Skip to content
Sign in

Vendor

Cisco

Alert
No CISA KEV deadline is open. CISA last added a Cisco CVE on 14 Oct.

Tracked since 22 Jan · latest article 22 Oct · RSS · API

That product is not in Cisco’s coverage, so the whole vendor is shown.

0Open KEV deadlines

None open

6Added to KEV · 90 days

of 101 in the full CISA catalogue · all time

1High exploit odds · current

EPSS top 5%, not in KEV

4Articles · 7 days

usual rate

Exploited, by due date101

Cisco CVEs in CISA KEV with their federal deadlines. None is open.

Exploited Cisco CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2026-76519Secure Email Gateway14 OctPassed 17 Oct9
In CISA KEVCVE-2026-76504Catalyst SD-WAN Manager30 SepPassed 3 Oct10
In CISA KEVCVE-2026-76460Identity Services Engine16 SepPassed 19 Sep8
In CISA KEVCVE-2026-76461Secure Email Gateway14 SepPassed 17 Sep10
In CISA KEVCVE-2026-20079Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management9 SepPassed 12 Sep14
In CISA KEVCVE-2026-20349Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)11 AugPassed 14 Aug7
Show 54 moreCSV of 101 entries for Cisco41 older entries are in the CSV.

Patch cadence and exploit odds

How often CISA adds Cisco CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

2Q1 ’250Q2 ’255Q3 ’251Q4 ’254Q1 ’267Q2 ’267Q3 ’261Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20252
Q2 20250
Q3 20255
Q4 20251
Q1 20264
Q2 20267
Q3 20267
Q4 20261

Fix listed

15 of 112 CVEs in coverage

97 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2018-0171: 99.9th percentile, in CISA KEVCVE-2026-20182: 99.8th percentile, in CISA KEVCVE-2026-20127: 99.8th percentile, in CISA KEVCVE-2026-20079: 99.8th percentile, in CISA KEVCVE-2026-20230: 99.8th percentile, in CISA KEVCVE-2025-20362: 99.7th percentile, in CISA KEVCVE-2026-76460: 99.5th percentile, in CISA KEVCVE-2020-3259: 99.4th percentile, in CISA KEVCVE-2025-20333: 99.4th percentile, in CISA KEVCVE-2026-20131: 98.7th percentile, in CISA KEVCVE-2026-76504: 98.6th percentile, in CISA KEVCVE-2026-20316: 98.4th percentile, in CISA KEVCVE-2008-4128: 98.4th percentile, in CISA KEVCVE-2026-20133: 98.3th percentile, in CISA KEVCVE-2026-76461: 98.2th percentile, in CISA KEVCVE-2026-20262: 98.2th percentile, in CISA KEVCVE-2026-20122: 98th percentile, in CISA KEVCVE-2026-20245: 97.9th percentile, in CISA KEVCVE-2022-20775: 96.2th percentile, in CISA KEVCVE-2026-20128: 94.4th percentile, in CISA KEVCVE-2026-20045: 91.5th percentile, in CISA KEVCVE-2024-20399: 91.1th percentile, in CISA KEVCVE-2026-76519: 82th percentile, in CISA KEVCVE-2026-20349: 63th percentile, in CISA KEVCVE-2026-20181: 95.2th percentileCVE-2026-76455: 89.4th percentileCVE-2026-20305: 75th percentileCVE-2026-20093: 62.3th percentileCVE-2026-20307: 62.1th percentileCVE-2026-20160: 59.9th percentileCVE-2026-20242: 59.1th percentileCVE-2026-20223: 57.5th percentileCVE-2026-20212: 57.4th percentileCVE-2026-20200: 54.2th percentileCVE-2026-20348: 53.7th percentileCVE-2026-20034: 53.4th percentileCVE-2026-20191: 50.8th percentileCVE-2026-20283: 50.3th percentileCVE-2026-20288: 50.3th percentileCVE-2026-20324: 49.8th percentileCVE-2026-76440: 49.7th percentileCVE-2026-76487: 49.1th percentileCVE-2026-20337: 48.6th percentileCVE-2026-20282: 48.3th percentileCVE-2026-20310: 47.9th percentileCVE-2026-76423: 47.7th percentileCVE-2026-76454: 47.6th percentileCVE-2026-20221: 47.4th percentileCVE-2026-20030: 47.1th percentileCVE-2026-20281: 47.1th percentileCVE-2026-20362: 46.9th percentileCVE-2026-20345: 46.4th percentileCVE-2026-20339: 46.4th percentileCVE-2026-20317: 46.3th percentileCVE-2026-76485: 45.2th percentileCVE-2026-20284: 44.9th percentileCVE-2026-76441: 44.8th percentileCVE-2026-76443: 44.6th percentileCVE-2026-20353: 44.6th percentileCVE-2026-20274: 44.6th percentileCVE-2026-76445: 44.5th percentileCVE-2026-20011: 44.5th percentileCVE-2026-20231: 44.4th percentileCVE-2026-76437: 44th percentileCVE-2026-20328: 43.9th percentileCVE-2026-20190: 42.9th percentileCVE-2026-20320: 42.3th percentileCVE-2026-20344: 42.2th percentileCVE-2026-76473: 42th percentileCVE-2026-20279: 42th percentileCVE-2026-20315: 42th percentileCVE-2026-20303: 41.7th percentileCVE-2026-76471: 41.7th percentileCVE-2026-76474: 40.8th percentileCVE-2026-76442: 40.3th percentileCVE-2026-20319: 40.3th percentileCVE-2026-20330: 39.6th percentileCVE-2026-20329: 39.6th percentileCVE-2026-20318: 38.1th percentileCVE-2026-20236: 38th percentileCVE-2026-76490: 38th percentileCVE-2026-20356: 37.9th percentileCVE-2026-76435: 37.4th percentileCVE-2026-20119: 36.2th percentileCVE-2026-20098: 36.1th percentileCVE-2026-76466: 35.8th percentileCVE-2026-20332: 34th percentileCVE-2026-20185: 32.8th percentileCVE-2026-76452: 30.8th percentileCVE-2026-76480: 30.6th percentileCVE-2026-20113: 30.4th percentileCVE-2026-20043: 30.1th percentileCVE-2026-20114: 28.8th percentileCVE-2026-20118: 26.1th percentileCVE-2026-20188: 23.7th percentileCVE-2026-76459: 23.4th percentileCVE-2026-20035: 23.1th percentileCVE-2026-20167: 19.5th percentileCVE-2026-20112: 15.8th percentileCVE-2026-76483: 12.7th percentileCVE-2026-76482: 12.2th percentileCVE-2026-20355: 10.2th percentileCVE-2026-20354: 10.2th percentileCVE-2026-76464: 8.8th percentileCVE-2026-20293: 7.6th percentileCVE-2026-20040: 7.3th percentileCVE-2026-76524: 7.2th percentileCVE-2026-20074: 5.9th percentileCVE-2026-20291: 5th percentileCVE-2026-76497: 4.7th percentileCVE-2026-20046: 3.3th percentileCVE-2026-20110: 2.8th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2018-017199.9
CVE-2026-2018299.8
CVE-2026-2012799.8
CVE-2026-2007999.8
CVE-2026-2023099.8
CVE-2025-2036299.7
CVE-2026-7646099.5
CVE-2020-325999.4
CVE-2025-2033399.4
CVE-2026-2013198.7
CVE-2026-7650498.6
CVE-2026-2031698.4
CVE-2008-412898.4
CVE-2026-2013398.3
CVE-2026-7646198.2
CVE-2026-2026298.2
CVE-2026-2012298
CVE-2026-2024597.9
CVE-2022-2077596.2
CVE-2026-2018195.2
CVE-2026-2012894.4
CVE-2026-2004591.5
CVE-2024-2039991.1
CVE-2026-7645589.4
CVE-2026-7651982
CVE-2026-2030575
CVE-2026-2034963
CVE-2026-2009362.3
CVE-2026-2030762.1
CVE-2026-2016059.9
CVE-2026-2024259.1
CVE-2026-2022357.5
CVE-2026-2021257.4
CVE-2026-2020054.2
CVE-2026-2034853.7
CVE-2026-2003453.4
CVE-2026-2019150.8
CVE-2026-2028350.3
CVE-2026-2028850.3
CVE-2026-2032449.8
CVE-2026-7644049.7
CVE-2026-7648749.1
CVE-2026-2033748.6
CVE-2026-2028248.3
CVE-2026-2031047.9
CVE-2026-7642347.7
CVE-2026-7645447.6
CVE-2026-2022147.4
CVE-2026-2003047.1
CVE-2026-2028147.1
CVE-2026-2036246.9
CVE-2026-2034546.4
CVE-2026-2033946.4
CVE-2026-2031746.3
CVE-2026-7648545.2
CVE-2026-2028444.9
CVE-2026-7644144.8
CVE-2026-7644344.6
CVE-2026-2035344.6
CVE-2026-2027444.6
CVE-2026-7644544.5
CVE-2026-2001144.5
CVE-2026-2023144.4
CVE-2026-7643744
CVE-2026-2032843.9
CVE-2026-2019042.9
CVE-2026-2032042.3
CVE-2026-2034442.2
CVE-2026-7647342
CVE-2026-2027942
CVE-2026-2031542
CVE-2026-2030341.7
CVE-2026-7647141.7
CVE-2026-7647440.8
CVE-2026-7644240.3
CVE-2026-2031940.3
CVE-2026-2033039.6
CVE-2026-2032939.6
CVE-2026-2031838.1
CVE-2026-2023638
CVE-2026-7649038
CVE-2026-2035637.9
CVE-2026-7643537.4
CVE-2026-2011936.2
CVE-2026-2009836.1
CVE-2026-7646635.8
CVE-2026-2033234
CVE-2026-2018532.8
CVE-2026-7645230.8
CVE-2026-7648030.6
CVE-2026-2011330.4
CVE-2026-2004330.1
CVE-2026-2011428.8
CVE-2026-2011826.1
CVE-2026-2018823.7
CVE-2026-7645923.4
CVE-2026-2003523.1
CVE-2026-2016719.5
CVE-2026-2011215.8
CVE-2026-7648312.7
CVE-2026-7648212.2
CVE-2026-2035510.2
CVE-2026-2035410.2
CVE-2026-764648.8
CVE-2026-202937.6
CVE-2026-200407.3
CVE-2026-765247.2
CVE-2026-200745.9
CVE-2026-202915
CVE-2026-764974.7
CVE-2026-200463.3
CVE-2026-201102.8

Coverage201 articles · all time

The latest 50 of 201 articles naming Cisco, in the shared story grammar.

Full timeline
Quiet for 6 dayslast report 22 Oct50 articles9 outlets

50 articles from 9 outlets since 10 Sep. Quiet since 22 Oct.

Now10 Sep17201 Oct5791215182124First reportSecurity Affairs · 10 Sep, 19:46CISA alert14 Sep, 20:32 · official
  • Thu 10 Sep, 19:46 UTC. Security Affairs, first report. CISA Flags Four Actively Exploited Flaws Including Cisco Zero Day. Cites a CVE in CISA KEV.
  • Fri 11 Sep, 07:48 UTC. The Hacker News, its first report on the story. Cisco Firewall Flaws Exploited to Deploy Web Shells and Ransomware. Cites a CVE in CISA KEV.
  • Fri 11 Sep, 10:37 UTC. Security Affairs. Cisco Firewall Flaws Exploited to Deploy Qilin Ransomware. Cites a CVE in CISA KEV.
  • Mon 14 Sep, 20:32 UTC. CISA, its first report on the story. CISA Warns of Actively Exploited Cisco Email Gateway Flaw. Cites a CVE in CISA KEV.
  • Mon 14 Sep, 22:16 UTC. Dark Reading, its first report on the story. Russia-linked hackers exploit Cisco firewall flaws to deploy Cyclops Blink. Cites a CVE in CISA KEV.
  • Tue 15 Sep, 04:41 UTC. SecurityOnline, its first report on the story. Cisco Email Gateway Flaw Exploited to Gain Root Access via Email. Cites a CVE in CISA KEV.
  • Tue 15 Sep, 04:41 UTC. SecurityOnline. Cisco Patches Actively Exploited Flaws in Secure Email Appliances.
  • Tue 15 Sep, 05:52 UTC. SecurityWeek, its first report on the story. Cisco Secure Email Gateways Hit by Actively Exploited Root Flaw. Cites a CVE in CISA KEV.
  • Tue 15 Sep, 13:13 UTC. Security Affairs. Cisco Secure Email Gateways Hit by Actively Exploited Root Access Zero Day. Cites a CVE in CISA KEV.
  • Tue 15 Sep, 13:13 UTC. Rapid7, its first report on the story. Cisco Email Gateway Zero Day Let Attackers Gain Root Access Remotely. Cites a CVE in CISA KEV.
  • Tue 15 Sep, 21:21 UTC. Security Affairs. CISA Flags Critical Cisco Email Gateway Flaw Exploited in Attacks. Cites a CVE in CISA KEV.
  • Wed 16 Sep, 14:51 UTC. SOCRadar, its first report on the story. Cisco Warns Attackers Are Exploiting Critical Secure Email Gateway Flaw. Cites a CVE in CISA KEV.
  • Wed 16 Sep, 19:03 UTC. CISA. Attackers Exploit Cisco ISE Flaw to Bypass Management Interface. Cites a CVE in CISA KEV.
  • Wed 16 Sep, 19:36 UTC. SecurityOnline. Cisco ISE Flaw Exploited to Grant Unauthenticated Root Access. Cites a CVE in CISA KEV.
  • Thu 17 Sep, 02:36 UTC. SecurityOnline. Cisco Patches Critical ISE Flaws Enabling Unauthenticated Admin Access.
  • Thu 17 Sep, 02:36 UTC. SecurityOnline. Cisco Patches Firewall Flaws Enabling Unauthenticated Root Access.
  • Thu 17 Sep, 06:36 UTC. SecurityWeek. Cisco Patches Zero Day Letting Attackers Take Root Access in ISE. Cites a CVE in CISA KEV.
  • Thu 17 Sep, 10:42 UTC. Security Affairs. CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws. Cites a CVE in CISA KEV.
  • Thu 17 Sep, 11:19 UTC. Infosecurity, its first report on the story. Attackers Exploit Critical Cisco ISE Flaw for Root Access. Cites a CVE in CISA KEV.
  • Thu 17 Sep, 12:30 UTC. SecurityWeek. Cisco Patches Dozens of Flaws as ISE Zero Day Faces Exploitation.
  • Fri 18 Sep, 20:23 UTC. Dark Reading. Cisco Patches Exploited ISE Flaw That Grants Attackers Root Access. Cites a CVE in CISA KEV.
  • Mon 21 Sep, 02:59 UTC. SecurityOnline. Cisco Warns of Actively Exploited Flaws Enabling Root Access. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 15:38 UTC. The Hacker News. Cisco Warns of Active Exploitation in Critical SD-WAN Flaw. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 17:32 UTC. CISA. CISA Warns of Active Exploitation in Cisco SD-WAN Manager Flaw. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 18:38 UTC. SecurityOnline. Cisco Patches Exploited SD-WAN Flaw Enabling Unauthenticated Admin Access. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 18:38 UTC. Rapid7. Cisco SD-WAN Flaw Exploited to Grant Attackers Admin Access. Cites a CVE in CISA KEV.
  • Thu 1 Oct, 08:38 UTC. SecurityWeek. Cisco Patches Actively Exploited SD-WAN Manager Auth Bypass. Cites a CVE in CISA KEV.
  • Thu 1 Oct, 09:51 UTC. Security Affairs. CISA Flags Actively Exploited Cisco SD-WAN Authentication Flaw. Cites a CVE in CISA KEV.
  • Thu 1 Oct, 11:31 UTC. The Hacker News. Cisco SD-WAN Flaw Exploited to Bypass Authentication as Admin. Cites a CVE in CISA KEV.
  • Thu 1 Oct, 13:01 UTC. SOCRadar. Actively Exploited Cisco SD-WAN Flaw Grants Unauthenticated Admin Access. Cites a CVE in CISA KEV.
  • Thu 1 Oct, 14:52 UTC. Infosecurity. Cisco SD-WAN Zero Day Exposes Internet Facing Systems to Attackers. Cites a CVE in CISA KEV.
  • Mon 5 Oct, 04:06 UTC. SecurityOnline. Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at Risk. Cites a CVE in CISA KEV.
  • Wed 7 Oct, 18:00 UTC. SecurityOnline. Cisco Patches Critical NX-OS Flaws That Could Crash Nexus Switches.
  • Wed 7 Oct, 18:00 UTC. SecurityOnline. Cisco fixes critical Nexus flaw that could let attackers run code as root.
  • Wed 7 Oct, 18:00 UTC. SecurityOnline. Cisco Patches Critical Flaw That Could Break License On-Prem Security.
  • Thu 8 Oct, 03:26 UTC. SecurityOnline. Cisco Finesse SSRF Flaw Could Expose Data, With Patches Due in 2027.
  • Thu 8 Oct, 15:54 UTC. SecurityWeek. Cisco Patches 35 Flaws, Including Critical NX-OS Bugs Enabling Root Access.
  • Wed 14 Oct, 19:26 UTC. The Hacker News. Cisco Email Gateway Flaw Exploited to Run Commands as Root. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 19:33 UTC. CISA. CISA Flags Exploited Cisco Email Gateway Flaw With Critical Score. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 23:29 UTC. SecurityOnline. Cisco Email Gateways Face Active Attacks That Could Expose Cluster SSH Keys. Cites a CVE in CISA KEV.
  • Thu 15 Oct, 07:01 UTC. SecurityWeek. Attackers Exploit Critical Cisco Email Gateway Flaw to Gain Root Access. Cites a CVE in CISA KEV.
  • Thu 15 Oct, 10:00 UTC. Security Affairs. Cisco Fixes Actively Exploited Secure Email Gateway Flaw Allowing Root Access. Cites a CVE in CISA KEV.
  • Thu 15 Oct, 12:49 UTC. SOCRadar. Cisco and Palo Alto Patch Exploited Flaws Enabling Root Access. Cites a CVE in CISA KEV.
  • Thu 15 Oct, 20:01 UTC. Security Affairs. CISA Flags Exploited Firewall, Email Gateway and Backup Software Flaws. Cites a CVE in CISA KEV.
  • Fri 16 Oct, 20:58 UTC. Dark Reading. China-linked hackers exploited BeyondTrust zero-day to steal credentials. Cites a CVE in CISA KEV.
  • Mon 19 Oct, 01:44 UTC. SecurityOnline. Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress Plugin. Cites a CVE in CISA KEV.
  • Thu 22 Oct, 02:43 UTC. SecurityOnline. Cisco Patches Root Access Flaw in Expressway Gateways.
  • Thu 22 Oct, 02:52 UTC. SecurityOnline. Cisco fixes critical Unified CM flaws that could expose networks.
  • Thu 22 Oct, 04:46 UTC. SecurityOnline. Cisco Patches 13 Snort 3 Flaws, Including Critical Code Execution Risk.
  • Thu 22 Oct, 10:09 UTC. SecurityWeek. Cisco Patches Critical Expressway Flaw That Could Run Commands as Root.
  • Known exploited CVE
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 50 articles as a list
  1. Thu 10 SepDay 01
    1. CISA Flags Four Actively Exploited Flaws Including Cisco Zero Day19:46 · Security Affairs · First report · Exploited CVE · Known exploited CVE
  2. Fri 11 SepDay 12
    1. Cisco Firewall Flaws Exploited to Deploy Web Shells and Ransomware07:48 · The Hacker News · Known exploited CVE
    2. Cisco Firewall Flaws Exploited to Deploy Qilin Ransomware10:37 · Security Affairs · Known exploited CVE

  3. Quiet for 3 days

    Mon 14 SepDay 42
    1. CISA Warns of Actively Exploited Cisco Email Gateway Flaw20:32 · CISA · official · CISA alert · Picked up again · Known exploited CVE
    2. Russia-linked hackers exploit Cisco firewall flaws to deploy Cyclops Blink22:16 · Dark Reading · Known exploited CVE
  4. Tue 15 SepDay 56
    1. Cisco Email Gateway Flaw Exploited to Gain Root Access via Email04:41 · SecurityOnline · Known exploited CVE
    2. Cisco Patches Actively Exploited Flaws in Secure Email Appliances04:41 · SecurityOnline
    3. Cisco Secure Email Gateways Hit by Actively Exploited Root Flaw05:52 · SecurityWeek · Known exploited CVE
    Show 3 more from 15 Sep
    1. Cisco Secure Email Gateways Hit by Actively Exploited Root Access Zero Day13:13 · Security Affairs · Known exploited CVE
    2. Cisco Email Gateway Zero Day Let Attackers Gain Root Access Remotely13:13 · Rapid7 · Known exploited CVE
    3. CISA Flags Critical Cisco Email Gateway Flaw Exploited in Attacks21:21 · Security Affairs · Known exploited CVE
  5. Wed 16 SepDay 63
    1. Cisco Warns Attackers Are Exploiting Critical Secure Email Gateway Flaw14:51 · SOCRadar · Known exploited CVE
    2. Attackers Exploit Cisco ISE Flaw to Bypass Management Interface19:03 · CISA · official · Known exploited CVE
    3. Cisco ISE Flaw Exploited to Grant Unauthenticated Root Access19:36 · SecurityOnline · Known exploited CVE
  6. Thu 17 SepDay 76
    1. Cisco Patches Critical ISE Flaws Enabling Unauthenticated Admin Access02:36 · SecurityOnline
    2. Cisco Patches Firewall Flaws Enabling Unauthenticated Root Access02:36 · SecurityOnline
    3. Cisco Patches Zero Day Letting Attackers Take Root Access in ISE06:36 · SecurityWeek · Known exploited CVE
    Show 3 more from 17 Sep
    1. CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws10:42 · Security Affairs · Known exploited CVE
    2. Attackers Exploit Critical Cisco ISE Flaw for Root Access11:19 · Infosecurity · Known exploited CVE
    3. Cisco Patches Dozens of Flaws as ISE Zero Day Faces Exploitation12:30 · SecurityWeek
  7. Fri 18 SepDay 81
    1. Cisco Patches Exploited ISE Flaw That Grants Attackers Root Access20:23 · Dark Reading · Known exploited CVE

  8. Quiet for 2 days

    Mon 21 SepDay 111
    1. Cisco Warns of Actively Exploited Flaws Enabling Root Access02:59 · SecurityOnline · Picked up again · Known exploited CVE

  9. Quiet for 10 days

    Wed 30 SepDay 204
    1. Cisco Warns of Active Exploitation in Critical SD-WAN Flaw15:38 · The Hacker News · Picked up again · Known exploited CVE
    2. CISA Warns of Active Exploitation in Cisco SD-WAN Manager Flaw17:32 · CISA · official · Known exploited CVE
    3. Cisco Patches Exploited SD-WAN Flaw Enabling Unauthenticated Admin Access18:38 · SecurityOnline · Known exploited CVE
    4. Cisco SD-WAN Flaw Exploited to Grant Attackers Admin Access18:38 · Rapid7 · Known exploited CVE
  10. Thu 1 OctDay 215
    1. Cisco Patches Actively Exploited SD-WAN Manager Auth Bypass08:38 · SecurityWeek · Known exploited CVE
    2. CISA Flags Actively Exploited Cisco SD-WAN Authentication Flaw09:51 · Security Affairs · Known exploited CVE
    3. Cisco SD-WAN Flaw Exploited to Bypass Authentication as Admin11:31 · The Hacker News · Known exploited CVE
    Show 2 more from 1 Oct
    1. Actively Exploited Cisco SD-WAN Flaw Grants Unauthenticated Admin Access13:01 · SOCRadar · Known exploited CVE
    2. Cisco SD-WAN Zero Day Exposes Internet Facing Systems to Attackers14:52 · Infosecurity · Known exploited CVE

  11. Quiet for 4 days

    Mon 5 OctDay 251
    1. Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at Risk04:06 · SecurityOnline · Picked up again · Known exploited CVE

  12. Quiet for 3 days

    Wed 7 OctDay 273
    1. Cisco Patches Critical NX-OS Flaws That Could Crash Nexus Switches18:00 · SecurityOnline · Picked up again
    2. Cisco fixes critical Nexus flaw that could let attackers run code as root18:00 · SecurityOnline
    3. Cisco Patches Critical Flaw That Could Break License On-Prem Security18:00 · SecurityOnline
  13. Thu 8 OctDay 282
    1. Cisco Finesse SSRF Flaw Could Expose Data, With Patches Due in 202703:26 · SecurityOnline
    2. Cisco Patches 35 Flaws, Including Critical NX-OS Bugs Enabling Root Access15:54 · SecurityWeek

  14. Quiet for 6 days

    Wed 14 OctDay 343
    1. Cisco Email Gateway Flaw Exploited to Run Commands as Root19:26 · The Hacker News · Picked up again · Known exploited CVE
    2. CISA Flags Exploited Cisco Email Gateway Flaw With Critical Score19:33 · CISA · official · Known exploited CVE
    3. Cisco Email Gateways Face Active Attacks That Could Expose Cluster SSH Keys23:29 · SecurityOnline · Known exploited CVE
  15. Thu 15 OctDay 354
    1. Attackers Exploit Critical Cisco Email Gateway Flaw to Gain Root Access07:01 · SecurityWeek · Known exploited CVE
    2. Cisco Fixes Actively Exploited Secure Email Gateway Flaw Allowing Root Access10:00 · Security Affairs · Known exploited CVE
    3. Cisco and Palo Alto Patch Exploited Flaws Enabling Root Access12:49 · SOCRadar · Known exploited CVE
    4. CISA Flags Exploited Firewall, Email Gateway and Backup Software Flaws20:01 · Security Affairs · Known exploited CVE
  16. Fri 16 OctDay 361
    1. China-linked hackers exploited BeyondTrust zero-day to steal credentials20:58 · Dark Reading · Known exploited CVE

  17. Quiet for 2 days

    Mon 19 OctDay 391
    1. Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress Plugin01:44 · SecurityOnline · Picked up again · Known exploited CVE

  18. Quiet for 3 days

    Thu 22 OctDay 424
    1. Cisco Patches Root Access Flaw in Expressway Gateways02:43 · SecurityOnline · Picked up again
    2. Cisco fixes critical Unified CM flaws that could expose networks02:52 · SecurityOnline
    3. Cisco Patches 13 Snort 3 Flaws, Including Critical Code Execution Risk04:46 · SecurityOnline
    4. Cisco Patches Critical Expressway Flaw That Could Run Commands as Root10:09 · SecurityWeek

All CVEs in coverage112

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2018-0171Exploited

    Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

    7.5High99.4% EPSS · 1 article
  • CVE-2026-20182Exploited

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    10.0Critical92% EPSS · 10 articles
  • CVE-2026-20127Exploited

    Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

    10.0Critical89% EPSS · 20 articles
  • CVE-2026-20079Exploited

    Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

    10.0Critical88% EPSS · 14 articles
  • CVE-2026-20230Exploited

    Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

    8.6High88% EPSS · 16 articles
  • CVE-2025-20362Exploited

    Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

    6.5Medium87% EPSS · 3 articles
  • CVE-2026-76460Exploited

    Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

    10.0Critical76% EPSS · 8 articles
  • CVE-2020-3259Exploited

    Cisco ASA and FTD Information Disclosure Vulnerability

    7.5High72% EPSS · 0 articles
  • CVE-2025-20333Exploited

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

    9.9Critical71% EPSS · 3 articles
  • CVE-2026-20131Exploited

    Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

    10.0Critical43% EPSS · 18 articles
  • CVE-2026-76504Exploited

    Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

    9.8Critical39% EPSS · 10 articles
  • CVE-2026-20316Exploited

    Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

    5.3Medium35% EPSS · 10 articles
Show 100 more CVEs
  • CVE-2008-4128Exploited

    Cisco IOS Cross-Site Request Forgery Vulnerability

    4.3Medium34% EPSS · 4 articles
  • CVE-2026-20133Exploited

    Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

    6.5Medium31% EPSS · 5 articles
  • CVE-2026-76461Exploited

    Cisco Secure Email Gateway SQL Injection Vulnerability

    9.8Critical30% EPSS · 10 articles
  • CVE-2026-20262Exploited

    Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

    6.5Medium29% EPSS · 9 articles
  • CVE-2026-20122Exploited

    Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

    5.4Medium26% EPSS · 8 articles
  • CVE-2026-20245Exploited

    Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

    7.8High25% EPSS · 17 articles
  • CVE-2022-20775Exploited

    Cisco SD-WAN Path Traversal Vulnerability

    7.8High12% EPSS · 11 articles
  • CVE-2026-20128Exploited

    Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

    7.5High7.3% EPSS · 8 articles
  • CVE-2026-20045Exploited

    Cisco Unified Communications Products Code Injection Vulnerability

    8.2High4.5% EPSS · 4 articles
  • CVE-2024-20399Exploited

    Cisco NX-OS Command Injection Vulnerability

    6.0Medium4.3% EPSS · 1 article
  • CVE-2026-76519Exploited

    Cisco Secure Email Gateway Relative Path Traversal Vulnerability

    9.8Critical2.1% EPSS · 9 articles
  • CVE-2026-20349Exploited

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

    8.6High1.0% EPSS · 7 articles
  • CVE-2026-20181

    Cisco Identity Services Engine Remote Code Execution Vulnerability

    9.1Critical8.9% EPSS · 3 articles
  • CVE-2026-76455

    Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities

    9.8Critical3.6% EPSS · 1 article
  • CVE-2026-20305

    Cisco Identity Services Engine Command Injection Vulnerability

    9.1Critical1.6% EPSS · 1 article
  • CVE-2026-20093

    Cisco Integrated Management Controller Authentication Bypass Vulnerability

    9.8Critical1.0% EPSS · 4 articles
  • CVE-2026-20307

    Cisco Identity Services Engine Remote Code Execution Vulnerability

    9.9Critical1.0% EPSS · 1 article
  • CVE-2026-20160

    Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability

    9.8Critical0.9% EPSS · 3 articles
  • CVE-2026-20242

    Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

    9.8Critical0.9% EPSS · 1 article
  • CVE-2026-20223

    Cisco Secure Workload Unauthorized API Access Vulnerability

    10.0Critical0.8% EPSS · 2 articles
  • CVE-2026-20212

    Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability

    9.8Critical0.8% EPSS · 2 articles
  • CVE-2026-20200

    Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability

    8.8High0.7% EPSS · 1 article
  • CVE-2026-20348

    ClamAV XAR File Format Processing Memory Corruption Vulnerability

    7.5High0.7% EPSS · 2 articles
  • CVE-2026-20034

    Cisco Unity Connection Remote Code Execution Vulnerability

    8.8High0.7% EPSS · 2 articles
  • CVE-2026-20191

    Cisco Catalyst Center Arbitrary File Read Vulnerability

    7.5High0.7% EPSS · 1 article
  • CVE-2026-20283

    Cisco Identity Services Engine IPSec Open API Command Injection Vulnerability

    6.5Medium0.6% EPSS · 1 article
  • CVE-2026-20288

    Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability

    6.5Medium0.6% EPSS · 1 article
  • CVE-2026-20324

    Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerability

    9.9Critical0.6% EPSS · 1 article
  • CVE-2026-76440

    Cisco Secure Email Gateway Security Hardening Release

    9.8Critical0.6% EPSS · 1 article
  • CVE-2026-76487

    Cisco Unified Communications Manager Improper Access Control Vulnerability

    5.3Medium0.6% EPSS · 1 article
  • CVE-2026-20337

    ClamAV ZIP File Format Processing Memory Corruption Vulnerability

    7.5High0.6% EPSS · 2 articles
  • CVE-2026-20282

    Cisco Identity Services Engine Authenticated Write Vulnerability

    4.9Medium0.6% EPSS · 1 article
  • CVE-2026-20310

    Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access

    9.1Critical0.6% EPSS · 1 article
  • CVE-2026-76423

    Cisco ISE API Authentication Bypass Vulnerability

    10.0Critical0.6% EPSS · 1 article
  • CVE-2026-76454

    Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability

    9.1Critical0.6% EPSS · 2 articles
  • CVE-2026-20221

    Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities

    5.8Medium0.6% EPSS · 1 article
  • CVE-2026-20030

    Cisco Crosswork Security Hardening Release: August 2026

    10.0Critical0.6% EPSS · 1 article
  • CVE-2026-20281

    Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability

    7.5High0.6% EPSS · 1 article
  • CVE-2026-20362

    Cisco Finesse Server-Side Request Forgery Vulnerability

    7.2High0.6% EPSS · 1 article
  • CVE-2026-20345

    ClamAV GPT File Format Processing Memory Corruption Vulnerability

    7.5High0.6% EPSS · 2 articles
  • CVE-2026-20339

    ClamAV PESpin File Format Processing Integer Overflow Vulnerability

    7.5High0.6% EPSS · 2 articles
  • CVE-2026-20317

    Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities

    10.0Critical0.6% EPSS · 1 article
  • CVE-2026-76485

    Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-20284

    Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability

    9.1Critical0.5% EPSS · 2 articles
  • CVE-2026-76441

    Cisco Secure Email Gateway Security Hardening Release

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-76443

    Cisco Secure Email Gateway Security Hardening Release

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-20353

    Cisco Secure Email Gateway Security Hardening Release

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-20274

    Cisco IOS XR Software Security Hardening Release: September 2026

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-76445

    Multiple Cisco Products Snort 3 Denial of Service Vulnerability

    5.3Medium0.5% EPSS · 1 article
  • CVE-2026-20011

    Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability

    5.8Medium0.5% EPSS · 1 article
  • CVE-2026-20231

    Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities

    9.9Critical0.5% EPSS · 1 article
  • CVE-2026-76437

    Cisco Smart Software Manager On-Prem Command Injection Vulnerability

    4.9Medium0.5% EPSS · 1 article
  • CVE-2026-20328

    Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerability

    9.1Critical0.5% EPSS · 2 articles
  • CVE-2026-20190

    Cisco Identity Services Engine Information Disclosure Vulnerability

    7.5High0.5% EPSS · 2 articles
  • CVE-2026-20320

    Cisco BroadWorks vulnerability

    7.5High0.5% EPSS · 1 article
  • CVE-2026-20344

    Cisco Secure Firewall Management Center Software SQL Injection Vulnerability

    8.8High0.5% EPSS · 1 article
  • CVE-2026-76473

    Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.

    9.8Critical0.5% EPSS · 2 articles
  • CVE-2026-20279

    Cisco IOS XR Software Security Hardening Release: September 2026

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-20315

    Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities

    10.0Critical0.5% EPSS · 1 article
  • CVE-2026-20303

    Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities

    9.9Critical0.5% EPSS · 1 article
  • CVE-2026-76471

    Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-76474

    Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities

    9.8Critical0.5% EPSS · 2 articles
  • CVE-2026-76442

    Cisco Secure Email Gateway Security Hardening Release

    7.5High0.5% EPSS · 1 article
  • CVE-2026-20319

    Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management Vulnerabilities

    7.5High0.5% EPSS · 1 article
  • CVE-2026-20330

    Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities

    9.9Critical0.5% EPSS · 1 article
  • CVE-2026-20329

    Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabilities

    9.9Critical0.5% EPSS · 1 article
  • CVE-2026-20318

    Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilities

    9.6Critical0.4% EPSS · 1 article
  • CVE-2026-20236

    Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

    7.5High0.4% EPSS · 0 articles
  • CVE-2026-76490

    Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities

    8.6High0.4% EPSS · 1 article
  • CVE-2026-20356

    Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

    7.5High0.4% EPSS · 0 articles
  • CVE-2026-76435

    Cisco Expressway Series Information Disclosure Vulnerability

    5.3Medium0.4% EPSS · 1 article
  • CVE-2026-20119

    Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability

    Not scored0.4% EPSS · 2 articles
  • CVE-2026-20098

    Cisco Meeting Management Arbitrary File Upload Vulnerability

    Not scored0.4% EPSS · 2 articles
  • CVE-2026-76466

    Cisco Expressway Series Remote Code Execution Vulnerability

    9.8Critical0.4% EPSS · 2 articles
  • CVE-2026-20332

    Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities

    9.9Critical0.4% EPSS · 2 articles
  • CVE-2026-20185

    Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vunerability

    7.7High0.4% EPSS · 1 article
  • CVE-2026-76452

    Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

    4.9Medium0.4% EPSS · 1 article
  • CVE-2026-76480

    Cisco License On-Prem Security Hardening Release

    9.8Critical0.4% EPSS · 2 articles
  • CVE-2026-20113

    Cisco IOS XE Software vulnerability

    5.3Medium0.4% EPSS · 1 article
  • CVE-2026-20043

    Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

    9.0Critical0.4% EPSS · 1 article
  • CVE-2026-20114

    Cisco IOS XE Software vulnerability

    5.4Medium0.3% EPSS · 1 article
  • CVE-2026-20118

    Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability

    Not scored0.3% EPSS · 1 article
  • CVE-2026-20188

    Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory

    7.5High0.3% EPSS · 1 article
  • CVE-2026-76459

    Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities

    8.8High0.3% EPSS · 1 article
  • CVE-2026-20035

    Cisco Unity Connection Server-Side Request Forgery Vulnerability

    7.2High0.3% EPSS · 2 articles
  • CVE-2026-20167

    Cisco IoT Field Network Director Remote Device Denial of Service Vulnerability

    7.7High0.3% EPSS · 1 article
  • CVE-2026-20112

    Cisco IOS XE Software vulnerability

    4.8Medium0.3% EPSS · 1 article
  • CVE-2026-76483

    Cisco License On-Prem Security Hardening Release

    9.1Critical0.2% EPSS · 1 article
  • CVE-2026-76482

    Cisco License On-Prem Security Hardening Release

    10.0Critical0.2% EPSS · 2 articles
  • CVE-2026-20355

    Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

    5.9Medium0.2% EPSS · 2 articles
  • CVE-2026-20354

    Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

    5.9Medium0.2% EPSS · 2 articles
  • CVE-2026-76464

    Cisco Meraki Hardening Release October 2026 - Buffer Management Vulnerabilities

    9.6Critical0.2% EPSS · 1 article
  • CVE-2026-20293

    Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

    7.1High0.2% EPSS · 2 articles
  • CVE-2026-20040

    Cisco IOS XR Software CLI Privilege Escalation Vulnerability

    Not scored0.2% EPSS · 1 article
  • CVE-2026-76524

    Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability

    7.8High0.2% EPSS · 1 article
  • CVE-2026-20074

    Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability

    Not scored0.2% EPSS · 1 article
  • CVE-2026-20291

    Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

    7.8High0.2% EPSS · 0 articles
  • CVE-2026-76497

    Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities

    6.6Medium0.2% EPSS · 1 article
  • CVE-2026-20046

    Cisco IOS XR Software CLI Privilege Escalation Vulnerability

    Not scored0.1% EPSS · 1 article
  • CVE-2026-20110

    Cisco IOS XE Software vulnerability

    6.5Medium0.1% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in