EN
DeutschEnglishEspañolFrançaisItaliano

Start free Dashboard

Exploited vulnerabilities

Cisco

102 Cisco vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue102
Last 12 months21
In ransomware campaigns7
Last addition29 October 2026

The vulnerabilities102

  1. 29 October 2026CVE-2026-76418Secure Firewall ASA Software and Cisco Secure FTD SoftwareCisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
  2. 14 October 2026CVE-2026-76519Secure Email GatewayCisco Secure Email Gateway Relative Path Traversal Vulnerability
  3. 30 September 2026CVE-2026-76504Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
  4. 16 September 2026CVE-2026-76460Identity Services EngineCisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
  5. 14 September 2026CVE-2026-76461Secure Email GatewayCisco Secure Email Gateway SQL Injection Vulnerability
  6. 9 September 2026CVE-2026-20079Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
  7. 11 August 2026CVE-2026-20349Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
  8. 29 July 2026CVE-2026-20316Secure Firewall Management Center (FMC)Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityRansomware
  9. 13 July 2026CVE-2008-4128IOSCisco IOS Cross-Site Request Forgery Vulnerability
  10. 25 June 2026CVE-2026-20230Unified Communications ManagerCisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
  11. 15 June 2026CVE-2026-20262Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
  12. 9 June 2026CVE-2026-20245Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
  13. 14 May 2026CVE-2026-20182Catalyst SD-WANCisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
  14. 20 April 2026CVE-2026-20133Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
  15. 20 April 2026CVE-2026-20128Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
  16. 20 April 2026CVE-2026-20122Catalyst SD-WAN MangerCisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
  17. 19 March 2026CVE-2026-20131Secure Firewall Management Center (FMC)Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityRansomware
  18. 25 February 2026CVE-2026-20127Catalyst SD-WAN Controller and ManagerCisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
  19. 25 February 2026CVE-2022-20775SD-WANCisco SD-WAN Path Traversal Vulnerability
  20. 21 January 2026CVE-2026-20045Unified Communications ManagerCisco Unified Communications Products Code Injection Vulnerability
  21. 17 December 2025CVE-2025-20393Multiple ProductsCisco Multiple Products Improper Input Validation Vulnerability
  22. 29 September 2025CVE-2025-20352IOS and IOS XECisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
  23. 25 September 2025CVE-2025-20362Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
  24. 25 September 2025CVE-2025-20333Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
  25. 28 July 2025CVE-2025-20337Identity Services EngineCisco Identity Services Engine Injection Vulnerability
  26. 28 July 2025CVE-2025-20281Identity Services EngineCisco Identity Services Engine Injection Vulnerability
  27. 31 March 2025CVE-2024-20439Smart Licensing UtilityCisco Smart Licensing Utility Static Credential Vulnerability
  28. 3 March 2025CVE-2023-20118Small Business RV Series RoutersCisco Small Business RV Series Routers Command Injection Vulnerability
  29. 12 November 2024CVE-2014-2120Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
  30. 24 October 2024CVE-2024-20481Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Denial-of-Service Vulnerability
  31. 2 July 2024CVE-2024-20399NX-OSCisco NX-OS Command Injection Vulnerability
  32. 24 April 2024CVE-2024-20359Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Privilege Escalation Vulnerability
  33. 24 April 2024CVE-2024-20353Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Denial of Service Vulnerability
  34. 15 February 2024CVE-2020-3259Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Information Disclosure VulnerabilityRansomware
  35. 23 October 2023CVE-2023-20273Cisco IOS XE Web UICisco IOS XE Web UI Command Injection Vulnerability
  36. 16 October 2023CVE-2023-20198IOS XE Web UICisco IOS XE Web UI Privilege Escalation Vulnerability
  37. 10 October 2023CVE-2023-20109IOS and IOS XECisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
  38. 13 September 2023CVE-2023-20269Adaptive Security Appliance and Firepower Threat DefenseCisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityRansomware
  39. 19 May 2023CVE-2016-6415IOS, IOS XR, and IOS XECisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
  40. 19 May 2023CVE-2004-1464IOSCisco IOS Denial-of-Service Vulnerability
  41. 19 April 2023CVE-2017-6742IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  42. 24 October 2022CVE-2020-3433AnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityRansomware
  43. 24 October 2022CVE-2020-3153AnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityRansomware
  44. 8 June 2022CVE-2019-15271RV Series RoutersCisco RV Series Routers Deserialization of Untrusted Data Vulnerability
  45. 24 May 2022CVE-2016-6367Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
  46. 24 May 2022CVE-2016-6366Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
  47. 23 May 2022CVE-2022-20821IOS XRCisco IOS XR Open Port Vulnerability
  48. 25 March 2022CVE-2018-0147Secure Access Control System (ACS)Cisco Secure Access Control System Java Deserialization Vulnerability
  49. 25 March 2022CVE-2018-0125VPN RoutersCisco VPN Routers Remote Code Execution Vulnerability
  50. 25 March 2022CVE-2017-3881IOS and IOS XECisco IOS and IOS XE Remote Code Execution Vulnerability
  51. 25 March 2022CVE-2015-0666Prime Data Center Network Manager (DCNM)Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
  52. 25 March 2022CVE-2010-3035IOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
  53. 25 March 2022CVE-2009-2055IOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
  54. 3 March 2022CVE-2022-20708Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  55. 3 March 2022CVE-2022-20703Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  56. 3 March 2022CVE-2022-20701Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  57. 3 March 2022CVE-2022-20700Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  58. 3 March 2022CVE-2022-20699Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
  59. 3 March 2022CVE-2019-1652Small Business RV320 and RV325 Dual Gigabit WAN VPN RoutersCisco Small Business Routers Improper Input Validation Vulnerability
  60. 3 March 2022CVE-2018-0180IOS SoftwareCisco IOS Software Denial-of-Service Vulnerability
  61. 3 March 2022CVE-2018-0179IOS SoftwareCisco IOS Software Denial-of-Service Vulnerability
  62. 3 March 2022CVE-2018-0175IOS, XR, and XE SoftwareCisco IOS, XR, and XE Software Buffer Overflow Vulnerability
  63. 3 March 2022CVE-2018-0174IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
  64. 3 March 2022CVE-2018-0173IOS and IOS XE SoftwareCisco IOS and IOS XE Software Improper Input Validation Vulnerability
  65. 3 March 2022CVE-2018-0172IOS and IOS XE SoftwareCisco IOS and IOS XE Software Improper Input Validation Vulnerability
  66. 3 March 2022CVE-2018-0167IOS, XR, and XE SoftwareCisco IOS, XR, and XE Software Buffer Overflow Vulnerability
  67. 3 March 2022CVE-2018-0161IOS SoftwareCisco IOS Software Resource Management Errors Vulnerability
  68. 3 March 2022CVE-2018-0159IOS Software and Cisco IOS XE SoftwareCisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
  69. 3 March 2022CVE-2018-0158IOS Software and Cisco IOS XE SoftwareCisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
  70. 3 March 2022CVE-2018-0156IOS Software and Cisco IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
  71. 3 March 2022CVE-2018-0155Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series SwitchesCisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
  72. 3 March 2022CVE-2018-0154IOS SoftwareCisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
  73. 3 March 2022CVE-2018-0151IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
  74. 3 March 2022CVE-2017-6744IOS softwareCisco IOS Software SNMP Remote Code Execution Vulnerability
  75. 3 March 2022CVE-2017-6743IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  76. 3 March 2022CVE-2017-6740IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  77. 3 March 2022CVE-2017-6739IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  78. 3 March 2022CVE-2017-6738IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  79. 3 March 2022CVE-2017-6737IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  80. 3 March 2022CVE-2017-6736IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
  81. 3 March 2022CVE-2017-6663IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
  82. 3 March 2022CVE-2017-6627IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
  83. 3 March 2022CVE-2017-12319IOS XE SoftwareCisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
  84. 3 March 2022CVE-2017-12240IOS and IOS XE SoftwareCisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
  85. 3 March 2022CVE-2017-12238Catalyst 6800 Series SwitchesCisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
  86. 3 March 2022CVE-2017-12237IOS and IOS XE SoftwareCisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
  87. 3 March 2022CVE-2017-12235IOS softwareCisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
  88. 3 March 2022CVE-2017-12234IOS softwareCisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
  89. 3 March 2022CVE-2017-12233IOS softwareCisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
  90. 3 March 2022CVE-2017-12232IOS softwareCisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
  91. 3 March 2022CVE-2017-12231IOS softwareCisco IOS Software Network Address Translation Denial-of-Service Vulnerability
  92. 3 November 2021CVE-2021-1498HyperFlex HXCisco HyperFlex HX Data Platform Command Injection Vulnerability
  93. 3 November 2021CVE-2021-1497HyperFlex HXCisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
  94. 3 November 2021CVE-2020-3580Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Cross-Site Scripting (XSS) VulnerabilityRansomware
  95. 3 November 2021CVE-2020-3569IOS XRCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
  96. 3 November 2021CVE-2020-3566IOS XRCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
  97. 3 November 2021CVE-2020-3452Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Read-Only Path Traversal Vulnerability
  98. 3 November 2021CVE-2020-3161Cisco IP PhonesCisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
  99. 3 November 2021CVE-2020-3118IOS XRCisco IOS XR Software Discovery Protocol Format String Vulnerability
  100. 3 November 2021CVE-2019-1653Small Business RV320 and RV325 RoutersCisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
  101. 3 November 2021CVE-2018-0296Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
  102. 3 November 2021CVE-2018-0171IOS and IOS XECisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Cisco included.

Start freeMy Defence

All vendorsThe catalogue on the CISA website