Cisco

Las vulnerabilidades102

1. 29 de octubre de 2026CVE-2026-76418Secure Firewall ASA Software and Cisco Secure FTD SoftwareCisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
2. 14 de octubre de 2026CVE-2026-76519Secure Email GatewayCisco Secure Email Gateway Relative Path Traversal Vulnerability
3. 30 de septiembre de 2026CVE-2026-76504Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
4. 16 de septiembre de 2026CVE-2026-76460Identity Services EngineCisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
5. 14 de septiembre de 2026CVE-2026-76461Secure Email GatewayCisco Secure Email Gateway SQL Injection Vulnerability
6. 9 de septiembre de 2026CVE-2026-20079Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
7. 11 de agosto de 2026CVE-2026-20349Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
8. 29 de julio de 2026CVE-2026-20316Secure Firewall Management Center (FMC)Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityRansomware
9. 13 de julio de 2026CVE-2008-4128IOSCisco IOS Cross-Site Request Forgery Vulnerability
10. 25 de junio de 2026CVE-2026-20230Unified Communications ManagerCisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
11. 15 de junio de 2026CVE-2026-20262Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
12. 9 de junio de 2026CVE-2026-20245Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
13. 14 de mayo de 2026CVE-2026-20182Catalyst SD-WANCisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
14. 20 de abril de 2026CVE-2026-20133Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
15. 20 de abril de 2026CVE-2026-20128Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
16. 20 de abril de 2026CVE-2026-20122Catalyst SD-WAN MangerCisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
17. 19 de marzo de 2026CVE-2026-20131Secure Firewall Management Center (FMC)Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityRansomware
18. 25 de febrero de 2026CVE-2026-20127Catalyst SD-WAN Controller and ManagerCisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
19. 25 de febrero de 2026CVE-2022-20775SD-WANCisco SD-WAN Path Traversal Vulnerability
20. 21 de enero de 2026CVE-2026-20045Unified Communications ManagerCisco Unified Communications Products Code Injection Vulnerability
21. 17 de diciembre de 2025CVE-2025-20393Multiple ProductsCisco Multiple Products Improper Input Validation Vulnerability
22. 29 de septiembre de 2025CVE-2025-20352IOS and IOS XECisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
23. 25 de septiembre de 2025CVE-2025-20362Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
24. 25 de septiembre de 2025CVE-2025-20333Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
25. 28 de julio de 2025CVE-2025-20337Identity Services EngineCisco Identity Services Engine Injection Vulnerability
26. 28 de julio de 2025CVE-2025-20281Identity Services EngineCisco Identity Services Engine Injection Vulnerability
27. 31 de marzo de 2025CVE-2024-20439Smart Licensing UtilityCisco Smart Licensing Utility Static Credential Vulnerability
28. 3 de marzo de 2025CVE-2023-20118Small Business RV Series RoutersCisco Small Business RV Series Routers Command Injection Vulnerability
29. 12 de noviembre de 2024CVE-2014-2120Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
30. 24 de octubre de 2024CVE-2024-20481Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Denial-of-Service Vulnerability
31. 2 de julio de 2024CVE-2024-20399NX-OSCisco NX-OS Command Injection Vulnerability
32. 24 de abril de 2024CVE-2024-20359Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Privilege Escalation Vulnerability
33. 24 de abril de 2024CVE-2024-20353Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Denial of Service Vulnerability
34. 15 de febrero de 2024CVE-2020-3259Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Information Disclosure VulnerabilityRansomware
35. 23 de octubre de 2023CVE-2023-20273Cisco IOS XE Web UICisco IOS XE Web UI Command Injection Vulnerability
36. 16 de octubre de 2023CVE-2023-20198IOS XE Web UICisco IOS XE Web UI Privilege Escalation Vulnerability
37. 10 de octubre de 2023CVE-2023-20109IOS and IOS XECisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
38. 13 de septiembre de 2023CVE-2023-20269Adaptive Security Appliance and Firepower Threat DefenseCisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityRansomware
39. 19 de mayo de 2023CVE-2016-6415IOS, IOS XR, and IOS XECisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
40. 19 de mayo de 2023CVE-2004-1464IOSCisco IOS Denial-of-Service Vulnerability
41. 19 de abril de 2023CVE-2017-6742IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
42. 24 de octubre de 2022CVE-2020-3433AnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityRansomware
43. 24 de octubre de 2022CVE-2020-3153AnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityRansomware
44. 8 de junio de 2022CVE-2019-15271RV Series RoutersCisco RV Series Routers Deserialization of Untrusted Data Vulnerability
45. 24 de mayo de 2022CVE-2016-6367Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
46. 24 de mayo de 2022CVE-2016-6366Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
47. 23 de mayo de 2022CVE-2022-20821IOS XRCisco IOS XR Open Port Vulnerability
48. 25 de marzo de 2022CVE-2018-0147Secure Access Control System (ACS)Cisco Secure Access Control System Java Deserialization Vulnerability
49. 25 de marzo de 2022CVE-2018-0125VPN RoutersCisco VPN Routers Remote Code Execution Vulnerability
50. 25 de marzo de 2022CVE-2017-3881IOS and IOS XECisco IOS and IOS XE Remote Code Execution Vulnerability
51. 25 de marzo de 2022CVE-2015-0666Prime Data Center Network Manager (DCNM)Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
52. 25 de marzo de 2022CVE-2010-3035IOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
53. 25 de marzo de 2022CVE-2009-2055IOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
54. 3 de marzo de 2022CVE-2022-20708Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
55. 3 de marzo de 2022CVE-2022-20703Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
56. 3 de marzo de 2022CVE-2022-20701Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
57. 3 de marzo de 2022CVE-2022-20700Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
58. 3 de marzo de 2022CVE-2022-20699Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
59. 3 de marzo de 2022CVE-2019-1652Small Business RV320 and RV325 Dual Gigabit WAN VPN RoutersCisco Small Business Routers Improper Input Validation Vulnerability
60. 3 de marzo de 2022CVE-2018-0180IOS SoftwareCisco IOS Software Denial-of-Service Vulnerability
61. 3 de marzo de 2022CVE-2018-0179IOS SoftwareCisco IOS Software Denial-of-Service Vulnerability
62. 3 de marzo de 2022CVE-2018-0175IOS, XR, and XE SoftwareCisco IOS, XR, and XE Software Buffer Overflow Vulnerability
63. 3 de marzo de 2022CVE-2018-0174IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
64. 3 de marzo de 2022CVE-2018-0173IOS and IOS XE SoftwareCisco IOS and IOS XE Software Improper Input Validation Vulnerability
65. 3 de marzo de 2022CVE-2018-0172IOS and IOS XE SoftwareCisco IOS and IOS XE Software Improper Input Validation Vulnerability
66. 3 de marzo de 2022CVE-2018-0167IOS, XR, and XE SoftwareCisco IOS, XR, and XE Software Buffer Overflow Vulnerability
67. 3 de marzo de 2022CVE-2018-0161IOS SoftwareCisco IOS Software Resource Management Errors Vulnerability
68. 3 de marzo de 2022CVE-2018-0159IOS Software and Cisco IOS XE SoftwareCisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
69. 3 de marzo de 2022CVE-2018-0158IOS Software and Cisco IOS XE SoftwareCisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
70. 3 de marzo de 2022CVE-2018-0156IOS Software and Cisco IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
71. 3 de marzo de 2022CVE-2018-0155Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series SwitchesCisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
72. 3 de marzo de 2022CVE-2018-0154IOS SoftwareCisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
73. 3 de marzo de 2022CVE-2018-0151IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
74. 3 de marzo de 2022CVE-2017-6744IOS softwareCisco IOS Software SNMP Remote Code Execution Vulnerability
75. 3 de marzo de 2022CVE-2017-6743IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
76. 3 de marzo de 2022CVE-2017-6740IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
77. 3 de marzo de 2022CVE-2017-6739IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
78. 3 de marzo de 2022CVE-2017-6738IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
79. 3 de marzo de 2022CVE-2017-6737IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
80. 3 de marzo de 2022CVE-2017-6736IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
81. 3 de marzo de 2022CVE-2017-6663IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
82. 3 de marzo de 2022CVE-2017-6627IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
83. 3 de marzo de 2022CVE-2017-12319IOS XE SoftwareCisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
84. 3 de marzo de 2022CVE-2017-12240IOS and IOS XE SoftwareCisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
85. 3 de marzo de 2022CVE-2017-12238Catalyst 6800 Series SwitchesCisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
86. 3 de marzo de 2022CVE-2017-12237IOS and IOS XE SoftwareCisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
87. 3 de marzo de 2022CVE-2017-12235IOS softwareCisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
88. 3 de marzo de 2022CVE-2017-12234IOS softwareCisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
89. 3 de marzo de 2022CVE-2017-12233IOS softwareCisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
90. 3 de marzo de 2022CVE-2017-12232IOS softwareCisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
91. 3 de marzo de 2022CVE-2017-12231IOS softwareCisco IOS Software Network Address Translation Denial-of-Service Vulnerability
92. 3 de noviembre de 2021CVE-2021-1498HyperFlex HXCisco HyperFlex HX Data Platform Command Injection Vulnerability
93. 3 de noviembre de 2021CVE-2021-1497HyperFlex HXCisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
94. 3 de noviembre de 2021CVE-2020-3580Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Cross-Site Scripting (XSS) VulnerabilityRansomware
95. 3 de noviembre de 2021CVE-2020-3569IOS XRCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
96. 3 de noviembre de 2021CVE-2020-3566IOS XRCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
97. 3 de noviembre de 2021CVE-2020-3452Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Read-Only Path Traversal Vulnerability
98. 3 de noviembre de 2021CVE-2020-3161Cisco IP PhonesCisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
99. 3 de noviembre de 2021CVE-2020-3118IOS XRCisco IOS XR Software Discovery Protocol Format String Vulnerability
100. 3 de noviembre de 2021CVE-2019-1653Small Business RV320 and RV325 RoutersCisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
101. 3 de noviembre de 2021CVE-2018-0296Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
102. 3 de noviembre de 2021CVE-2018-0171IOS and IOS XECisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

Datos: catálogo Known Exploited Vulnerabilities (KEV) de la CISA, última incorporación el 4 de noviembre de 2026.
El catálogo solo recoge las vulnerabilidades con pruebas de explotación, no todas las del fabricante.