Vulnérabilités exploitées

Cisco

102 vulnérabilités de Cisco dans le catalogue KEV de la CISA : celles pour lesquelles l'agence américaine de cybersécurité dispose de preuves d'exploitation lors d'attaques réelles.

Dans le catalogue102
12 derniers mois21
Campagnes de rançongiciel7
Dernier ajout29 octobre 2026

Les vulnérabilités102

  1. 29 octobre 2026CVE-2026-76418Secure Firewall ASA Software and Cisco Secure FTD SoftwareCisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
  2. 14 octobre 2026CVE-2026-76519Secure Email GatewayCisco Secure Email Gateway Relative Path Traversal Vulnerability
  3. 30 septembre 2026CVE-2026-76504Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
  4. 16 septembre 2026CVE-2026-76460Identity Services EngineCisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
  5. 14 septembre 2026CVE-2026-76461Secure Email GatewayCisco Secure Email Gateway SQL Injection Vulnerability
  6. 9 septembre 2026CVE-2026-20079Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
  7. 11 août 2026CVE-2026-20349Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
  8. 29 juillet 2026CVE-2026-20316Secure Firewall Management Center (FMC)Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityRançongiciel
  9. 13 juillet 2026CVE-2008-4128IOSCisco IOS Cross-Site Request Forgery Vulnerability
  10. 25 juin 2026CVE-2026-20230Unified Communications ManagerCisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
  11. 15 juin 2026CVE-2026-20262Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
  12. 9 juin 2026CVE-2026-20245Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
  13. 14 mai 2026CVE-2026-20182Catalyst SD-WANCisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
  14. 20 avril 2026CVE-2026-20133Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
  15. 20 avril 2026CVE-2026-20128Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
  16. 20 avril 2026CVE-2026-20122Catalyst SD-WAN MangerCisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
  17. 19 mars 2026CVE-2026-20131Secure Firewall Management Center (FMC)Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityRançongiciel
  18. 25 février 2026CVE-2026-20127Catalyst SD-WAN Controller and ManagerCisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
  19. 25 février 2026CVE-2022-20775SD-WANCisco SD-WAN Path Traversal Vulnerability
  20. 21 janvier 2026CVE-2026-20045Unified Communications ManagerCisco Unified Communications Products Code Injection Vulnerability
  21. 17 décembre 2025CVE-2025-20393Multiple ProductsCisco Multiple Products Improper Input Validation Vulnerability
  22. 29 septembre 2025CVE-2025-20352IOS and IOS XECisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
  23. 25 septembre 2025CVE-2025-20362Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
  24. 25 septembre 2025CVE-2025-20333Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
  25. 28 juillet 2025CVE-2025-20337Identity Services EngineCisco Identity Services Engine Injection Vulnerability
  26. 28 juillet 2025CVE-2025-20281Identity Services EngineCisco Identity Services Engine Injection Vulnerability
  27. 31 mars 2025CVE-2024-20439Smart Licensing UtilityCisco Smart Licensing Utility Static Credential Vulnerability
  28. 3 mars 2025CVE-2023-20118Small Business RV Series RoutersCisco Small Business RV Series Routers Command Injection Vulnerability
  29. 12 novembre 2024CVE-2014-2120Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
  30. 24 octobre 2024CVE-2024-20481Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Denial-of-Service Vulnerability
  31. 2 juillet 2024CVE-2024-20399NX-OSCisco NX-OS Command Injection Vulnerability
  32. 24 avril 2024CVE-2024-20359Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Privilege Escalation Vulnerability
  33. 24 avril 2024CVE-2024-20353Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Denial of Service Vulnerability
  34. 15 février 2024CVE-2020-3259Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Information Disclosure VulnerabilityRançongiciel
  35. 23 octobre 2023CVE-2023-20273Cisco IOS XE Web UICisco IOS XE Web UI Command Injection Vulnerability
  36. 16 octobre 2023CVE-2023-20198IOS XE Web UICisco IOS XE Web UI Privilege Escalation Vulnerability
  37. 10 octobre 2023CVE-2023-20109IOS and IOS XECisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
  38. 13 septembre 2023CVE-2023-20269Adaptive Security Appliance and Firepower Threat DefenseCisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityRançongiciel
  39. 19 mai 2023CVE-2016-6415IOS, IOS XR, and IOS XECisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
  40. 19 mai 2023CVE-2004-1464IOSCisco IOS Denial-of-Service Vulnerability
  41. 19 avril 2023CVE-2017-6742IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  42. 24 octobre 2022CVE-2020-3433AnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityRançongiciel
  43. 24 octobre 2022CVE-2020-3153AnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityRançongiciel
  44. 8 juin 2022CVE-2019-15271RV Series RoutersCisco RV Series Routers Deserialization of Untrusted Data Vulnerability
  45. 24 mai 2022CVE-2016-6367Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
  46. 24 mai 2022CVE-2016-6366Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
  47. 23 mai 2022CVE-2022-20821IOS XRCisco IOS XR Open Port Vulnerability
  48. 25 mars 2022CVE-2018-0147Secure Access Control System (ACS)Cisco Secure Access Control System Java Deserialization Vulnerability
  49. 25 mars 2022CVE-2018-0125VPN RoutersCisco VPN Routers Remote Code Execution Vulnerability
  50. 25 mars 2022CVE-2017-3881IOS and IOS XECisco IOS and IOS XE Remote Code Execution Vulnerability
  51. 25 mars 2022CVE-2015-0666Prime Data Center Network Manager (DCNM)Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
  52. 25 mars 2022CVE-2010-3035IOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
  53. 25 mars 2022CVE-2009-2055IOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
  54. 3 mars 2022CVE-2022-20708Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  55. 3 mars 2022CVE-2022-20703Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  56. 3 mars 2022CVE-2022-20701Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  57. 3 mars 2022CVE-2022-20700Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  58. 3 mars 2022CVE-2022-20699Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  59. 3 mars 2022CVE-2019-1652Small Business RV320 and RV325 Dual Gigabit WAN VPN RoutersCisco Small Business Routers Improper Input Validation Vulnerability
  60. 3 mars 2022CVE-2018-0180IOS SoftwareCisco IOS Software Denial-of-Service Vulnerability
  61. 3 mars 2022CVE-2018-0179IOS SoftwareCisco IOS Software Denial-of-Service Vulnerability
  62. 3 mars 2022CVE-2018-0175IOS, XR, and XE SoftwareCisco IOS, XR, and XE Software Buffer Overflow Vulnerability
  63. 3 mars 2022CVE-2018-0174IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
  64. 3 mars 2022CVE-2018-0173IOS and IOS XE SoftwareCisco IOS and IOS XE Software Improper Input Validation Vulnerability
  65. 3 mars 2022CVE-2018-0172IOS and IOS XE SoftwareCisco IOS and IOS XE Software Improper Input Validation Vulnerability
  66. 3 mars 2022CVE-2018-0167IOS, XR, and XE SoftwareCisco IOS, XR, and XE Software Buffer Overflow Vulnerability
  67. 3 mars 2022CVE-2018-0161IOS SoftwareCisco IOS Software Resource Management Errors Vulnerability
  68. 3 mars 2022CVE-2018-0159IOS Software and Cisco IOS XE SoftwareCisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
  69. 3 mars 2022CVE-2018-0158IOS Software and Cisco IOS XE SoftwareCisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
  70. 3 mars 2022CVE-2018-0156IOS Software and Cisco IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
  71. 3 mars 2022CVE-2018-0155Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series SwitchesCisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
  72. 3 mars 2022CVE-2018-0154IOS SoftwareCisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
  73. 3 mars 2022CVE-2018-0151IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
  74. 3 mars 2022CVE-2017-6744IOS softwareCisco IOS Software SNMP Remote Code Execution Vulnerability
  75. 3 mars 2022CVE-2017-6743IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  76. 3 mars 2022CVE-2017-6740IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  77. 3 mars 2022CVE-2017-6739IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  78. 3 mars 2022CVE-2017-6738IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  79. 3 mars 2022CVE-2017-6737IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  80. 3 mars 2022CVE-2017-6736IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  81. 3 mars 2022CVE-2017-6663IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
  82. 3 mars 2022CVE-2017-6627IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
  83. 3 mars 2022CVE-2017-12319IOS XE SoftwareCisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
  84. 3 mars 2022CVE-2017-12240IOS and IOS XE SoftwareCisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
  85. 3 mars 2022CVE-2017-12238Catalyst 6800 Series SwitchesCisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
  86. 3 mars 2022CVE-2017-12237IOS and IOS XE SoftwareCisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
  87. 3 mars 2022CVE-2017-12235IOS softwareCisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
  88. 3 mars 2022CVE-2017-12234IOS softwareCisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
  89. 3 mars 2022CVE-2017-12233IOS softwareCisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
  90. 3 mars 2022CVE-2017-12232IOS softwareCisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
  91. 3 mars 2022CVE-2017-12231IOS softwareCisco IOS Software Network Address Translation Denial-of-Service Vulnerability
  92. 3 novembre 2021CVE-2021-1498HyperFlex HXCisco HyperFlex HX Data Platform Command Injection Vulnerability
  93. 3 novembre 2021CVE-2021-1497HyperFlex HXCisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
  94. 3 novembre 2021CVE-2020-3580Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Cross-Site Scripting (XSS) VulnerabilityRançongiciel
  95. 3 novembre 2021CVE-2020-3569IOS XRCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
  96. 3 novembre 2021CVE-2020-3566IOS XRCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
  97. 3 novembre 2021CVE-2020-3452Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Read-Only Path Traversal Vulnerability
  98. 3 novembre 2021CVE-2020-3161Cisco IP PhonesCisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
  99. 3 novembre 2021CVE-2020-3118IOS XRCisco IOS XR Software Discovery Protocol Format String Vulnerability
  100. 3 novembre 2021CVE-2019-1653Small Business RV320 and RV325 RoutersCisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
  101. 3 novembre 2021CVE-2018-0296Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
  102. 3 novembre 2021CVE-2018-0171IOS and IOS XECisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

Données : catalogue Known Exploited Vulnerabilities (KEV) de la CISA, dernier ajout le 4 novembre 2026.
Le catalogue ne recense que les vulnérabilités dont l'exploitation est prouvée, pas toutes celles de l'éditeur.

Des alertes uniquement sur vos produits

Avec My Defence, vous recevez alertes et briefings uniquement sur les produits que vous utilisez, y compris ceux de Cisco.

Tous les éditeursLe catalogue sur le site de la CISA