Cisco: known exploited vulnerabilities
101Catalog entries
7Ransomware use
2026-10-14Last added
2026-10-17Latest due date
Get an email when Cisco is next added.Watch Cisco
| CVE | Product / vulnerability | Due |
|---|---|---|
| CVE-2026-76519 | Secure Email Gateway Cisco Secure Email Gateway Relative Path Traversal Vulnerability |
2026-10-17 |
| CVE-2026-76504 | Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability |
2026-10-03 |
| CVE-2026-76460 | Identity Services Engine Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability |
2026-09-19 |
| CVE-2026-76461 | Secure Email Gateway Cisco Secure Email Gateway SQL Injection Vulnerability |
2026-09-17 |
| CVE-2026-20079 | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability |
2026-09-12 |
| CVE-2026-20349 | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability |
2026-08-14 |
| CVE-2026-20316 | Secure Firewall Management Center (FMC) RANSOMWARE Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability |
2026-08-01 |
| CVE-2008-4128 | IOS Cisco IOS Cross-Site Request Forgery Vulnerability |
2026-07-16 |
| CVE-2026-20230 | Unified Communications Manager Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability |
2026-06-28 |
| CVE-2026-20262 | Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability |
2026-06-29 |
| CVE-2026-20245 | Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability |
2026-06-23 |
| CVE-2026-20182 | Catalyst SD-WAN Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability |
2026-05-17 |
| CVE-2026-20128 | Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability |
2026-04-23 |
| CVE-2026-20133 | Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability |
2026-04-23 |
| CVE-2026-20122 | Catalyst SD-WAN Manger Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability |
2026-04-23 |
| CVE-2026-20131 | Secure Firewall Management Center (FMC) RANSOMWARE Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability |
2026-03-22 |
| CVE-2026-20127 | Catalyst SD-WAN Controller and Manager Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability |
2026-02-27 |
| CVE-2022-20775 | SD-WAN Cisco SD-WAN Path Traversal Vulnerability |
2026-02-27 |
| CVE-2026-20045 | Unified Communications Manager Cisco Unified Communications Products Code Injection Vulnerability |
2026-02-11 |
| CVE-2025-20393 | Multiple Products Cisco Multiple Products Improper Input Validation Vulnerability |
2025-12-24 |
| CVE-2025-20352 | IOS and IOS XE Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability |
2025-10-20 |
| CVE-2025-20333 | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability |
2025-09-26 |
| CVE-2025-20362 | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability |
2025-09-26 |
| CVE-2025-20281 | Identity Services Engine Cisco Identity Services Engine Injection Vulnerability |
2025-08-18 |
| CVE-2025-20337 | Identity Services Engine Cisco Identity Services Engine Injection Vulnerability |
2025-08-18 |
| CVE-2024-20439 | Smart Licensing Utility Cisco Smart Licensing Utility Static Credential Vulnerability |
2025-04-21 |
| CVE-2023-20118 | Small Business RV Series Routers Cisco Small Business RV Series Routers Command Injection Vulnerability |
2025-03-24 |
| CVE-2014-2120 | Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability |
2024-12-03 |
| CVE-2024-20481 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Denial-of-Service Vulnerability |
2024-11-14 |
| CVE-2024-20399 | NX-OS Cisco NX-OS Command Injection Vulnerability |
2024-07-23 |
| CVE-2024-20353 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Denial of Service Vulnerability |
2024-05-01 |
| CVE-2024-20359 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Privilege Escalation Vulnerability |
2024-05-01 |
| CVE-2020-3259 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) RANSOMWARE Cisco ASA and FTD Information Disclosure Vulnerability |
2024-03-07 |
| CVE-2023-20273 | Cisco IOS XE Web UI Cisco IOS XE Web UI Command Injection Vulnerability |
2023-10-27 |
| CVE-2023-20198 | IOS XE Web UI Cisco IOS XE Web UI Privilege Escalation Vulnerability |
2023-10-20 |
| CVE-2023-20109 | IOS and IOS XE Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability |
2023-10-31 |
| CVE-2023-20269 | Adaptive Security Appliance and Firepower Threat Defense RANSOMWARE Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability |
2023-10-04 |
| CVE-2016-6415 | IOS, IOS XR, and IOS XE Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability |
2023-06-09 |
| CVE-2004-1464 | IOS Cisco IOS Denial-of-Service Vulnerability |
2023-06-09 |
| CVE-2017-6742 | IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability |
2023-05-10 |
| CVE-2020-3153 | AnyConnect Secure RANSOMWARE Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability |
2022-11-14 |
| CVE-2020-3433 | AnyConnect Secure RANSOMWARE Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability |
2022-11-14 |
| CVE-2019-15271 | RV Series Routers Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability |
2022-06-22 |
| CVE-2016-6367 | Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability |
2022-06-14 |
| CVE-2016-6366 | Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability |
2022-06-14 |
| CVE-2022-20821 | IOS XR Cisco IOS XR Open Port Vulnerability |
2022-06-13 |
| CVE-2009-2055 | IOS XR Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability |
2022-04-15 |
| CVE-2010-3035 | IOS XR Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability |
2022-04-15 |
| CVE-2015-0666 | Prime Data Center Network Manager (DCNM) Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability |
2022-04-15 |
| CVE-2017-3881 | IOS and IOS XE Cisco IOS and IOS XE Remote Code Execution Vulnerability |
2022-04-15 |
| CVE-2018-0125 | VPN Routers Cisco VPN Routers Remote Code Execution Vulnerability |
2022-04-15 |
| CVE-2018-0147 | Secure Access Control System (ACS) Cisco Secure Access Control System Java Deserialization Vulnerability |
2022-04-15 |
| CVE-2017-12231 | IOS software Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability |
2022-03-24 |
| CVE-2017-12232 | IOS software Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability |
2022-03-24 |
| CVE-2017-12233 | IOS software Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability |
2022-03-24 |
| CVE-2017-12234 | IOS software Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability |
2022-03-24 |
| CVE-2017-12235 | IOS software Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability |
2022-03-24 |
| CVE-2017-12237 | IOS and IOS XE Software Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability |
2022-03-24 |
| CVE-2017-12238 | Catalyst 6800 Series Switches Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability |
2022-03-24 |
| CVE-2017-12240 | IOS and IOS XE Software Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability |
2022-03-24 |
| CVE-2017-12319 | IOS XE Software Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability |
2022-03-24 |
| CVE-2017-6627 | IOS and IOS XE Software Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability |
2022-03-24 |
| CVE-2017-6663 | IOS and IOS XE Software Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability |
2022-03-24 |
| CVE-2017-6736 | IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability |
2022-03-24 |
| CVE-2017-6737 | IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability |
2022-03-24 |
| CVE-2017-6738 | IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability |
2022-03-24 |
| CVE-2017-6739 | IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability |
2022-03-24 |
| CVE-2017-6740 | IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability |
2022-03-24 |
| CVE-2017-6743 | IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability |
2022-03-24 |
| CVE-2017-6744 | IOS software Cisco IOS Software SNMP Remote Code Execution Vulnerability |
2022-03-24 |
| CVE-2018-0151 | IOS and IOS XE Software Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability |
2022-03-17 |
| CVE-2018-0154 | IOS Software Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability |
2022-03-17 |
| CVE-2018-0155 | Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability |
2022-03-17 |
| CVE-2018-0156 | IOS Software and Cisco IOS XE Software Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability |
2022-03-17 |
| CVE-2018-0158 | IOS Software and Cisco IOS XE Software Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability |
2022-03-17 |
| CVE-2018-0159 | IOS Software and Cisco IOS XE Software Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability |
2022-03-17 |
| CVE-2018-0161 | IOS Software Cisco IOS Software Resource Management Errors Vulnerability |
2022-03-17 |
| CVE-2018-0167 | IOS, XR, and XE Software Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability |
2022-03-17 |
| CVE-2018-0172 | IOS and IOS XE Software Cisco IOS and IOS XE Software Improper Input Validation Vulnerability |
2022-03-17 |
| CVE-2018-0173 | IOS and IOS XE Software Cisco IOS and IOS XE Software Improper Input Validation Vulnerability |
2022-03-17 |
| CVE-2018-0174 | IOS XE Software Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability |
2022-03-17 |
| CVE-2018-0175 | IOS, XR, and XE Software Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability |
2022-03-17 |
| CVE-2018-0179 | IOS Software Cisco IOS Software Denial-of-Service Vulnerability |
2022-03-17 |
| CVE-2018-0180 | IOS Software Cisco IOS Software Denial-of-Service Vulnerability |
2022-03-17 |
| CVE-2019-1652 | Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Cisco Small Business Routers Improper Input Validation Vulnerability |
2022-03-17 |
| CVE-2022-20699 | Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability |
2022-03-17 |
| CVE-2022-20700 | Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability |
2022-03-17 |
| CVE-2022-20701 | Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability |
2022-03-17 |
| CVE-2022-20703 | Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability |
2022-03-17 |
| CVE-2022-20708 | Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability |
2022-03-17 |
| CVE-2018-0296 | Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability |
2022-05-03 |
| CVE-2019-1653 | Small Business RV320 and RV325 Routers Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability |
2022-05-03 |
| CVE-2020-3161 | Cisco IP Phones Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability |
2022-05-03 |
| CVE-2020-3569 | IOS XR Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability |
2022-05-03 |
| CVE-2020-3566 | IOS XR Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability |
2022-05-03 |
| CVE-2020-3118 | IOS XR Cisco IOS XR Software Discovery Protocol Format String Vulnerability |
2022-05-03 |
| CVE-2018-0171 | IOS and IOS XE Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability |
2022-05-03 |
| CVE-2021-1498 | HyperFlex HX Cisco HyperFlex HX Data Platform Command Injection Vulnerability |
2021-11-17 |
| CVE-2021-1497 | HyperFlex HX Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability |
2021-11-17 |
| CVE-2020-3580 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) RANSOMWARE Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability |
2022-05-03 |
| CVE-2020-3452 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Read-Only Path Traversal Vulnerability |
2022-05-03 |