Skip to content
OpenAdvisories

Vendor

Cisco

3,442 known vulnerabilities.

Products

Cisco Small Business RV Series Router Firmware 262 Cisco IOS XE Software 248 Cisco Identity Services Engine Software 200 Cisco Firepower Threat Defense Software 160 Cisco Adaptive Security Appliance (ASA) Software 159 Cisco Firepower Management Center 128 Cisco IOS XR Software 115 Cisco NX-OS Software 102 Cisco Secure Firewall Threat Defense (FTD) Software 81 Cisco Data Center Network Manager 74 Cisco Unified Communications Manager 62 Cisco SD-WAN vManage 61 Cisco SD-WAN Solution 54 Cisco Prime Infrastructure 50 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 48 Cisco Webex Meetings 46 Cisco Catalyst SD-WAN Manager 46 Cisco Unified Computing System (Managed) 41 Cisco Enterprise NFV Infrastructure Software 41 IOS 39 Cisco Unity Connection 39 Cisco IOS 36 Cisco ISE Passive Identity Connector 36 Cisco Unified Contact Center Express 36 Cisco WebEx WRF Player 35 Cisco Digital Network Architecture Center (DNA Center) 33 Cisco TelePresence Video Communication Server (VCS) Expressway 33 Cisco Email Security Appliance (ESA) 30 Cisco Application Policy Infrastructure Controller (APIC) 30 Cisco Secure Email 29 Cisco Aironet Access Point Software 29 Cisco UTD SNORT IPS Engine Software 29 Cisco Secure Firewall Management Center (FMC) 29 Cisco RoomOS Software 28 Cisco Nexus Dashboard 28 Cisco Unified Computing System E-Series Software (UCSE) 26 Cisco Wireless LAN Controller (WLC) 25 Cisco Web Security Appliance (WSA) 24 Cisco Unified Communications Manager IM and Presence Service 23 Cisco Secure Endpoint 23
All Critical High Medium Low Exploited only Public exploit

33 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-76519 Exploited Public exploit

    Cisco Secure Email Gateway Arbitrary File Write Vulnerability

    A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email…

    Cisco Cisco Secure Email Network devices
    KEV Oct 14, 2026
  • Critical 9.8
    CVE-2026-76504 Exploited Public exploit EPSS 39%

    Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability

    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling …

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Sep 30, 2026
  • Critical 10.0
    CVE-2026-76460 Exploited Public exploit EPSS 76%

    Cisco Identity Services Engine Authentication Bypass Vulnerability

    A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vul…

    Cisco Cisco Identity Services Engine Software Cisco ISE Passive Identity Connector Network devices
    KEV Sep 16, 2026
  • Critical 9.8
    CVE-2026-76461 Exploited Public exploit EPSS 40%

    Cisco Secure Email Gateway SQL Injection Vulnerability

    A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to i…

    Cisco Cisco Secure Email Network devices
    KEV Sep 14, 2026
  • High 8.6
    CVE-2026-20349 Exploited Public exploit

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

    A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload une…

    Cisco Cisco Secure Firewall Threat Defense (FTD) Software Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Network devices
    KEV Aug 11, 2026
  • Medium 6.5
    CVE-2026-20262 Exploited Public exploit EPSS 29%

    Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system. This vulnerability exists because the affect…

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Jun 15, 2026
  • High 7.8
    CVE-2026-20245 Exploited Public exploit EPSS 25%

    Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability

    A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
    KEV Jun 9, 2026
  • High 8.6
    CVE-2026-20230 Exploited Public exploit EPSS 89%

    Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

    A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks thr…

    Cisco Cisco Unified Communications Manager Network devices
    KEV Jun 25, 2026
  • Critical 10.0
    CVE-2026-20182 Exploited Public exploit EPSS 92%

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The secti…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
    KEV May 14, 2026
  • Critical 10.0
    CVE-2026-20131 Exploited · Ransomware Public exploit EPSS 44%

    Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. This vulnerability is due to ins…

    Cisco Cisco Secure Firewall Management Center (FMC) Network devices
    KEV Mar 19, 2026
  • Critical 10.0
    CVE-2026-20079 Exploited Public exploit EPSS 89%

    Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability

    A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying oper…

    Cisco Cisco Secure Firewall Management Center (FMC) Network devices
    KEV Sep 9, 2026
  • Critical 10.0
    CVE-2026-20127 Exploited Public exploit EPSS 88%

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remo…

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Feb 25, 2026
  • High 8.2
    CVE-2026-20045 Exploited Public exploit

    Cisco Unified Communications Products Remote Code Execution Vulnerability

    A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connectio…

    Cisco Cisco Unified Communications Manager Cisco Unity Connection Cisco Unified Communications Manager IM and Presence Service Network devices
    KEV Jan 21, 2026
  • Critical 10.0
    CVE-2025-20393 Exploited Public exploit EPSS 32%

    Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

    A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root…

    Cisco Cisco Secure Email Cisco Secure Email and Web Manager Network devices
    KEV Dec 17, 2025
  • Medium 6.5
    CVE-2025-20362 Exploited Public exploit EPSS 87%

    Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Softwa…

    Cisco Cisco Secure Firewall Threat Defense (FTD) Software Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Network devices
    KEV Sep 25, 2025
  • Critical 9.9
    CVE-2025-20333 Exploited Public exploit EPSS 72%

    A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Sec…

    Cisco Cisco Secure Firewall Threat Defense (FTD) Software Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Network devices
    KEV Sep 25, 2025
  • High 7.7
    CVE-2025-20352 Exploited Public exploit EPSS 41%

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Softw…

    Cisco Cisco IOS XE Software IOS Cisco IOS XE Catalyst SD-WAN iOS Network devices
    KEV Sep 29, 2025
  • Critical 10.0
    CVE-2025-20281 Exploited Public exploit EPSS 98%

    Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

    A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerab…

    Cisco Cisco Identity Services Engine Software Network devices
    KEV Jul 28, 2025
  • Medium 6.0
    CVE-2024-20399 Exploited Public exploit

    Cisco NX-OS Software CLI Command Injection Vulnerability

    A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insuff…

    Cisco Cisco NX-OS Software Network devices
    KEV Jul 2, 2024
  • High 7.2
    CVE-2023-20273 Exploited Public exploit EPSS 93%

    A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject …

    Cisco Cisco IOS XE Software iOS Network devices
    KEV Oct 23, 2023
  • Critical 10.0
    CVE-2023-20198 Exploited Public exploit EPSS 100%

    Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IO…

    Cisco Cisco IOS XE Software iOS Network devices
    KEV Oct 16, 2023
  • Critical 10.0
    CVE-2022-20699 Exploited Public exploit EPSS 72%

    Cisco Small Business RV Series Routers Vulnerabilities

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization pro…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2021-1498 Exploited Public exploit EPSS 100%

    Cisco HyperFlex HX Command Injection Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Det…

    Cisco Cisco HyperFlex HX Data Platform Network devices
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-1497 Exploited Public exploit EPSS 100%

    Cisco HyperFlex HX Command Injection Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Det…

    Cisco Cisco HyperFlex HX Data Platform Network devices
    KEV Nov 3, 2021
  • Medium 6.1
    CVE-2020-3580 Exploited · Ransomware Public exploit EPSS 86%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities

    Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against …

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-3433 Exploited · Ransomware Public exploit EPSS 10%

    Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

    A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to ha…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
    KEV Oct 24, 2022
  • High 7.5
    CVE-2020-3452 Exploited Public exploit EPSS 100%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

    A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-3161 Exploited Public exploit EPSS 84%

    Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability

    A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to…

    Cisco Cisco IP phone Network devices
    KEV Nov 3, 2021
  • Medium 6.5
    CVE-2020-3153 Exploited · Ransomware Public exploit EPSS 29%

    Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

    A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
    KEV Oct 24, 2022
  • High 7.2
    CVE-2019-1652 Exploited Public exploit EPSS 96%

    Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vu…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Mar 3, 2022
  • High 7.5
    CVE-2019-1653 Exploited Public exploit EPSS 100%

    Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls …

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Nov 3, 2021
  • High 8.8
    CVE-2017-6736 Exploited Public exploit EPSS 70%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6742 Exploited Public exploit EPSS 21%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    Cisco IntelliShield Cisco IOS XE Software Universal Product iOS Network devices
    KEV Apr 19, 2023