Vendor
Cisco vulnerabilities under active attack
101 Cisco vulnerabilities have confirmed evidence of exploitation in the wild, and 7 are used in ransomware campaigns.
101
confirmed exploited
7
used in ransomware
101
past fix deadline
- CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Cisco · Secure Email Gateway
- CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Cisco · Identity Services Engine
- CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability Cisco · Secure Email Gateway
- CVE-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
- CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)
- CVE-2026-20316 Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability Cisco · Secure Firewall Management Center (FMC)
- CVE-2008-4128 Cisco IOS Cross-Site Request Forgery Vulnerability Cisco · IOS
- CVE-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability Cisco · Unified Communications Manager
- CVE-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Cisco · Catalyst SD-WAN
- CVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability Cisco · Catalyst SD-WAN Manger
- CVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability Cisco · Secure Firewall Management Center (FMC)
- CVE-2022-20775 Cisco SD-WAN Path Traversal Vulnerability Cisco · SD-WAN
- CVE-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability Cisco · Catalyst SD-WAN Controller and Manager
- CVE-2026-20045 Cisco Unified Communications Products Code Injection Vulnerability Cisco · Unified Communications Manager
- CVE-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability Cisco · Multiple Products
- CVE-2025-20352 Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Cisco · IOS and IOS XE
- CVE-2025-20362 Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
- CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
- CVE-2025-20337 Cisco Identity Services Engine Injection Vulnerability Cisco · Identity Services Engine
- CVE-2025-20281 Cisco Identity Services Engine Injection Vulnerability Cisco · Identity Services Engine
- CVE-2024-20439 Cisco Smart Licensing Utility Static Credential Vulnerability Cisco · Smart Licensing Utility
- CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability Cisco · Small Business RV Series Routers
- CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability Cisco · Adaptive Security Appliance (ASA)
- CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2024-20399 Cisco NX-OS Command Injection Vulnerability Cisco · NX-OS
- CVE-2024-20359 Cisco ASA and FTD Privilege Escalation Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2024-20353 Cisco ASA and FTD Denial of Service Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2020-3259 Cisco ASA and FTD Information Disclosure Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2023-20273 Cisco IOS XE Web UI Command Injection Vulnerability Cisco · Cisco IOS XE Web UI
- CVE-2023-20198 Cisco IOS XE Web UI Privilege Escalation Vulnerability Cisco · IOS XE Web UI
- CVE-2023-20109 Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability Cisco · IOS and IOS XE
- CVE-2023-20269 Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Cisco · Adaptive Security Appliance and Firepower Threat Defense
- CVE-2004-1464 Cisco IOS Denial-of-Service Vulnerability Cisco · IOS
- CVE-2016-6415 Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability Cisco · IOS, IOS XR, and IOS XE
- CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2020-3433 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability Cisco · AnyConnect Secure
- CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability Cisco · AnyConnect Secure
- CVE-2019-15271 Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability Cisco · RV Series Routers
- CVE-2016-6366 Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability Cisco · Adaptive Security Appliance (ASA)
- CVE-2016-6367 Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability Cisco · Adaptive Security Appliance (ASA)
- CVE-2022-20821 Cisco IOS XR Open Port Vulnerability Cisco · IOS XR
- CVE-2018-0147 Cisco Secure Access Control System Java Deserialization Vulnerability Cisco · Secure Access Control System (ACS)
- CVE-2018-0125 Cisco VPN Routers Remote Code Execution Vulnerability Cisco · VPN Routers
- CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability Cisco · IOS and IOS XE
- CVE-2015-0666 Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability Cisco · Prime Data Center Network Manager (DCNM)
- CVE-2010-3035 Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability Cisco · IOS XR
- CVE-2009-2055 Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability Cisco · IOS XR
- CVE-2022-20708 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2022-20703 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2022-20701 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2022-20700 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2022-20699 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers
- CVE-2019-1652 Cisco Small Business Routers Improper Input Validation Vulnerability Cisco · Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers
- CVE-2018-0180 Cisco IOS Software Denial-of-Service Vulnerability Cisco · IOS Software
- CVE-2018-0179 Cisco IOS Software Denial-of-Service Vulnerability Cisco · IOS Software
- CVE-2018-0175 Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Cisco · IOS, XR, and XE Software
- CVE-2018-0174 Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability Cisco · IOS XE Software
- CVE-2018-0173 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Cisco · IOS and IOS XE Software
- CVE-2018-0172 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Cisco · IOS and IOS XE Software
- CVE-2018-0167 Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Cisco · IOS, XR, and XE Software
- CVE-2018-0161 Cisco IOS Software Resource Management Errors Vulnerability Cisco · IOS Software
- CVE-2018-0159 Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability Cisco · IOS Software and Cisco IOS XE Software
- CVE-2018-0158 Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability Cisco · IOS Software and Cisco IOS XE Software
- CVE-2018-0156 Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability Cisco · IOS Software and Cisco IOS XE Software
- CVE-2018-0155 Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability Cisco · Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches
- CVE-2018-0154 Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability Cisco · IOS Software
- CVE-2018-0151 Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6744 Cisco IOS Software SNMP Remote Code Execution Vulnerability Cisco · IOS software
- CVE-2017-6743 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6740 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6739 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6738 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6737 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6663 Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-6627 Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-12319 Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability Cisco · IOS XE Software
- CVE-2017-12240 Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-12238 Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability Cisco · Catalyst 6800 Series Switches
- CVE-2017-12237 Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability Cisco · IOS and IOS XE Software
- CVE-2017-12235 Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2017-12234 Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2017-12233 Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2017-12232 Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2017-12231 Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability Cisco · IOS software
- CVE-2020-3452 Cisco ASA and FTD Read-Only Path Traversal Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2020-3580 Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- CVE-2021-1497 Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability Cisco · HyperFlex HX
- CVE-2021-1498 Cisco HyperFlex HX Data Platform Command Injection Vulnerability Cisco · HyperFlex HX
- CVE-2018-0171 Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability Cisco · IOS and IOS XE
- CVE-2020-3118 Cisco IOS XR Software Discovery Protocol Format String Vulnerability Cisco · IOS XR
- CVE-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Cisco · IOS XR
- CVE-2020-3569 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Cisco · IOS XR
- CVE-2020-3161 Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability Cisco · Cisco IP Phones
- CVE-2019-1653 Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability Cisco · Small Business RV320 and RV325 Routers
- CVE-2018-0296 Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability Cisco · Adaptive Security Appliance (ASA)