Skip to content
Sign in

Vendor

Cisco

Alert
No CISA KEV deadline is open. CISA last added a Cisco CVE on 29 Oct.

Tracked since 22 Jan · latest article 2 Nov · RSS · API

That product is not in Cisco’s coverage, so the whole vendor is shown.

0Open KEV deadlines

None open

7Added to KEV · 90 days

of 102 in the full CISA catalogue · all time

1High exploit odds · current

EPSS top 5%, not in KEV

12Articles · 7 days

usual rate

Exploited, by due date102

Cisco CVEs in CISA KEV with their federal deadlines. None is open.

Exploited Cisco CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2026-76418Secure Firewall ASA Software and Cisco Secure FTD Software29 OctPassed 1 Nov7
In CISA KEVCVE-2026-76519Secure Email Gateway14 OctPassed 17 Oct9
In CISA KEVCVE-2026-76504Catalyst SD-WAN Manager30 SepPassed 3 Oct10
In CISA KEVCVE-2026-76460Identity Services Engine16 SepPassed 19 Sep8
In CISA KEVCVE-2026-76461Secure Email Gateway14 SepPassed 17 Sep10
In CISA KEVCVE-2026-20079Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management9 SepPassed 12 Sep14
Show 54 moreCSV of 102 entries for Cisco42 older entries are in the CSV.

Patch cadence and exploit odds

How often CISA adds Cisco CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

2Q1 ’250Q2 ’255Q3 ’251Q4 ’254Q1 ’267Q2 ’267Q3 ’262Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20252
Q2 20250
Q3 20255
Q4 20251
Q1 20264
Q2 20267
Q3 20267
Q4 20262

Fix listed

15 of 114 CVEs in coverage

99 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2018-0171: 99.9th percentile, in CISA KEVCVE-2026-20182: 99.8th percentile, in CISA KEVCVE-2026-20127: 99.8th percentile, in CISA KEVCVE-2026-20079: 99.8th percentile, in CISA KEVCVE-2026-20230: 99.8th percentile, in CISA KEVCVE-2025-20362: 99.7th percentile, in CISA KEVCVE-2026-76460: 99.5th percentile, in CISA KEVCVE-2020-3259: 99.4th percentile, in CISA KEVCVE-2025-20333: 99.4th percentile, in CISA KEVCVE-2026-20131: 98.8th percentile, in CISA KEVCVE-2026-76504: 98.6th percentile, in CISA KEVCVE-2026-20316: 98.4th percentile, in CISA KEVCVE-2008-4128: 98.4th percentile, in CISA KEVCVE-2026-20133: 98.3th percentile, in CISA KEVCVE-2026-76461: 98.2th percentile, in CISA KEVCVE-2026-20262: 98.2th percentile, in CISA KEVCVE-2026-20122: 98th percentile, in CISA KEVCVE-2026-20245: 97.9th percentile, in CISA KEVCVE-2022-20775: 96.2th percentile, in CISA KEVCVE-2026-20128: 94.4th percentile, in CISA KEVCVE-2026-20045: 91.6th percentile, in CISA KEVCVE-2024-20399: 91.2th percentile, in CISA KEVCVE-2026-76519: 82.2th percentile, in CISA KEVCVE-2026-20349: 63.2th percentile, in CISA KEVCVE-2026-76418: 57.3th percentile, in CISA KEVCVE-2026-20181: 95.2th percentileCVE-2026-76455: 89.4th percentileCVE-2026-76443: 83.7th percentileCVE-2026-20305: 75.1th percentileCVE-2026-20093: 63.1th percentileCVE-2026-20307: 62.3th percentileCVE-2026-20160: 60.6th percentileCVE-2026-20242: 59.4th percentileCVE-2026-20223: 57.7th percentileCVE-2026-20212: 57.6th percentileCVE-2026-20200: 54.4th percentileCVE-2026-20348: 53.9th percentileCVE-2026-20034: 53.6th percentileCVE-2026-20191: 51.1th percentileCVE-2026-20288: 50.5th percentileCVE-2026-20283: 50.5th percentileCVE-2026-20324: 50th percentileCVE-2026-76440: 49.9th percentileCVE-2026-76487: 49.3th percentileCVE-2026-20337: 48.8th percentileCVE-2026-20282: 48.5th percentileCVE-2026-20310: 48.1th percentileCVE-2026-76423: 47.9th percentileCVE-2026-76454: 47.8th percentileCVE-2026-20221: 47.6th percentileCVE-2026-20030: 47.3th percentileCVE-2026-20281: 47.3th percentileCVE-2026-20362: 47.1th percentileCVE-2026-20345: 46.6th percentileCVE-2026-20339: 46.6th percentileCVE-2026-20317: 46.5th percentileCVE-2026-76485: 45.4th percentileCVE-2026-20284: 45.1th percentileCVE-2026-76441: 45th percentileCVE-2026-20353: 44.8th percentileCVE-2026-20274: 44.8th percentileCVE-2026-76445: 44.7th percentileCVE-2026-20011: 44.7th percentileCVE-2026-20231: 44.6th percentileCVE-2026-76437: 44.2th percentileCVE-2026-20328: 44.1th percentileCVE-2026-20190: 43.1th percentileCVE-2026-20320: 42.5th percentileCVE-2026-20344: 42.4th percentileCVE-2026-76473: 42.2th percentileCVE-2026-20279: 42.2th percentileCVE-2026-20315: 42.2th percentileCVE-2026-20303: 41.9th percentileCVE-2026-76471: 41.9th percentileCVE-2026-76474: 41th percentileCVE-2026-76442: 40.5th percentileCVE-2026-20319: 40.5th percentileCVE-2026-20330: 39.8th percentileCVE-2026-20329: 39.8th percentileCVE-2026-20318: 38.3th percentileCVE-2026-20356: 38.2th percentileCVE-2026-20236: 38.2th percentileCVE-2026-76490: 38.2th percentileCVE-2026-76435: 37.6th percentileCVE-2026-20119: 37.3th percentileCVE-2026-20098: 36.3th percentileCVE-2026-76466: 36th percentileCVE-2026-20332: 34.2th percentileCVE-2026-20185: 33th percentileCVE-2026-76452: 31th percentileCVE-2026-76480: 30.9th percentileCVE-2026-20113: 30.6th percentileCVE-2026-20043: 30.3th percentileCVE-2026-20114: 29th percentileCVE-2026-20118: 27.3th percentileCVE-2026-20188: 23.9th percentileCVE-2026-76459: 23.5th percentileCVE-2026-20035: 23.2th percentileCVE-2026-20167: 19.7th percentileCVE-2026-20112: 15.9th percentileCVE-2026-76483: 12.9th percentileCVE-2026-76482: 12.3th percentileCVE-2026-20355: 10.4th percentileCVE-2026-20354: 10.3th percentileCVE-2026-76464: 8.9th percentileCVE-2026-20040: 7.8th percentileCVE-2026-20293: 7.7th percentileCVE-2026-76524: 7.3th percentileCVE-2026-20051: 6.7th percentileCVE-2026-20291: 5.1th percentileCVE-2026-20074: 5th percentileCVE-2026-76497: 4.7th percentileCVE-2026-20046: 3.6th percentileCVE-2026-20110: 2.8th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2018-017199.9
CVE-2026-2018299.8
CVE-2026-2012799.8
CVE-2026-2007999.8
CVE-2026-2023099.8
CVE-2025-2036299.7
CVE-2026-7646099.5
CVE-2020-325999.4
CVE-2025-2033399.4
CVE-2026-2013198.8
CVE-2026-7650498.6
CVE-2026-2031698.4
CVE-2008-412898.4
CVE-2026-2013398.3
CVE-2026-7646198.2
CVE-2026-2026298.2
CVE-2026-2012298
CVE-2026-2024597.9
CVE-2022-2077596.2
CVE-2026-2018195.2
CVE-2026-2012894.4
CVE-2026-2004591.6
CVE-2024-2039991.2
CVE-2026-7645589.4
CVE-2026-7644383.7
CVE-2026-7651982.2
CVE-2026-2030575.1
CVE-2026-2034963.2
CVE-2026-2009363.1
CVE-2026-2030762.3
CVE-2026-2016060.6
CVE-2026-2024259.4
CVE-2026-2022357.7
CVE-2026-2021257.6
CVE-2026-7641857.3
CVE-2026-2020054.4
CVE-2026-2034853.9
CVE-2026-2003453.6
CVE-2026-2019151.1
CVE-2026-2028850.5
CVE-2026-2028350.5
CVE-2026-2032450
CVE-2026-7644049.9
CVE-2026-7648749.3
CVE-2026-2033748.8
CVE-2026-2028248.5
CVE-2026-2031048.1
CVE-2026-7642347.9
CVE-2026-7645447.8
CVE-2026-2022147.6
CVE-2026-2003047.3
CVE-2026-2028147.3
CVE-2026-2036247.1
CVE-2026-2034546.6
CVE-2026-2033946.6
CVE-2026-2031746.5
CVE-2026-7648545.4
CVE-2026-2028445.1
CVE-2026-7644145
CVE-2026-2035344.8
CVE-2026-2027444.8
CVE-2026-7644544.7
CVE-2026-2001144.7
CVE-2026-2023144.6
CVE-2026-7643744.2
CVE-2026-2032844.1
CVE-2026-2019043.1
CVE-2026-2032042.5
CVE-2026-2034442.4
CVE-2026-7647342.2
CVE-2026-2027942.2
CVE-2026-2031542.2
CVE-2026-2030341.9
CVE-2026-7647141.9
CVE-2026-7647441
CVE-2026-7644240.5
CVE-2026-2031940.5
CVE-2026-2033039.8
CVE-2026-2032939.8
CVE-2026-2031838.3
CVE-2026-2035638.2
CVE-2026-2023638.2
CVE-2026-7649038.2
CVE-2026-7643537.6
CVE-2026-2011937.3
CVE-2026-2009836.3
CVE-2026-7646636
CVE-2026-2033234.2
CVE-2026-2018533
CVE-2026-7645231
CVE-2026-7648030.9
CVE-2026-2011330.6
CVE-2026-2004330.3
CVE-2026-2011429
CVE-2026-2011827.3
CVE-2026-2018823.9
CVE-2026-7645923.5
CVE-2026-2003523.2
CVE-2026-2016719.7
CVE-2026-2011215.9
CVE-2026-7648312.9
CVE-2026-7648212.3
CVE-2026-2035510.4
CVE-2026-2035410.3
CVE-2026-764648.9
CVE-2026-200407.8
CVE-2026-202937.7
CVE-2026-765247.3
CVE-2026-200516.7
CVE-2026-202915.1
CVE-2026-200745
CVE-2026-764974.7
CVE-2026-200463.6
CVE-2026-201102.8

Coverage213 articles · all time

The latest 50 of 213 articles naming Cisco, in the shared story grammar.

Full timeline
Developinglatest 2 hours ago50 articles9 outlets

50 articles from 9 outlets since 16 Sep. Picked up again today after 2 days quiet.

Now16 Sep1 Oct57912151821242730First reportCISA · 16 Sep, 19:03Picked up againafter 2 days quiet
  • Wed 16 Sep, 19:03 UTC. CISA, first report. Attackers Exploit Cisco ISE Flaw to Bypass Management Interface. Cites a CVE in CISA KEV.
  • Wed 16 Sep, 19:36 UTC. SecurityOnline, its first report on the story. Cisco ISE Flaw Exploited to Grant Unauthenticated Root Access. Cites a CVE in CISA KEV.
  • Thu 17 Sep, 02:36 UTC. SecurityOnline. Cisco Patches Critical ISE Flaws Enabling Unauthenticated Admin Access.
  • Thu 17 Sep, 02:36 UTC. SecurityOnline. Cisco Patches Firewall Flaws Enabling Unauthenticated Root Access.
  • Thu 17 Sep, 06:36 UTC. SecurityWeek, its first report on the story. Cisco Patches Zero Day Letting Attackers Take Root Access in ISE. Cites a CVE in CISA KEV.
  • Thu 17 Sep, 10:42 UTC. Security Affairs, its first report on the story. CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws. Cites a CVE in CISA KEV.
  • Thu 17 Sep, 11:19 UTC. Infosecurity, its first report on the story. Attackers Exploit Critical Cisco ISE Flaw for Root Access. Cites a CVE in CISA KEV.
  • Thu 17 Sep, 12:30 UTC. SecurityWeek. Cisco Patches Dozens of Flaws as ISE Zero Day Faces Exploitation.
  • Fri 18 Sep, 20:23 UTC. Dark Reading, its first report on the story. Cisco Patches Exploited ISE Flaw That Grants Attackers Root Access. Cites a CVE in CISA KEV.
  • Mon 21 Sep, 02:59 UTC. SecurityOnline. Cisco Warns of Actively Exploited Flaws Enabling Root Access. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 15:38 UTC. The Hacker News, its first report on the story. Cisco Warns of Active Exploitation in Critical SD-WAN Flaw. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 17:32 UTC. CISA. CISA Warns of Active Exploitation in Cisco SD-WAN Manager Flaw. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 18:38 UTC. SecurityOnline. Cisco Patches Exploited SD-WAN Flaw Enabling Unauthenticated Admin Access. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 18:38 UTC. Rapid7, its first report on the story. Cisco SD-WAN Flaw Exploited to Grant Attackers Admin Access. Cites a CVE in CISA KEV.
  • Thu 1 Oct, 08:38 UTC. SecurityWeek. Cisco Patches Actively Exploited SD-WAN Manager Auth Bypass. Cites a CVE in CISA KEV.
  • Thu 1 Oct, 09:51 UTC. Security Affairs. CISA Flags Actively Exploited Cisco SD-WAN Authentication Flaw. Cites a CVE in CISA KEV.
  • Thu 1 Oct, 11:31 UTC. The Hacker News. Cisco SD-WAN Flaw Exploited to Bypass Authentication as Admin. Cites a CVE in CISA KEV.
  • Thu 1 Oct, 13:01 UTC. SOCRadar, its first report on the story. Actively Exploited Cisco SD-WAN Flaw Grants Unauthenticated Admin Access. Cites a CVE in CISA KEV.
  • Thu 1 Oct, 14:52 UTC. Infosecurity. Cisco SD-WAN Zero Day Exposes Internet Facing Systems to Attackers. Cites a CVE in CISA KEV.
  • Mon 5 Oct, 04:06 UTC. SecurityOnline. Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at Risk. Cites a CVE in CISA KEV.
  • Wed 7 Oct, 18:00 UTC. SecurityOnline. Cisco Patches Critical NX-OS Flaws That Could Crash Nexus Switches.
  • Wed 7 Oct, 18:00 UTC. SecurityOnline. Cisco fixes critical Nexus flaw that could let attackers run code as root.
  • Wed 7 Oct, 18:00 UTC. SecurityOnline. Cisco Patches Critical Flaw That Could Break License On-Prem Security.
  • Thu 8 Oct, 03:26 UTC. SecurityOnline. Cisco Finesse SSRF Flaw Could Expose Data, With Patches Due in 2027.
  • Thu 8 Oct, 15:54 UTC. SecurityWeek. Cisco Patches 35 Flaws, Including Critical NX-OS Bugs Enabling Root Access.
  • Wed 14 Oct, 19:26 UTC. The Hacker News. Cisco Email Gateway Flaw Exploited to Run Commands as Root. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 19:33 UTC. CISA. CISA Flags Exploited Cisco Email Gateway Flaw With Critical Score. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 23:29 UTC. SecurityOnline. Cisco Email Gateways Face Active Attacks That Could Expose Cluster SSH Keys. Cites a CVE in CISA KEV.
  • Thu 15 Oct, 07:01 UTC. SecurityWeek. Attackers Exploit Critical Cisco Email Gateway Flaw to Gain Root Access. Cites a CVE in CISA KEV.
  • Thu 15 Oct, 10:00 UTC. Security Affairs. Cisco Fixes Actively Exploited Secure Email Gateway Flaw Allowing Root Access. Cites a CVE in CISA KEV.
  • Thu 15 Oct, 12:49 UTC. SOCRadar. Cisco and Palo Alto Patch Exploited Flaws Enabling Root Access. Cites a CVE in CISA KEV.
  • Thu 15 Oct, 20:01 UTC. Security Affairs. CISA Flags Exploited Firewall, Email Gateway and Backup Software Flaws. Cites a CVE in CISA KEV.
  • Fri 16 Oct, 20:58 UTC. Dark Reading. China-linked hackers exploited BeyondTrust zero-day to steal credentials. Cites a CVE in CISA KEV.
  • Mon 19 Oct, 01:44 UTC. SecurityOnline. Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress Plugin. Cites a CVE in CISA KEV.
  • Thu 22 Oct, 02:43 UTC. SecurityOnline. Cisco Patches Root Access Flaw in Expressway Gateways.
  • Thu 22 Oct, 02:52 UTC. SecurityOnline. Cisco fixes critical Unified CM flaws that could expose networks.
  • Thu 22 Oct, 04:46 UTC. SecurityOnline. Cisco Patches 13 Snort 3 Flaws, Including Critical Code Execution Risk.
  • Thu 22 Oct, 10:09 UTC. SecurityWeek. Cisco Patches Critical Expressway Flaw That Could Run Commands as Root.
  • Wed 28 Oct, 19:30 UTC. The Hacker News. Volt Typhoon Used Silent Train in Four Zero Day Campaigns. Cites a CVE in CISA KEV.
  • Wed 28 Oct, 22:30 UTC. SecurityOnline. Cisco confirms firewall flaw is being exploited to crash VPNs. Cites a CVE in CISA KEV.
  • Thu 29 Oct, 03:30 UTC. SecurityOnline. UAT-11473 implants KeyDrift malware on Cisco SD-WAN systems. Cites a CVE in CISA KEV.
  • Thu 29 Oct, 09:30 UTC. The Hacker News. Hackers Exploit Cisco SD-WAN Flaw to Steal Encryption Keys. Cites a CVE in CISA KEV.
  • Thu 29 Oct, 10:30 UTC. SecurityWeek. Cisco fixes exploited VPN flaw that can crash firewalls. Cites a CVE in CISA KEV.
  • Thu 29 Oct, 11:30 UTC. SecurityWeek. Cisco SD WAN flaw tied to UAT-11473 and Volt Typhoon. Cites a CVE in CISA KEV.
  • Thu 29 Oct, 12:00 UTC. The Hacker News. Cisco patches actively exploited VPN flaw that can crash firewalls. Cites a CVE in CISA KEV.
  • Thu 29 Oct, 20:01 UTC. CISA. CISA adds actively exploited Cisco firewall flaw to KEV catalogue. Cites a CVE in CISA KEV.
  • Fri 30 Oct, 08:30 UTC. The Hacker News. CISA Adds Exploited GitLab and Cisco Flaws to KEV. Cites a CVE in CISA KEV.
  • Fri 30 Oct, 21:30 UTC. Security Affairs. CISA adds GitLab and Cisco flaws to exploited vulnerabilities list. Cites a CVE in CISA KEV.
  • Mon 2 Nov, 03:31 UTC. SecurityOnline. Weekly report flags exploited flaws absent from CISA KEV. Cites a CVE in CISA KEV.
  • Mon 2 Nov, 10:30 UTC. SecurityOnline. Tech firms back robots.txt standard for AI training controls.
  • Known exploited CVE
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 50 articles as a list
  1. Wed 16 SepDay 02
    1. Attackers Exploit Cisco ISE Flaw to Bypass Management Interface19:03 · CISA · official · First report · CISA alert · Known exploited CVE
    2. Cisco ISE Flaw Exploited to Grant Unauthenticated Root Access19:36 · SecurityOnline · Known exploited CVE
  2. Thu 17 SepDay 16
    1. Cisco Patches Critical ISE Flaws Enabling Unauthenticated Admin Access02:36 · SecurityOnline
    2. Cisco Patches Firewall Flaws Enabling Unauthenticated Root Access02:36 · SecurityOnline
    3. Cisco Patches Zero Day Letting Attackers Take Root Access in ISE06:36 · SecurityWeek · Known exploited CVE
    Show 3 more from 17 Sep
    1. CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws10:42 · Security Affairs · Known exploited CVE
    2. Attackers Exploit Critical Cisco ISE Flaw for Root Access11:19 · Infosecurity · Known exploited CVE
    3. Cisco Patches Dozens of Flaws as ISE Zero Day Faces Exploitation12:30 · SecurityWeek
  3. Fri 18 SepDay 21
    1. Cisco Patches Exploited ISE Flaw That Grants Attackers Root Access20:23 · Dark Reading · Known exploited CVE

  4. Quiet for 2 days

    Mon 21 SepDay 51
    1. Cisco Warns of Actively Exploited Flaws Enabling Root Access02:59 · SecurityOnline · Picked up again · Known exploited CVE

  5. Quiet for 10 days

    Wed 30 SepDay 144
    1. Cisco Warns of Active Exploitation in Critical SD-WAN Flaw15:38 · The Hacker News · Picked up again · Known exploited CVE
    2. CISA Warns of Active Exploitation in Cisco SD-WAN Manager Flaw17:32 · CISA · official · Known exploited CVE
    3. Cisco Patches Exploited SD-WAN Flaw Enabling Unauthenticated Admin Access18:38 · SecurityOnline · Known exploited CVE
    4. Cisco SD-WAN Flaw Exploited to Grant Attackers Admin Access18:38 · Rapid7 · Known exploited CVE
  6. Thu 1 OctDay 155
    1. Cisco Patches Actively Exploited SD-WAN Manager Auth Bypass08:38 · SecurityWeek · Known exploited CVE
    2. CISA Flags Actively Exploited Cisco SD-WAN Authentication Flaw09:51 · Security Affairs · Known exploited CVE
    3. Cisco SD-WAN Flaw Exploited to Bypass Authentication as Admin11:31 · The Hacker News · Known exploited CVE
    Show 2 more from 1 Oct
    1. Actively Exploited Cisco SD-WAN Flaw Grants Unauthenticated Admin Access13:01 · SOCRadar · Known exploited CVE
    2. Cisco SD-WAN Zero Day Exposes Internet Facing Systems to Attackers14:52 · Infosecurity · Known exploited CVE

  7. Quiet for 4 days

    Mon 5 OctDay 191
    1. Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at Risk04:06 · SecurityOnline · Picked up again · Known exploited CVE

  8. Quiet for 3 days

    Wed 7 OctDay 213
    1. Cisco Patches Critical NX-OS Flaws That Could Crash Nexus Switches18:00 · SecurityOnline · Picked up again
    2. Cisco fixes critical Nexus flaw that could let attackers run code as root18:00 · SecurityOnline
    3. Cisco Patches Critical Flaw That Could Break License On-Prem Security18:00 · SecurityOnline
  9. Thu 8 OctDay 222
    1. Cisco Finesse SSRF Flaw Could Expose Data, With Patches Due in 202703:26 · SecurityOnline
    2. Cisco Patches 35 Flaws, Including Critical NX-OS Bugs Enabling Root Access15:54 · SecurityWeek

  10. Quiet for 6 days

    Wed 14 OctDay 283
    1. Cisco Email Gateway Flaw Exploited to Run Commands as Root19:26 · The Hacker News · Picked up again · Known exploited CVE
    2. CISA Flags Exploited Cisco Email Gateway Flaw With Critical Score19:33 · CISA · official · Known exploited CVE
    3. Cisco Email Gateways Face Active Attacks That Could Expose Cluster SSH Keys23:29 · SecurityOnline · Known exploited CVE
  11. Thu 15 OctDay 294
    1. Attackers Exploit Critical Cisco Email Gateway Flaw to Gain Root Access07:01 · SecurityWeek · Known exploited CVE
    2. Cisco Fixes Actively Exploited Secure Email Gateway Flaw Allowing Root Access10:00 · Security Affairs · Known exploited CVE
    3. Cisco and Palo Alto Patch Exploited Flaws Enabling Root Access12:49 · SOCRadar · Known exploited CVE
    4. CISA Flags Exploited Firewall, Email Gateway and Backup Software Flaws20:01 · Security Affairs · Known exploited CVE
  12. Fri 16 OctDay 301
    1. China-linked hackers exploited BeyondTrust zero-day to steal credentials20:58 · Dark Reading · Known exploited CVE

  13. Quiet for 2 days

    Mon 19 OctDay 331
    1. Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress Plugin01:44 · SecurityOnline · Picked up again · Known exploited CVE

  14. Quiet for 3 days

    Thu 22 OctDay 364
    1. Cisco Patches Root Access Flaw in Expressway Gateways02:43 · SecurityOnline · Picked up again
    2. Cisco fixes critical Unified CM flaws that could expose networks02:52 · SecurityOnline
    3. Cisco Patches 13 Snort 3 Flaws, Including Critical Code Execution Risk04:46 · SecurityOnline
    4. Cisco Patches Critical Expressway Flaw That Could Run Commands as Root10:09 · SecurityWeek

  15. Quiet for 6 days

    Wed 28 OctDay 422
    1. Volt Typhoon Used Silent Train in Four Zero Day Campaigns19:30 · The Hacker News · Picked up again · Known exploited CVE
    2. Cisco confirms firewall flaw is being exploited to crash VPNs22:30 · SecurityOnline · Known exploited CVE
  16. Thu 29 OctDay 436
    1. UAT-11473 implants KeyDrift malware on Cisco SD-WAN systems03:30 · SecurityOnline · Known exploited CVE
    2. Hackers Exploit Cisco SD-WAN Flaw to Steal Encryption Keys09:30 · The Hacker News · Known exploited CVE
    3. Cisco fixes exploited VPN flaw that can crash firewalls10:30 · SecurityWeek · Known exploited CVE
    Show 3 more from 29 Oct
    1. Cisco SD WAN flaw tied to UAT-11473 and Volt Typhoon11:30 · SecurityWeek · Known exploited CVE
    2. Cisco patches actively exploited VPN flaw that can crash firewalls12:00 · The Hacker News · Known exploited CVE
    3. CISA adds actively exploited Cisco firewall flaw to KEV catalogue20:01 · CISA · official · Known exploited CVE
  17. Fri 30 OctDay 442
    1. CISA Adds Exploited GitLab and Cisco Flaws to KEV08:30 · The Hacker News · Known exploited CVE
    2. CISA adds GitLab and Cisco flaws to exploited vulnerabilities list21:30 · Security Affairs · Known exploited CVE

  18. Quiet for 2 days

    Mon 2 NovDay 472
    1. Weekly report flags exploited flaws absent from CISA KEV03:31 · SecurityOnline · Picked up again · Known exploited CVE
    2. Tech firms back robots.txt standard for AI training controls10:30 · SecurityOnline

All CVEs in coverage114

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2018-0171Exploited

    Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

    7.5High99.4% EPSS · 1 article
  • CVE-2026-20182Exploited

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    10.0Critical92% EPSS · 10 articles
  • CVE-2026-20127Exploited

    Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

    10.0Critical89% EPSS · 24 articles
  • CVE-2026-20079Exploited

    Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

    10.0Critical89% EPSS · 14 articles
  • CVE-2026-20230Exploited

    Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

    8.6High89% EPSS · 16 articles
  • CVE-2025-20362Exploited

    Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

    6.5Medium87% EPSS · 3 articles
  • CVE-2026-76460Exploited

    Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

    10.0Critical76% EPSS · 8 articles
  • CVE-2020-3259Exploited

    Cisco ASA and FTD Information Disclosure Vulnerability

    7.5High72% EPSS · 0 articles
  • CVE-2025-20333Exploited

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

    9.9Critical71% EPSS · 3 articles
  • CVE-2026-20131Exploited

    Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

    10.0Critical44% EPSS · 18 articles
  • CVE-2026-76504Exploited

    Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

    9.8Critical39% EPSS · 10 articles
  • CVE-2026-20316Exploited

    Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

    5.3Medium35% EPSS · 10 articles
Show 102 more CVEs
  • CVE-2008-4128Exploited

    Cisco IOS Cross-Site Request Forgery Vulnerability

    4.3Medium34% EPSS · 4 articles
  • CVE-2026-20133Exploited

    Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

    6.5Medium31% EPSS · 5 articles
  • CVE-2026-76461Exploited

    Cisco Secure Email Gateway SQL Injection Vulnerability

    9.8Critical30% EPSS · 10 articles
  • CVE-2026-20262Exploited

    Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

    6.5Medium29% EPSS · 9 articles
  • CVE-2026-20122Exploited

    Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

    5.4Medium26% EPSS · 8 articles
  • CVE-2026-20245Exploited

    Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

    7.8High25% EPSS · 17 articles
  • CVE-2022-20775Exploited

    Cisco SD-WAN Path Traversal Vulnerability

    7.8High12% EPSS · 11 articles
  • CVE-2026-20128Exploited

    Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

    7.5High7.3% EPSS · 8 articles
  • CVE-2026-20045Exploited

    Cisco Unified Communications Products Code Injection Vulnerability

    8.2High4.5% EPSS · 4 articles
  • CVE-2024-20399Exploited

    Cisco NX-OS Command Injection Vulnerability

    6.0Medium4.3% EPSS · 1 article
  • CVE-2026-76519Exploited

    Cisco Secure Email Gateway Relative Path Traversal Vulnerability

    9.8Critical2.1% EPSS · 9 articles
  • CVE-2026-20349Exploited

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

    8.6High1.0% EPSS · 8 articles
  • CVE-2026-76418Exploited

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    8.6High0.8% EPSS · 7 articles
  • CVE-2026-20181

    Cisco Identity Services Engine Remote Code Execution Vulnerability

    9.1Critical8.9% EPSS · 3 articles
  • CVE-2026-76455

    Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities

    9.8Critical3.6% EPSS · 1 article
  • CVE-2026-76443

    Cisco Secure Email Gateway Security Hardening Release

    9.8Critical2.4% EPSS · 1 article
  • CVE-2026-20305

    Cisco Identity Services Engine Command Injection Vulnerability

    9.1Critical1.6% EPSS · 1 article
  • CVE-2026-20093

    Cisco Integrated Management Controller Authentication Bypass Vulnerability

    9.8Critical1.0% EPSS · 4 articles
  • CVE-2026-20307

    Cisco Identity Services Engine Remote Code Execution Vulnerability

    9.9Critical1.0% EPSS · 1 article
  • CVE-2026-20160

    Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability

    9.8Critical0.9% EPSS · 3 articles
  • CVE-2026-20242

    Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

    9.8Critical0.9% EPSS · 1 article
  • CVE-2026-20223

    Cisco Secure Workload Unauthorized API Access Vulnerability

    10.0Critical0.8% EPSS · 2 articles
  • CVE-2026-20212

    Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability

    9.8Critical0.8% EPSS · 2 articles
  • CVE-2026-20200

    Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability

    8.8High0.7% EPSS · 1 article
  • CVE-2026-20348

    ClamAV XAR File Format Processing Memory Corruption Vulnerability

    7.5High0.7% EPSS · 2 articles
  • CVE-2026-20034

    Cisco Unity Connection Remote Code Execution Vulnerability

    8.8High0.7% EPSS · 2 articles
  • CVE-2026-20191

    Cisco Catalyst Center Arbitrary File Read Vulnerability

    7.5High0.7% EPSS · 1 article
  • CVE-2026-20288

    Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability

    6.5Medium0.6% EPSS · 1 article
  • CVE-2026-20283

    Cisco Identity Services Engine IPSec Open API Command Injection Vulnerability

    6.5Medium0.6% EPSS · 1 article
  • CVE-2026-20324

    Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerability

    9.9Critical0.6% EPSS · 1 article
  • CVE-2026-76440

    Cisco Secure Email Gateway Security Hardening Release

    9.8Critical0.6% EPSS · 1 article
  • CVE-2026-76487

    Cisco Unified Communications Manager Improper Access Control Vulnerability

    5.3Medium0.6% EPSS · 1 article
  • CVE-2026-20337

    ClamAV ZIP File Format Processing Memory Corruption Vulnerability

    7.5High0.6% EPSS · 2 articles
  • CVE-2026-20282

    Cisco Identity Services Engine Authenticated Write Vulnerability

    4.9Medium0.6% EPSS · 1 article
  • CVE-2026-20310

    Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access

    9.1Critical0.6% EPSS · 1 article
  • CVE-2026-76423

    Cisco ISE API Authentication Bypass Vulnerability

    10.0Critical0.6% EPSS · 1 article
  • CVE-2026-76454

    Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability

    9.1Critical0.6% EPSS · 2 articles
  • CVE-2026-20221

    Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities

    5.8Medium0.6% EPSS · 1 article
  • CVE-2026-20030

    Cisco Crosswork Security Hardening Release: August 2026

    10.0Critical0.6% EPSS · 1 article
  • CVE-2026-20281

    Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability

    7.5High0.6% EPSS · 1 article
  • CVE-2026-20362

    Cisco Finesse Server-Side Request Forgery Vulnerability

    7.2High0.6% EPSS · 1 article
  • CVE-2026-20345

    ClamAV GPT File Format Processing Memory Corruption Vulnerability

    7.5High0.6% EPSS · 2 articles
  • CVE-2026-20339

    ClamAV PESpin File Format Processing Integer Overflow Vulnerability

    7.5High0.6% EPSS · 2 articles
  • CVE-2026-20317

    Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities

    10.0Critical0.6% EPSS · 1 article
  • CVE-2026-76485

    Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-20284

    Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability

    9.1Critical0.5% EPSS · 2 articles
  • CVE-2026-76441

    Cisco Secure Email Gateway Security Hardening Release

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-20353

    Cisco Secure Email Gateway Security Hardening Release

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-20274

    Cisco IOS XR Software Security Hardening Release: September 2026

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-76445

    Multiple Cisco Products Snort 3 Denial of Service Vulnerability

    5.3Medium0.5% EPSS · 1 article
  • CVE-2026-20011

    Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability

    5.8Medium0.5% EPSS · 1 article
  • CVE-2026-20231

    Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities

    9.9Critical0.5% EPSS · 1 article
  • CVE-2026-76437

    Cisco Smart Software Manager On-Prem Command Injection Vulnerability

    4.9Medium0.5% EPSS · 1 article
  • CVE-2026-20328

    Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerability

    9.1Critical0.5% EPSS · 2 articles
  • CVE-2026-20190

    Cisco Identity Services Engine Information Disclosure Vulnerability

    7.5High0.5% EPSS · 2 articles
  • CVE-2026-20320

    Cisco BroadWorks vulnerability

    7.5High0.5% EPSS · 1 article
  • CVE-2026-20344

    Cisco Secure Firewall Management Center Software SQL Injection Vulnerability

    8.8High0.5% EPSS · 1 article
  • CVE-2026-76473

    Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.

    9.8Critical0.5% EPSS · 2 articles
  • CVE-2026-20279

    Cisco IOS XR Software Security Hardening Release: September 2026

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-20315

    Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities

    10.0Critical0.5% EPSS · 1 article
  • CVE-2026-20303

    Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities

    9.9Critical0.5% EPSS · 1 article
  • CVE-2026-76471

    Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-76474

    Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities

    9.8Critical0.5% EPSS · 2 articles
  • CVE-2026-76442

    Cisco Secure Email Gateway Security Hardening Release

    7.5High0.5% EPSS · 1 article
  • CVE-2026-20319

    Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management Vulnerabilities

    7.5High0.5% EPSS · 1 article
  • CVE-2026-20330

    Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities

    9.9Critical0.5% EPSS · 1 article
  • CVE-2026-20329

    Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabilities

    9.9Critical0.5% EPSS · 1 article
  • CVE-2026-20318

    Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilities

    9.6Critical0.4% EPSS · 1 article
  • CVE-2026-20356

    Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

    7.5High0.4% EPSS · 0 articles
  • CVE-2026-20236

    Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

    7.5High0.4% EPSS · 0 articles
  • CVE-2026-76490

    Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities

    8.6High0.4% EPSS · 1 article
  • CVE-2026-76435

    Cisco Expressway Series Information Disclosure Vulnerability

    5.3Medium0.4% EPSS · 1 article
  • CVE-2026-20119

    Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability

    7.5High0.4% EPSS · 2 articles
  • CVE-2026-20098

    Cisco Meeting Management Arbitrary File Upload Vulnerability

    8.8High0.4% EPSS · 2 articles
  • CVE-2026-76466

    Cisco Expressway Series Remote Code Execution Vulnerability

    9.8Critical0.4% EPSS · 2 articles
  • CVE-2026-20332

    Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities

    9.9Critical0.4% EPSS · 2 articles
  • CVE-2026-20185

    Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vunerability

    7.7High0.4% EPSS · 1 article
  • CVE-2026-76452

    Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

    4.9Medium0.4% EPSS · 1 article
  • CVE-2026-76480

    Cisco License On-Prem Security Hardening Release

    9.8Critical0.4% EPSS · 2 articles
  • CVE-2026-20113

    Cisco IOS XE Software vulnerability

    5.3Medium0.4% EPSS · 1 article
  • CVE-2026-20043

    Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

    9.0Critical0.4% EPSS · 1 article
  • CVE-2026-20114

    Cisco IOS XE Software vulnerability

    5.4Medium0.3% EPSS · 1 article
  • CVE-2026-20118

    Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability

    Not scored0.3% EPSS · 2 articles
  • CVE-2026-20188

    Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory

    7.5High0.3% EPSS · 1 article
  • CVE-2026-76459

    Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities

    8.8High0.3% EPSS · 1 article
  • CVE-2026-20035

    Cisco Unity Connection Server-Side Request Forgery Vulnerability

    7.2High0.3% EPSS · 2 articles
  • CVE-2026-20167

    Cisco IoT Field Network Director Remote Device Denial of Service Vulnerability

    7.7High0.3% EPSS · 1 article
  • CVE-2026-20112

    Cisco IOS XE Software vulnerability

    4.8Medium0.3% EPSS · 1 article
  • CVE-2026-76483

    Cisco License On-Prem Security Hardening Release

    9.1Critical0.2% EPSS · 1 article
  • CVE-2026-76482

    Cisco License On-Prem Security Hardening Release

    10.0Critical0.2% EPSS · 2 articles
  • CVE-2026-20355

    Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

    5.9Medium0.2% EPSS · 2 articles
  • CVE-2026-20354

    Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

    5.9Medium0.2% EPSS · 2 articles
  • CVE-2026-76464

    Cisco Meraki Hardening Release October 2026 - Buffer Management Vulnerabilities

    9.6Critical0.2% EPSS · 1 article
  • CVE-2026-20040

    Cisco IOS XR Software CLI Privilege Escalation Vulnerability

    8.8High0.2% EPSS · 1 article
  • CVE-2026-20293

    Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

    7.1High0.2% EPSS · 2 articles
  • CVE-2026-76524

    Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability

    7.8High0.2% EPSS · 1 article
  • CVE-2026-20051

    Cisco Nexus 3600-R and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability

    7.4High0.2% EPSS · 1 article
  • CVE-2026-20291

    Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

    7.8High0.2% EPSS · 0 articles
  • CVE-2026-20074

    Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability

    Not scored0.2% EPSS · 1 article
  • CVE-2026-76497

    Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities

    6.6Medium0.2% EPSS · 1 article
  • CVE-2026-20046

    Cisco IOS XR Software CLI Privilege Escalation Vulnerability

    Not scored0.1% EPSS · 1 article
  • CVE-2026-20110

    Cisco IOS XE Software vulnerability

    6.5Medium0.1% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in