Skip to content
OpenAdvisories

Vendor

Cisco

3,442 known vulnerabilities.

Products

Cisco Small Business RV Series Router Firmware 262 Cisco IOS XE Software 248 Cisco Identity Services Engine Software 200 Cisco Firepower Threat Defense Software 160 Cisco Adaptive Security Appliance (ASA) Software 159 Cisco Firepower Management Center 128 Cisco IOS XR Software 115 Cisco NX-OS Software 102 Cisco Secure Firewall Threat Defense (FTD) Software 81 Cisco Data Center Network Manager 74 Cisco Unified Communications Manager 62 Cisco SD-WAN vManage 61 Cisco SD-WAN Solution 54 Cisco Prime Infrastructure 50 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 48 Cisco Webex Meetings 46 Cisco Catalyst SD-WAN Manager 46 Cisco Unified Computing System (Managed) 41 Cisco Enterprise NFV Infrastructure Software 41 IOS 39 Cisco Unity Connection 39 Cisco IOS 36 Cisco ISE Passive Identity Connector 36 Cisco Unified Contact Center Express 36 Cisco WebEx WRF Player 35 Cisco Digital Network Architecture Center (DNA Center) 33 Cisco TelePresence Video Communication Server (VCS) Expressway 33 Cisco Email Security Appliance (ESA) 30 Cisco Application Policy Infrastructure Controller (APIC) 30 Cisco Secure Email 29 Cisco Aironet Access Point Software 29 Cisco UTD SNORT IPS Engine Software 29 Cisco Secure Firewall Management Center (FMC) 29 Cisco RoomOS Software 28 Cisco Nexus Dashboard 28 Cisco Unified Computing System E-Series Software (UCSE) 26 Cisco Wireless LAN Controller (WLC) 25 Cisco Web Security Appliance (WSA) 24 Cisco Unified Communications Manager IM and Presence Service 23 Cisco Secure Endpoint 23
All Critical High Medium Low Exploited only Public exploit

121 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-76519 Exploited Public exploit

    Cisco Secure Email Gateway Arbitrary File Write Vulnerability

    A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email…

    Cisco Cisco Secure Email Network devices
    KEV Oct 14, 2026
  • Critical 9.8
    CVE-2026-76504 Exploited Public exploit EPSS 39%

    Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability

    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling …

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Sep 30, 2026
  • Critical 10.0
    CVE-2026-76460 Exploited Public exploit EPSS 76%

    Cisco Identity Services Engine Authentication Bypass Vulnerability

    A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vul…

    Cisco Cisco Identity Services Engine Software Cisco ISE Passive Identity Connector Network devices
    KEV Sep 16, 2026
  • Critical 9.9
    CVE-2026-20329 Public exploit

    Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has con…

    Cisco Cisco Secure Firewall Threat Defense (FTD) Software Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Cisco Secure Firewall Management Center (FMC) Network devices
  • Critical 9.8
    CVE-2026-76461 Exploited Public exploit EPSS 40%

    Cisco Secure Email Gateway SQL Injection Vulnerability

    A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to i…

    Cisco Cisco Secure Email Network devices
    KEV Sep 14, 2026
  • Critical 9.8
    CVE-2026-76443 Public exploit

    Cisco Secure Email Gateway Security Hardening Release

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software ha…

    Cisco Cisco Secure Email Cisco Secure Email and Web Manager Network devices
  • Critical 9.8
    CVE-2026-20212 Public exploit

    Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability

    A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the de…

    Cisco Cisco NX-OS Software Network devices
  • High 8.6
    CVE-2026-20349 Exploited Public exploit

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

    A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload une…

    Cisco Cisco Secure Firewall Threat Defense (FTD) Software Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Network devices
    KEV Aug 11, 2026
  • Critical 9.9
    CVE-2026-20303 Public exploit

    Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple inter…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
  • High 8.8
    CVE-2026-20200 Public exploit

    Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root.  T…

    Cisco Cisco Unified Computing System (Standalone) Network devices
  • High 7.5
    CVE-2026-20217 Public exploit

    ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability

    A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to impro…

    Cisco Cisco Secure Endpoint clamav clamav Network devices Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2026-20262 Exploited Public exploit EPSS 29%

    Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system. This vulnerability exists because the affect…

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Jun 15, 2026
  • High 7.8
    CVE-2026-20245 Exploited Public exploit EPSS 25%

    Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability

    A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
    KEV Jun 9, 2026
  • High 8.6
    CVE-2026-20230 Exploited Public exploit EPSS 89%

    Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

    A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks thr…

    Cisco Cisco Unified Communications Manager Network devices
    KEV Jun 25, 2026
  • Critical 10.0
    CVE-2026-20223 Public exploit

    Cisco Secure Workload Unauthorized API Access Vulnerability

    A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role. This vulnerability is due to insufficient va…

    Cisco Cisco Secure Workload Network devices
  • High 8.6
    CVE-2026-20224 Public exploit

    Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability

    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does not need to have valid user credentials. …

    Cisco Cisco Catalyst SD-WAN Manager Network devices
  • Critical 10.0
    CVE-2026-20182 Exploited Public exploit EPSS 92%

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The secti…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
    KEV May 14, 2026
  • Medium 6.4
    CVE-2026-20169 Public exploit

    Cisco IoT Field Network Director Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access files and execute commands on a remote router. This vulnerability is due to insufficient inpu…

    Cisco Cisco IoT Field Network Director (IoT-FND) Network devices
  • Critical 9.9
    CVE-2026-20180 Public exploit

    Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability

    A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have at least Read O…

    Cisco Cisco Identity Services Engine Software Network devices
  • Critical 10.0
    CVE-2026-20131 Exploited · Ransomware Public exploit EPSS 44%

    Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. This vulnerability is due to ins…

    Cisco Cisco Secure Firewall Management Center (FMC) Network devices
    KEV Mar 19, 2026
  • Critical 10.0
    CVE-2026-20079 Exploited Public exploit EPSS 89%

    Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability

    A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying oper…

    Cisco Cisco Secure Firewall Management Center (FMC) Network devices
    KEV Sep 9, 2026
  • Critical 10.0
    CVE-2026-20127 Exploited Public exploit EPSS 88%

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remo…

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Feb 25, 2026
  • High 8.2
    CVE-2026-20045 Exploited Public exploit

    Cisco Unified Communications Products Remote Code Execution Vulnerability

    A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connectio…

    Cisco Cisco Unified Communications Manager Cisco Unity Connection Cisco Unified Communications Manager IM and Presence Service Network devices
    KEV Jan 21, 2026
  • Critical 10.0
    CVE-2025-20393 Exploited Public exploit EPSS 32%

    Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

    A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root…

    Cisco Cisco Secure Email Cisco Secure Email and Web Manager Network devices
    KEV Dec 17, 2025
  • High 8.6
    CVE-2025-20343 Public exploit

    Cisco Identity Services Engine Radius Suppression Denial of Service Vulnerability

    A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause Cisco ISE to restart unexpectedly. This vulnerability is due to a…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 6.5
    CVE-2025-20362 Exploited Public exploit EPSS 87%

    Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Softwa…

    Cisco Cisco Secure Firewall Threat Defense (FTD) Software Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Network devices
    KEV Sep 25, 2025
  • Critical 9.9
    CVE-2025-20333 Exploited Public exploit EPSS 72%

    A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Sec…

    Cisco Cisco Secure Firewall Threat Defense (FTD) Software Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Network devices
    KEV Sep 25, 2025
  • High 7.7
    CVE-2025-20352 Exploited Public exploit EPSS 41%

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Softw…

    Cisco Cisco IOS XE Software IOS Cisco IOS XE Catalyst SD-WAN iOS Network devices
    KEV Sep 29, 2025
  • Critical 10.0
    CVE-2025-20265 Public exploit EPSS 16%

    Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability

    A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device.  This vulnerability is du…

    Cisco Cisco Firepower Management Center Network devices
  • Critical 10.0
    CVE-2025-20282 Public exploit EPSS 39%

    Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

    A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute those files on the underlying operating system as root. This vulnerability is du…

    Cisco Cisco Identity Services Engine Software Network devices
  • Critical 10.0
    CVE-2025-20281 Exploited Public exploit EPSS 98%

    Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

    A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerab…

    Cisco Cisco Identity Services Engine Software Network devices
    KEV Jul 28, 2025
  • Critical 9.8
    CVE-2025-20260 Public exploit

    ClamAV PDF Scanning Buffer Overflow Vulnerability

    A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) condition, or execute arbitrary code on an affected device. This vulnerability exists…

    Cisco ClamAV clamav clamav Network devices Debian Ubuntu Alpine
  • High 8.6
    CVE-2025-20115 Public exploit

    Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability

    A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to a memory corruption …

    Cisco Cisco IOS XR Software iOS Network devices
  • Critical 9.1
    CVE-2025-20125 Public exploit EPSS 16%

    Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability

    A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node. This vulnerability is due to a lack of authorization in a …

    Cisco Cisco Identity Services Engine Software Cisco ISE Passive Identity Connector Network devices
  • Critical 9.9
    CVE-2025-20124 Public exploit EPSS 19%

    Cisco Identity Services Engine Java Deserialization Vulnerability

    A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device. This vulnerability is due to insecure deserialization of user-supplied Java byte streams by the affected…

    Cisco Cisco Identity Services Engine Software Cisco ISE Passive Identity Connector Network devices
  • High 8.6
    CVE-2024-20467 Public exploit

    A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an…

    Cisco Cisco IOS XE Software iOS Network devices
  • Critical 10.0
    CVE-2024-20419 Public exploit EPSS 81%

    A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unaut…

    Cisco Cisco Smart Software Manager On-Prem Network devices
  • Medium 6.0
    CVE-2024-20399 Exploited Public exploit

    Cisco NX-OS Software CLI Command Injection Vulnerability

    A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insuff…

    Cisco Cisco NX-OS Software Network devices
    KEV Jul 2, 2024
  • Medium 4.8
    CVE-2024-20405 Public exploit

    A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker …

    Cisco Cisco Unified Contact Center Express Cisco Unified Contact Center Enterprise Cisco Packaged Contact Center Enterprise Network devices
  • High 7.2
    CVE-2024-20404 Public exploit EPSS 23%

    A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker …

    Cisco Cisco Unified Contact Center Express Cisco Unified Contact Center Enterprise Cisco Packaged Contact Center Enterprise Network devices