CyberSIXT Search
Vendor

Cisco

CVEs tracked · all time
104
in CISA KEV · all time
24
articles · since 11 Sep
49
articles · all time
198

49 articles since 11 Sep; 4 CISA notices, marked below the bars.

Show as table
Cisco: articles per day
Day (UTC)Articles
Fri 11 Sep2
Mon 14 Sep2
Tue 15 Sep6
Wed 16 Sep3
Thu 17 Sep6
Fri 18 Sep1
Mon 21 Sep1
Wed 30 Sep4
Thu 1 Oct5
Mon 5 Oct1
Wed 7 Oct3
Thu 8 Oct2
Wed 14 Oct3
Thu 15 Oct4
Fri 16 Oct1
Mon 19 Oct1
Thu 22 Oct4
See the full timeline
Products: Catalyst SD-WAN, Catalyst SD-WAN Controller and Manager, Catalyst SD-WAN Manager, Catalyst SD-WAN Manger and 48 more
Catalyst SD-WANCatalyst SD-WAN Controller and ManagerCatalyst SD-WAN ManagerCatalyst SD-WAN MangerCisco BroadWorksCisco Campus Gateway SoftwareCisco Catalyst CenterCisco Catalyst SD-WAN ControllerCisco Catalyst SD-WAN ManagerCisco Crosswork Network Change AutomationCisco Crosswork PlanningCisco Cyber VisionCisco Enterprise NFV Infrastructure SoftwareCisco FinesseCisco Identity Services Engine SoftwareCisco IOS XR SoftwareCisco IoT Field Network Director (IoT-FND)Cisco ISE Passive Identity ConnectorCisco License On-PremCisco Meraki MR Wireless Access Points SoftwareCisco Meraki MV FirmwareCisco Meraki MX FirmwareCisco NX-OS SoftwareCisco NX-OS System Software in ACI ModeCisco Open Source Snort3Cisco Secure EmailCisco Secure Email and Web ManagerCisco Secure EndpointCisco Secure Firewall Adaptive Security Appliance (ASA) SoftwareCisco Secure Firewall Management Center (FMC)Cisco Secure Firewall Threat Defense (FTD) SoftwareCisco Secure WorkloadCisco Session Initiation Protocol (SIP) SoftwareCisco Small Business Smart and Managed SwitchesCisco Smart Software Manager On-PremCisco TelePresence Video Communication Server (VCS) ExpresswayCisco Umbrella Insights Virtual ApplianceCisco Unified Computing System (Managed)Cisco Unified Computing System (Standalone)Cisco Unified Computing System E-Series Software (UCSE)Cisco Unity ConnectionCisco UTD SNORT IPS Engine SoftwareIdentity Services EngineIOSIOS and IOS XENX-OSSD-WANSecure Email GatewaySecure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseSecure Firewall Management Center (FMC)Unified Communications Manager

CVEs

104 CVEs, the 40 listed known exploited first
CVE-2020-3259Cisco ASA and FTD Information Disclosure VulnerabilityCVSS7.5HighExploited72%EPSS0articles
CVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCVSS9.8CriticalExploited2.1%EPSS9articles
CVE-2026-76461Cisco Secure Email Gateway SQL Injection VulnerabilityCVSS9.8CriticalExploited30%EPSS10articles
CVE-2026-76504Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCVSS9.8CriticalExploited1.8%EPSS10articles
CVE-2026-76460Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityCVSS10.0CriticalExploited67%EPSS8articles
CVE-2026-20127Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityCVSS10.0CriticalExploited89%EPSS20articles
CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCVSS10.0CriticalExploited92%EPSS10articles
CVE-2026-20079Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVSS10.0CriticalExploited88%EPSS14articles
CVE-2026-20316Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityCVSS5.3MediumExploited35%EPSS10articles
CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityCVSS8.6HighExploited1.0%EPSS7articles
CVE-2018-0171Cisco IOS and IOS XE Software Smart Install Remote Code Execution VulnerabilityCVSS7.5HighExploited99.4%EPSS1article
CVE-2008-4128Cisco IOS Cross-Site Request Forgery VulnerabilityCVSS4.3MediumExploited34%EPSS4articles
28 more CVEs
CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityCVSS8.6HighExploited88%EPSS16articles
CVE-2026-20245Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityCVSS7.8HighExploited25%EPSS17articles
CVE-2024-20399Cisco NX-OS Command Injection VulnerabilityCVSS6.0MediumExploited4.3%EPSS1article
CVE-2026-20262Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityCVSS6.5MediumExploited28%EPSS9articles
CVE-2026-20131Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityCVSS10.0CriticalExploited43%EPSS18articles
CVE-2025-20333Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityCVSS9.9CriticalExploited71%EPSS3articles
CVE-2025-20362Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityCVSS6.5MediumExploited87%EPSS3articles
CVE-2026-20133Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityCVSS6.5MediumExploited31%EPSS5articles
CVE-2026-20122Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityCVSS5.4MediumExploited26%EPSS8articles
CVE-2026-20128Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityCVSS7.5HighExploited7.3%EPSS8articles
CVE-2022-20775Cisco SD-WAN Path Traversal VulnerabilityCVSS7.8HighExploited12%EPSS11articles
CVE-2026-20045Cisco Unified Communications Products Code Injection VulnerabilityCVSS8.2HighExploited4.5%EPSS4articles
CVE-2026-76466Cisco Expressway Series Remote Code Execution VulnerabilityCVSS9.8Critical–Not in KEV0.4%EPSS2articles
CVE-2026-76474Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication VulnerabilitiesCVSS9.8Critical–Not in KEV0.4%EPSS2articles
CVE-2026-76473Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.CVSS9.8Critical–Not in KEV0.4%EPSS2articles
CVE-2026-20043Multiple Cisco Products Snort 3 Software Hardening Release: October 2026CVSS9.0Critical–Not in KEV0.4%EPSS1article
CVE-2026-76524Open Source Snort 3 Control Channel Socket Aribitrary Command Execution VulnerabilityCVSS7.8High–Not in KEV0.2%EPSS1article
CVE-2026-20291Multiple Cisco Products Snort 3 Software Hardening Release: October 2026CVSS7.8High–Not in KEV0.2%EPSS0articles
CVE-2026-20356Multiple Cisco Products Snort 3 Software Hardening Release: October 2026CVSS7.5High–Not in KEV0.4%EPSS0articles
CVE-2026-20236Multiple Cisco Products Snort 3 Software Hardening Release: October 2026CVSS7.5High–Not in KEV0.4%EPSS0articles
CVE-2026-20011Multiple Cisco Products Snort 3 SMTP MIME Denial of Service VulnerabilityCVSS5.8Medium–Not in KEV0.5%EPSS1article
CVE-2026-20221Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service VulnerabilitiesCVSS5.8Medium–Not in KEV0.5%EPSS1article
CVE-2026-76445Multiple Cisco Products Snort 3 Denial of Service VulnerabilityCVSS5.3Medium–Not in KEV0.4%EPSS1article
CVE-2026-76487Cisco Unified Communications Manager Improper Access Control VulnerabilityCVSS5.3Medium–Not in KEV0.5%EPSS1article
CVE-2026-76490Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write VulnerabilitiesCVSS8.6High–Not in KEV0.3%EPSS1article
CVE-2026-76497Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File VulnerabilitiesCVSS6.6Medium–Not in KEV0.1%EPSS1article
CVE-2026-76435Cisco Expressway Series Information Disclosure VulnerabilityCVSS5.3Medium–Not in KEV0.3%EPSS1article
CVE-2026-76482Cisco License On-Prem Security Hardening ReleaseCVSS10.0Critical–Not in KEV0.2%EPSS2articles

Coverage

198 articles, all timeFull timeline RSS feed
  1. Cisco Patches Critical Expressway Flaw That Could Run Commands as RootSecurityWeek
  2. Cisco Patches 13 Snort 3 Flaws, Including Critical Code Execution RiskSecurityOnline
  3. Cisco fixes critical Unified CM flaws that could expose networksSecurityOnline
  4. Cisco Patches Root Access Flaw in Expressway GatewaysSecurityOnline
  5. Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress PluginSecurityOnline
  6. China-linked hackers exploited BeyondTrust zero-day to steal credentialsDark Reading
  7. CISA Flags Exploited Firewall, Email Gateway and Backup Software FlawsSecurity Affairs
  8. Cisco and Palo Alto Patch Exploited Flaws Enabling Root AccessSOCRadar
  9. Cisco Fixes Actively Exploited Secure Email Gateway Flaw Allowing Root AccessSecurity Affairs
  10. Attackers Exploit Critical Cisco Email Gateway Flaw to Gain Root AccessSecurityWeek
  11. Cisco Email Gateways Face Active Attacks That Could Expose Cluster SSH KeysSecurityOnline
  12. CISA Flags Exploited Cisco Email Gateway Flaw With Critical ScoreCISA · official notice
  13. Cisco Email Gateway Flaw Exploited to Run Commands as RootThe Hacker News
  14. Cisco Patches 35 Flaws, Including Critical NX-OS Bugs Enabling Root AccessSecurityWeek
  15. Cisco Finesse SSRF Flaw Could Expose Data, With Patches Due in 2027SecurityOnline
  16. Cisco Patches Critical Flaw That Could Break License On-Prem SecuritySecurityOnline
  17. Cisco fixes critical Nexus flaw that could let attackers run code as rootSecurityOnline
  18. Cisco Patches Critical NX-OS Flaws That Could Crash Nexus SwitchesSecurityOnline
  19. Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at RiskSecurityOnline
  20. Cisco SD-WAN Zero Day Exposes Internet Facing Systems to AttackersInfosecurity
  21. Actively Exploited Cisco SD-WAN Flaw Grants Unauthenticated Admin AccessSOCRadar
  22. Cisco SD-WAN Flaw Exploited to Bypass Authentication as AdminThe Hacker News
  23. CISA Flags Actively Exploited Cisco SD-WAN Authentication FlawSecurity Affairs
  24. Cisco Patches Actively Exploited SD-WAN Manager Auth BypassSecurityWeek
  25. Cisco SD-WAN Flaw Exploited to Grant Attackers Admin AccessRapid7
  26. Cisco Patches Exploited SD-WAN Flaw Enabling Unauthenticated Admin AccessSecurityOnline
  27. CISA Warns of Active Exploitation in Cisco SD-WAN Manager FlawCISA · official notice
  28. Cisco Warns of Active Exploitation in Critical SD-WAN FlawThe Hacker News
  29. Cisco Warns of Actively Exploited Flaws Enabling Root AccessSecurityOnline
  30. Cisco Patches Exploited ISE Flaw That Grants Attackers Root AccessDark Reading
  31. Cisco Patches Dozens of Flaws as ISE Zero Day Faces ExploitationSecurityWeek
  32. Attackers Exploit Critical Cisco ISE Flaw for Root AccessInfosecurity
  33. CISA Flags Actively Exploited Cisco, Acronis and Pixel FlawsSecurity Affairs
  34. Cisco Patches Zero Day Letting Attackers Take Root Access in ISESecurityWeek
  35. Cisco Patches Firewall Flaws Enabling Unauthenticated Root AccessSecurityOnline
  36. Cisco Patches Critical ISE Flaws Enabling Unauthenticated Admin AccessSecurityOnline
  37. Cisco ISE Flaw Exploited to Grant Unauthenticated Root AccessSecurityOnline
  38. Attackers Exploit Cisco ISE Flaw to Bypass Management InterfaceCISA · official notice
  39. Cisco Warns Attackers Are Exploiting Critical Secure Email Gateway FlawSOCRadar
  40. CISA Flags Critical Cisco Email Gateway Flaw Exploited in AttacksSecurity Affairs
  41. Cisco Email Gateway Zero Day Let Attackers Gain Root Access RemotelyRapid7
  42. Cisco Secure Email Gateways Hit by Actively Exploited Root Access Zero DaySecurity Affairs
  43. Cisco Secure Email Gateways Hit by Actively Exploited Root FlawSecurityWeek
  44. Cisco Patches Actively Exploited Flaws in Secure Email AppliancesSecurityOnline
  45. Cisco Email Gateway Flaw Exploited to Gain Root Access via EmailSecurityOnline
  46. Russia-linked hackers exploit Cisco firewall flaws to deploy Cyclops BlinkDark Reading
  47. CISA Warns of Actively Exploited Cisco Email Gateway FlawCISA · official notice
  48. Cisco Firewall Flaws Exploited to Deploy Qilin RansomwareSecurity Affairs
  49. Cisco Firewall Flaws Exploited to Deploy Web Shells and RansomwareThe Hacker News
  50. CISA Flags Four Actively Exploited Flaws Including Cisco Zero DaySecurity Affairs

The latest 50 are listed. Every article is in the RSS feed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device