Vendor
Cisco
- CVEs tracked · all time
- 104
- in CISA KEV · all time
- 24
- articles · since 11 Sep
- 49
- articles · all time
- 198
49 articles since 11 Sep; 4 CISA notices, marked below the bars.
Show as table
| Day (UTC) | Articles |
|---|---|
| Fri 11 Sep | 2 |
| Mon 14 Sep | 2 |
| Tue 15 Sep | 6 |
| Wed 16 Sep | 3 |
| Thu 17 Sep | 6 |
| Fri 18 Sep | 1 |
| Mon 21 Sep | 1 |
| Wed 30 Sep | 4 |
| Thu 1 Oct | 5 |
| Mon 5 Oct | 1 |
| Wed 7 Oct | 3 |
| Thu 8 Oct | 2 |
| Wed 14 Oct | 3 |
| Thu 15 Oct | 4 |
| Fri 16 Oct | 1 |
| Mon 19 Oct | 1 |
| Thu 22 Oct | 4 |
Products: Catalyst SD-WAN, Catalyst SD-WAN Controller and Manager, Catalyst SD-WAN Manager, Catalyst SD-WAN Manger and 48 more
Catalyst SD-WANCatalyst SD-WAN Controller and ManagerCatalyst SD-WAN ManagerCatalyst SD-WAN MangerCisco BroadWorksCisco Campus Gateway SoftwareCisco Catalyst CenterCisco Catalyst SD-WAN ControllerCisco Catalyst SD-WAN ManagerCisco Crosswork Network Change AutomationCisco Crosswork PlanningCisco Cyber VisionCisco Enterprise NFV Infrastructure SoftwareCisco FinesseCisco Identity Services Engine SoftwareCisco IOS XR SoftwareCisco IoT Field Network Director (IoT-FND)Cisco ISE Passive Identity ConnectorCisco License On-PremCisco Meraki MR Wireless Access Points SoftwareCisco Meraki MV FirmwareCisco Meraki MX FirmwareCisco NX-OS SoftwareCisco NX-OS System Software in ACI ModeCisco Open Source Snort3Cisco Secure EmailCisco Secure Email and Web ManagerCisco Secure EndpointCisco Secure Firewall Adaptive Security Appliance (ASA) SoftwareCisco Secure Firewall Management Center (FMC)Cisco Secure Firewall Threat Defense (FTD) SoftwareCisco Secure WorkloadCisco Session Initiation Protocol (SIP) SoftwareCisco Small Business Smart and Managed SwitchesCisco Smart Software Manager On-PremCisco TelePresence Video Communication Server (VCS) ExpresswayCisco Umbrella Insights Virtual ApplianceCisco Unified Computing System (Managed)Cisco Unified Computing System (Standalone)Cisco Unified Computing System E-Series Software (UCSE)Cisco Unity ConnectionCisco UTD SNORT IPS Engine SoftwareIdentity Services EngineIOSIOS and IOS XENX-OSSD-WANSecure Email GatewaySecure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseSecure Firewall Management Center (FMC)Unified Communications Manager
CVEs
104 CVEs, the 40 listed known exploited firstCVE-2020-3259Cisco ASA and FTD Information Disclosure VulnerabilityCVSS7.5HighExploited72%EPSS0articles
CVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCVSS9.8CriticalExploited2.1%EPSS9articles
CVE-2026-76461Cisco Secure Email Gateway SQL Injection VulnerabilityCVSS9.8CriticalExploited30%EPSS10articles
CVE-2026-76504Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCVSS9.8CriticalExploited1.8%EPSS10articles
CVE-2026-76460Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityCVSS10.0CriticalExploited67%EPSS8articles
CVE-2026-20127Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityCVSS10.0CriticalExploited89%EPSS20articles
CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCVSS10.0CriticalExploited92%EPSS10articles
CVE-2026-20079Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVSS10.0CriticalExploited88%EPSS14articles
CVE-2026-20316Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityCVSS5.3MediumExploited35%EPSS10articles
CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityCVSS8.6HighExploited1.0%EPSS7articles
CVE-2018-0171Cisco IOS and IOS XE Software Smart Install Remote Code Execution VulnerabilityCVSS7.5HighExploited99.4%EPSS1article
CVE-2008-4128Cisco IOS Cross-Site Request Forgery VulnerabilityCVSS4.3MediumExploited34%EPSS4articles
28 more CVEs
CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityCVSS8.6HighExploited88%EPSS16articles
CVE-2026-20245Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityCVSS7.8HighExploited25%EPSS17articles
CVE-2026-20262Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityCVSS6.5MediumExploited28%EPSS9articles
CVE-2026-20131Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityCVSS10.0CriticalExploited43%EPSS18articles
CVE-2025-20333Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityCVSS9.9CriticalExploited71%EPSS3articles
CVE-2025-20362Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityCVSS6.5MediumExploited87%EPSS3articles
CVE-2026-20133Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityCVSS6.5MediumExploited31%EPSS5articles
CVE-2026-20122Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityCVSS5.4MediumExploited26%EPSS8articles
CVE-2026-20128Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityCVSS7.5HighExploited7.3%EPSS8articles
CVE-2026-20045Cisco Unified Communications Products Code Injection VulnerabilityCVSS8.2HighExploited4.5%EPSS4articles
CVE-2026-76466Cisco Expressway Series Remote Code Execution VulnerabilityCVSS9.8Critical–Not in KEV0.4%EPSS2articles
CVE-2026-76474Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication VulnerabilitiesCVSS9.8Critical–Not in KEV0.4%EPSS2articles
CVE-2026-76473Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.CVSS9.8Critical–Not in KEV0.4%EPSS2articles
CVE-2026-20043Multiple Cisco Products Snort 3 Software Hardening Release: October 2026CVSS9.0Critical–Not in KEV0.4%EPSS1article
CVE-2026-76524Open Source Snort 3 Control Channel Socket Aribitrary Command Execution VulnerabilityCVSS7.8High–Not in KEV0.2%EPSS1article
CVE-2026-20291Multiple Cisco Products Snort 3 Software Hardening Release: October 2026CVSS7.8High–Not in KEV0.2%EPSS0articles
CVE-2026-20356Multiple Cisco Products Snort 3 Software Hardening Release: October 2026CVSS7.5High–Not in KEV0.4%EPSS0articles
CVE-2026-20236Multiple Cisco Products Snort 3 Software Hardening Release: October 2026CVSS7.5High–Not in KEV0.4%EPSS0articles
CVE-2026-20011Multiple Cisco Products Snort 3 SMTP MIME Denial of Service VulnerabilityCVSS5.8Medium–Not in KEV0.5%EPSS1article
CVE-2026-20221Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service VulnerabilitiesCVSS5.8Medium–Not in KEV0.5%EPSS1article
CVE-2026-76445Multiple Cisco Products Snort 3 Denial of Service VulnerabilityCVSS5.3Medium–Not in KEV0.4%EPSS1article
CVE-2026-76487Cisco Unified Communications Manager Improper Access Control VulnerabilityCVSS5.3Medium–Not in KEV0.5%EPSS1article
CVE-2026-76490Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write VulnerabilitiesCVSS8.6High–Not in KEV0.3%EPSS1article
CVE-2026-76497Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File VulnerabilitiesCVSS6.6Medium–Not in KEV0.1%EPSS1article
CVE-2026-76435Cisco Expressway Series Information Disclosure VulnerabilityCVSS5.3Medium–Not in KEV0.3%EPSS1article
CVE-2026-76482Cisco License On-Prem Security Hardening ReleaseCVSS10.0Critical–Not in KEV0.2%EPSS2articles
- Cisco Patches Critical Expressway Flaw That Could Run Commands as RootSecurityWeek
- Cisco Patches 13 Snort 3 Flaws, Including Critical Code Execution RiskSecurityOnline
- Cisco fixes critical Unified CM flaws that could expose networksSecurityOnline
- Cisco Patches Root Access Flaw in Expressway GatewaysSecurityOnline
- Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress PluginSecurityOnline
- China-linked hackers exploited BeyondTrust zero-day to steal credentialsDark Reading
- CISA Flags Exploited Firewall, Email Gateway and Backup Software FlawsSecurity Affairs
- Cisco and Palo Alto Patch Exploited Flaws Enabling Root AccessSOCRadar
- Cisco Fixes Actively Exploited Secure Email Gateway Flaw Allowing Root AccessSecurity Affairs
- Attackers Exploit Critical Cisco Email Gateway Flaw to Gain Root AccessSecurityWeek
- Cisco Email Gateways Face Active Attacks That Could Expose Cluster SSH KeysSecurityOnline
- CISA Flags Exploited Cisco Email Gateway Flaw With Critical ScoreCISA · official notice
- Cisco Email Gateway Flaw Exploited to Run Commands as RootThe Hacker News
- Cisco Patches 35 Flaws, Including Critical NX-OS Bugs Enabling Root AccessSecurityWeek
- Cisco Finesse SSRF Flaw Could Expose Data, With Patches Due in 2027SecurityOnline
- Cisco Patches Critical Flaw That Could Break License On-Prem SecuritySecurityOnline
- Cisco fixes critical Nexus flaw that could let attackers run code as rootSecurityOnline
- Cisco Patches Critical NX-OS Flaws That Could Crash Nexus SwitchesSecurityOnline
- Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at RiskSecurityOnline
- Cisco SD-WAN Zero Day Exposes Internet Facing Systems to AttackersInfosecurity
- Actively Exploited Cisco SD-WAN Flaw Grants Unauthenticated Admin AccessSOCRadar
- Cisco SD-WAN Flaw Exploited to Bypass Authentication as AdminThe Hacker News
- CISA Flags Actively Exploited Cisco SD-WAN Authentication FlawSecurity Affairs
- Cisco Patches Actively Exploited SD-WAN Manager Auth BypassSecurityWeek
- Cisco SD-WAN Flaw Exploited to Grant Attackers Admin AccessRapid7
- Cisco Patches Exploited SD-WAN Flaw Enabling Unauthenticated Admin AccessSecurityOnline
- CISA Warns of Active Exploitation in Cisco SD-WAN Manager FlawCISA · official notice
- Cisco Warns of Active Exploitation in Critical SD-WAN FlawThe Hacker News
- Cisco Warns of Actively Exploited Flaws Enabling Root AccessSecurityOnline
- Cisco Patches Exploited ISE Flaw That Grants Attackers Root AccessDark Reading
- Cisco Patches Dozens of Flaws as ISE Zero Day Faces ExploitationSecurityWeek
- Attackers Exploit Critical Cisco ISE Flaw for Root AccessInfosecurity
- CISA Flags Actively Exploited Cisco, Acronis and Pixel FlawsSecurity Affairs
- Cisco Patches Zero Day Letting Attackers Take Root Access in ISESecurityWeek
- Cisco Patches Firewall Flaws Enabling Unauthenticated Root AccessSecurityOnline
- Cisco Patches Critical ISE Flaws Enabling Unauthenticated Admin AccessSecurityOnline
- Cisco ISE Flaw Exploited to Grant Unauthenticated Root AccessSecurityOnline
- Attackers Exploit Cisco ISE Flaw to Bypass Management InterfaceCISA · official notice
- Cisco Warns Attackers Are Exploiting Critical Secure Email Gateway FlawSOCRadar
- CISA Flags Critical Cisco Email Gateway Flaw Exploited in AttacksSecurity Affairs
- Cisco Email Gateway Zero Day Let Attackers Gain Root Access RemotelyRapid7
- Cisco Secure Email Gateways Hit by Actively Exploited Root Access Zero DaySecurity Affairs
- Cisco Secure Email Gateways Hit by Actively Exploited Root FlawSecurityWeek
- Cisco Patches Actively Exploited Flaws in Secure Email AppliancesSecurityOnline
- Cisco Email Gateway Flaw Exploited to Gain Root Access via EmailSecurityOnline
- Russia-linked hackers exploit Cisco firewall flaws to deploy Cyclops BlinkDark Reading
- CISA Warns of Actively Exploited Cisco Email Gateway FlawCISA · official notice
- Cisco Firewall Flaws Exploited to Deploy Qilin RansomwareSecurity Affairs
- Cisco Firewall Flaws Exploited to Deploy Web Shells and RansomwareThe Hacker News
- CISA Flags Four Actively Exploited Flaws Including Cisco Zero DaySecurity Affairs
The latest 50 are listed. Every article is in the RSS feed.