] | 6.5 | 11.5% | ||
| CVE-2018-0147 Cisco Secure Access Control System Java Deserialization Vulnerability | [ CRITICAL ] | 9.8 | 18.2% | ||
| CVE-2018-0125 Cisco VPN Routers Remote Code Execution Vulnerability | [ CRITICAL ] | 9.8 | 55.2% | ||
| CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability | [ CRITICAL ] | 9.8 | 99.0% | ||
| CVE-2015-0666 Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability | [ HIGH ] | 7.5 | 40.4% | ||
| CVE-2010-3035 Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | [ HIGH ] | 7.5 | 5.7% | ||
| CVE-2009-2055 Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | [ MEDIUM ] | 5.9 | 3.3% | ||
| CVE-2022-20708 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | [ CRITICAL ] | 10.0 | 14.9% | ||
| CVE-2022-20703 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | [ CRITICAL ] | 10.0 | 9.2% | ||
| CVE-2022-20701 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | [ CRITICAL ] | 10.0 | 9.7% | ||
| CVE-2022-20700 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | [ CRITICAL ] | 10.0 | 5.7% | ||
| CVE-2022-20699 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | [ CRITICAL ] | 10.0 | 72.5% | ||
| CVE-2019-1652 Cisco Small Business Routers Improper Input Validation Vulnerability | [ HIGH ] | 7.2 | 95.9% | ||
| CVE-2018-0180 Cisco IOS Software Denial-of-Service Vulnerability | [ MEDIUM ] | 5.9 | 4.9% | ||
| CVE-2018-0179 Cisco IOS Software Denial-of-Service Vulnerability | [ MEDIUM ] | 5.9 | 4.9% | ||
| CVE-2018-0175 Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | [ HIGH ] | 8.0 | 3.5% | ||
| CVE-2018-0174 Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability | [ HIGH ] | 8.6 | 7.6% | ||
| CVE-2018-0173 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | [ HIGH ] | 8.6 | 7.6% | ||
| CVE-2018-0172 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | [ HIGH ] | 8.6 | 7.8% | ||
| CVE-2018-0167 Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | [ HIGH ] | 8.8 | 3.4% | ||
| CVE-2018-0161 Cisco IOS Software Resource Management Errors Vulnerability | [ MEDIUM ] | 6.3 | 4.1% | ||
| CVE-2018-0159 Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability | [ HIGH ] | 7.5 | 6.9% | ||
| CVE-2018-0158 Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability | [ HIGH ] | 8.6 | 7.2% | ||
| CVE-2018-0156 Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability | [ HIGH ] | 7.5 | 9.4% | ||
| CVE-2018-0155 Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability | [ HIGH ] | 8.6 | 7.7% | ||
| CVE-2018-0154 Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability | [ HIGH ] | 7.5 | 7.1% | ||
| CVE-2018-0151 Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability | [ CRITICAL ] | 9.8 | 14.2% | ||
| CVE-2017-6744 Cisco IOS Software SNMP Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 7.3% | ||
| CVE-2017-6743 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 10.9% | ||
| CVE-2017-6740 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 11.1% | ||
| CVE-2017-6739 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 10.9% | ||
| CVE-2017-6738 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 10.9% | ||
| CVE-2017-6737 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 45.0% | ||
| CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 70.4% | ||
| CVE-2017-6663 Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability | [ MEDIUM ] | 6.5 | 2.1% | ||
| CVE-2017-6627 Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability | [ HIGH ] | 7.5 | 6.2% | ||
| CVE-2017-12319 Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability | [ MEDIUM ] | 5.9 | 5.2% | ||
| CVE-2017-12240 Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability | [ CRITICAL ] | 9.8 | 13.8% | ||
| CVE-2017-12238 Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability | [ MEDIUM ] | 6.5 | 2.0% | ||
| CVE-2017-12237 Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability | [ HIGH ] | 7.5 | 7.1% | ||
| CVE-2017-12235 Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability | [ HIGH ] | 7.5 | 7.1% | ||
| CVE-2017-12234 Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | [ HIGH ] | 7.5 | 7.1% | ||
| CVE-2017-12233 Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | [ HIGH ] | 7.5 | 7.1% | ||
| CVE-2017-12232 Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability | [ MEDIUM ] | 6.5 | 2.2% | ||
| CVE-2017-12231 Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability | [ HIGH ] | 7.5 | 7.1% | ||
| CVE-2021-1498 Cisco HyperFlex HX Data Platform Command Injection Vulnerability | [ CRITICAL ] | 9.8 | 100.0% | ||
| CVE-2021-1497 Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | [ CRITICAL ] | 9.8 | 99.9% | ||
| CVE-2020-3580 Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerabilityransomware use | [ MEDIUM ] | 6.1 | 85.6% | ||
| CVE-2020-3569 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | [ HIGH ] | 8.6 | 3.3% | ||
| CVE-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | [ HIGH ] | 8.6 | 3.7% | ||
| CVE-2020-3452 Cisco ASA and FTD Read-Only Path Traversal Vulnerability | [ HIGH ] | 7.5 | 100.0% | ||
| CVE-2020-3161 Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | [ CRITICAL ] | 9.8 | 83.9% | ||
| CVE-2020-3118 Cisco IOS XR Software Discovery Protocol Format String Vulnerability | [ HIGH ] | 8.8 | 11.7% | ||
| CVE-2019-1653 Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | [ HIGH ] | 7.5 | 99.9% | ||
| CVE-2018-0296 Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | [ HIGH ] | 7.5 | 99.9% | ||
| CVE-2018-0171 Cisco Smart Install unauthenticated RCE in IOS and IOS XEwrite-up | [ CRITICAL ] | 9.8 | 99.5% |
Every Cisco CVE on CISA's KEV catalog that we hold, newest KEV addition first. "Patch by" is CISA's BOD 22-01 deadline for US federal agencies, a useful priority signal for everyone else.
Other Cisco CVEs we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV |
|---|---|---|---|---|
| CVE-2026-76501 Cisco NX-OS SRv6 NGOAM unauthenticated root RCEwrite-up | [ CRITICAL ] | 9.8 | 0.5% | — |
| CVE-2026-76471 Cisco NX-OS NX-API unauthenticated root RCEwrite-up | [ CRITICAL ] | 9.8 | 0.5% | — |
| CVE-2026-20212 Unauthenticated RCE in Cisco Nexus 9000 Silicon One Switcheswrite-up | [ CRITICAL ] | 9.8 | 0.8% | — |
Not on CISA KEV as of our last sync. Severity and CVSS as stated by NVD or the vendor; EPSS from FIRST.org.
Machine-readable: /api/v1/vendors/cisco.json.
Every CVE row links to its record with the CISA required action, catalog coverage and primary sources. We describe impact and remediation only; no exploit code. See the full KEV tracker, the vendor scorecard, or all vendors.