Cisco
Vulnerability activity for Cisco: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 74
- Critical (CVSS 9+)
- 23
- Exploited (CISA KEV)
- 2
- With exploit code
- 0
Last 90 days
- CVEs
- 125
- Critical (CVSS 9+)
- 38
- Exploited (CISA KEV)
- 6
- With exploit code
- 4
Last 365 days
- CVEs
- 144
- Critical (CVSS 9+)
- 42
- Exploited (CISA KEV)
- 20
- With exploit code
- 10
Next expected patch release
Cisco FXOS / NX-OS bundled publication
Feb 24, 2027, in 118 days
Expected from the vendor's usual schedule; vendors can shift dates.
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 9.8CriticalOct 14, 2026Cisco Secure Email Gateway Path traversal / file handlingCVE-2026-76519Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.Added to KEV Oct 14, 2026Exploited1.6% likely
- 9.8CriticalSep 30, 2026Cisco Catalyst SD-WAN ManagerCVE-2026-76504Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.Added to KEV Sep 30, 2026Exploited1.8% likelyDetection
- 10.0CriticalSep 16, 2026Cisco Identity Services EngineCVE-2026-76460Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.Added to KEV Sep 16, 2026Exploited14% likelyExploit codeNucleiDetection
- 9.8CriticalSep 14, 2026Cisco Secure Email Gateway SQL injectionCVE-2026-76461Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.Added to KEV Sep 14, 2026Exploited30% likelyExploit code
- 10.0CriticalSep 9, 2026Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management Auth bypass / access controlCVE-2026-20079Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.Added to KEV Sep 9, 2026Exploited88% likelyExploit codeMetasploit · NucleiDetection
- 8.6HighAug 11, 2026Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Memory corruptionCVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.Added to KEV Aug 11, 2026Exploited1% likely
- 5.3MediumJul 29, 2026Cisco Secure Firewall Management Center (FMC) Auth bypass / access controlCVE-2026-20316Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.Added to KEV Jul 29, 2026Exploited35% likely
- 8.1HighJul 13, 2026Cisco IOS CSRFCVE-2008-4128Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI.Added to KEV Jul 13, 2026Exploited34% likelyExploit codeExploit-DB
- 8.6HighJun 25, 2026Cisco Unified Communications Manager SSRFCVE-2026-20230Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an unauthenticated, remote attacker to write files to the underlying operating system that could be used later to elevate to root.Added to KEV Jun 25, 2026Exploited88% likelyExploit codeDetection
- 6.5MediumJun 15, 2026Cisco Catalyst SD-WAN Manager Path traversal / file handlingCVE-2026-20262Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.Added to KEV Jun 15, 2026Exploited29% likely
- 7.8HighJun 9, 2026Cisco Catalyst SD-WAN ManagerCVE-2026-20245Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerability could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system.Added to KEV Jun 9, 2026Exploited25% likely
- 10.0CriticalMay 14, 2026Cisco Catalyst SD-WAN Auth bypass / access controlCVE-2026-20182Cisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability that allows an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.Added to KEV May 14, 2026Exploited92% likelyExploit codeMetasploit
- 7.5HighApr 20, 2026Cisco Catalyst SD-WAN ManagerCVE-2026-20128Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacker to gain DCA user privileges by accessing a credential file for the DCA user on the filesystem as a low-privileged user.Added to KEV Apr 20, 2026Exploited7.3% likely
- 6.5MediumApr 20, 2026Cisco Catalyst SD-WAN Manager Information disclosureCVE-2026-20133Cisco Catalyst SD-WAN Manager contains an exposure of sensitive information to an unauthorized actor vulnerability that could allow remote attackers to view sensitive information on affected systems.Added to KEV Apr 20, 2026Exploited31% likely
- 5.4MediumApr 20, 2026Cisco Catalyst SD-WAN MangerCVE-2026-20122Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.Added to KEV Apr 20, 2026Exploited26% likely
- 10.0CriticalMar 19, 2026Cisco Secure Firewall Management Center (FMC) DeserializationCVE-2026-20131Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device.Added to KEV Mar 19, 2026Exploited43% likelyExploit code
- 10.0CriticalFeb 25, 2026Cisco Catalyst SD-WAN Controller and Manager Auth bypass / access controlCVE-2026-20127Affected: Cisco Catalyst SD-WAN Controller and Manager. Attacker gains: Unauthorized access to the SD-WAN network. Recommended action: Immediately update to the latest version of the software.Added to KEV Feb 25, 2026Exploited88% likelyExploit codeMetasploit
- 7.8HighFeb 25, 2026Cisco SD-WAN Path traversal / file handlingCVE-2022-20775Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.Added to KEV Feb 25, 2026Exploited12% likely
- 8.2HighJan 21, 2026Cisco Unified Communications Manager Code / command injectionCVE-2026-20045Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance contain a code injection vulnerability that could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.Added to KEV Jan 21, 2026Exploited4.5% likely
- 10.0CriticalDec 17, 2025Cisco Multiple ProductsCVE-2025-20393Cisco Secure Email Gateway, Secure Email, AsyncOS Software, and Web Manager appliances contains an improper input validation vulnerability that allows threat actors to execute arbitrary commands with root privileges on the underlying operating system of an affected appliance.Added to KEV Dec 17, 2025Exploited32% likelyExploit code
- 7.7HighSep 24, 2025Cisco IOS and IOS XE Memory corruptionCVE-2025-20352Cisco IOS and IOS XE Software. An attacker gains the ability to cause a denial of service or execute arbitrary code on the affected device. Upgrade to a fixed version of Cisco IOS or IOS XE Software as soon as possible.Added to KEV Sep 29, 2025 · 4 days after publicationExploited42% likelyDetection
- 9.9CriticalSep 25, 2025Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Memory corruptionCVE-2025-20333Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.Added to KEV Sep 25, 2025 · same day as publicationExploited71% likelyDetection
- 6.5MediumSep 25, 2025Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Auth bypass / access controlCVE-2025-20362Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333.Added to KEV Sep 25, 2025 · same day as publicationExploited87% likelyExploit codeNucleiDetection
- 10.0CriticalJun 25, 2025Cisco Identity Services Engine Code / command injectionCVE-2025-20281Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.Added to KEV Jul 28, 2025 · 32 days after publicationExploited98% likelyExploit codeNucleiDetection
- 10.0CriticalJul 16, 2025Cisco Identity Services Engine Code / command injectionCVE-2025-20337Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.Added to KEV Jul 28, 2025 · 11 days after publicationExploited74% likelyDetection
Recent
- 8.6HighOct 28, 2026CiscoCVE-2026-76418A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request wh
- –UnscoredOct 23, 2026CiscoADV-cisco-ec79e3d0f354Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered. A security researcher demonstrated that the private keys for eight eMudhra intermediate certificates were fundamentally broken due to an unprecedented error in their Key Generation Ceremony (KGC) in April 2025. This allows anyone to brute-force acquire these private keys within seconds. For more information, see eMudhra Intermediate CA Compromise an
- –UnscoredOct 21, 2026CiscoADV-cccs-f99ddc6a588dSerial number: AV26-1073 Date: October 21, 2026 As of October 21, 2026, Cisco is affected by vulnerabilities in the following products: Cisco IOS XR Software Release Multiple versions Cisco Expressway Series Release Prior to X15.5.20 Snort 3 Release Prior to 3.12.4.0 Cisco Cyber Vision Release Prior to 5.6.0 Cisco Secure FTD Software Release Multiple versions Cisco Secure Client Release Prior to 5.1.20.333 Cisco Emergency Responder, Prime Collaboration Deployment, Unified CM, Unified CM IM&P, Un
- 6.6MediumOct 21, 2026Cisco TelePresence Video Communication Server (VCS) ExpresswayCVE-2026-76497As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabiliti
- 7.5HighOct 21, 2026Cisco IOS XR SoftwareCVE-2026-76505A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network processor
- 7.8HighOct 21, 2026Cisco Open Source Snort3 Auth bypass / access controlCVE-2026-76524A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to
- 7.0HighOct 21, 2026Cisco TelePresence Video Communication Server (VCS) Expressway Path traversal / file handlingCVE-2026-76496As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabiliti
- 7.8HighOct 21, 2026Cisco TelePresence Video Communication Server (VCS) Expressway Privilege escalationCVE-2026-76495As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabiliti
- 7.8HighOct 21, 2026Cisco TelePresence Video Communication Server (VCS) Expressway Code / command injectionCVE-2026-76494As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabiliti
- 7.5HighOct 21, 2026Cisco TelePresence Video Communication Server (VCS) ExpresswayCVE-2026-76493As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabiliti
- 8.6HighOct 21, 2026Cisco TelePresence Video Communication Server (VCS) Expressway Memory corruptionCVE-2026-76490As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabiliti
- 5.8MediumOct 21, 2026Cisco Open Source Snort3 Denial of serviceCVE-2026-76489Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incompl
- 7.5HighOct 21, 2026Cisco TelePresence Video Communication Server (VCS) Expressway Memory corruptionCVE-2026-76492As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabiliti
- 7.5HighOct 21, 2026Cisco TelePresence Video Communication Server (VCS) ExpresswayCVE-2026-76491As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabiliti
- 7.5HighOct 21, 2026Cisco Emergency ResponderCVE-2026-76481As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&
- 5.3MediumOct 21, 2026Cisco Unified Communications Manager Auth bypass / access controlCVE-2026-76487A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to im
- 7.8HighOct 21, 2026Cisco Emergency Responder Path traversal / file handlingCVE-2026-76479As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&
- 8.8HighOct 21, 2026Cisco Emergency Responder Auth bypass / access controlCVE-2026-76478As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&
- 8.8HighOct 21, 2026Cisco Emergency ResponderCVE-2026-76476As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&
- 8.8HighOct 21, 2026Cisco Emergency Responder SQL injectionCVE-2026-76477As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&
- 9.3CriticalOct 21, 2026Cisco Emergency Responder XSSCVE-2026-76475As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&
- 9.8CriticalOct 21, 2026Cisco Emergency Responder Auth bypass / access controlCVE-2026-76474As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&
- 5.3MediumOct 21, 2026Cisco Open Source Snort3 Denial of serviceCVE-2026-76445Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition. The vulnerability is due to a flaw in logic handlin
- 9.8CriticalOct 21, 2026Cisco Emergency Responder Code / command injectionCVE-2026-76473As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in softw
- 5.3MediumOct 21, 2026Cisco TelePresence Video Communication Server (VCS) Expressway Information disclosureCVE-2026-76435A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to insufficient authorization checks of HTTP requests during Mobile and Remote Access (MRA) provisioning. An attacker could
- 9.8CriticalOct 21, 2026Cisco TelePresence Video Communication Server (VCS) Expressway Auth bypass / access controlCVE-2026-76466A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due to the use of persistent cookies. Addi
- 5.5MediumOct 21, 2026Cisco Secure ClientCVE-2026-76462A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An at
- 7.5HighOct 21, 2026Cisco Cyber Vision Denial of serviceCVE-2026-20356As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulne
- 7.5HighOct 21, 2026Cisco Cyber VisionCVE-2026-20236As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulne
- 5.8MediumOct 21, 2026Cisco Cyber Vision Memory corruptionCVE-2026-20221Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected restart of the Snort 3 Detection Engine. This vulnerability i
- 7.8HighOct 21, 2026Cisco Cyber Vision Privilege escalationCVE-2026-20291As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulne
- 5.8MediumOct 21, 2026Cisco Open Source Snort3 Memory corruptionCVE-2026-20197Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error ch
- 5.8MediumOct 21, 2026Cisco Open Source Snort3 Memory corruptionCVE-2026-20218A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition. This vuln
- 5.8MediumOct 21, 2026Cisco Open Source Snort3CVE-2026-20179Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability
- 9.0CriticalOct 21, 2026Cisco Cyber Vision Memory corruptionCVE-2026-20043As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulne
- 5.8MediumOct 21, 2026Cisco Open Source Snort3 Denial of serviceCVE-2026-20019Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error c
- 5.8MediumOct 21, 2026Cisco Open Source Snort3CVE-2026-20011Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed.
- 9.8CriticalOct 14, 2026Cisco Secure Email Gateway Path traversal / file handlingCVE-2026-76519Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.Exploited1.6% likely
- 8.8HighOct 7, 2026Cisco Campus Gateway Software Code / command injectionCVE-2026-76472As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulne
- 7.5HighOct 7, 2026Cisco Campus Gateway SoftwareCVE-2026-76467As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vu
- 8.8HighOct 7, 2026Cisco Campus Gateway SoftwareCVE-2026-76470As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vu
- 7.4HighOct 7, 2026Cisco Campus Gateway SoftwareCVE-2026-76469As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vul
- 8.2HighOct 7, 2026Cisco Campus Gateway SoftwareCVE-2026-76468As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vu
- 9.6CriticalOct 7, 2026Cisco Campus Gateway Software Memory corruptionCVE-2026-76464As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vu
- 8.8HighOct 7, 2026Cisco Campus Gateway Software Auth bypass / access controlCVE-2026-76463As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vu
- 9.8CriticalOct 7, 2026Cisco NX-OS Software Memory corruptionCVE-2026-76501A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) on an affected d
- 9.8CriticalOct 7, 2026Cisco Application Policy Infrastructure Controller (APIC)CVE-2026-76500As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally
- 9.8CriticalOct 7, 2026Cisco Application Policy Infrastructure Controller (APIC) Auth bypass / access controlCVE-2026-76498As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally
- 9.8CriticalOct 7, 2026Cisco Application Policy Infrastructure Controller (APIC)CVE-2026-76499As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally
- 9.8CriticalOct 7, 2026Cisco NX-OS Software Memory corruptionCVE-2026-76486A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Denial-of-Service (DoS) on an affected device. This vulnerabilit
Top products
- Cisco Secure Firewall Adaptive Security Appliance (ASA) Software15 CVEs in the last year, 4 critical
- Cisco NX-OS Software13 CVEs in the last year, 7 critical
- Cisco TelePresence Video Communication Server (VCS) Expressway10 CVEs in the last year, 1 critical
- Cisco Open Source Snort38 CVEs in the last year
- Cisco License On-Prem8 CVEs in the last year, 5 critical
- Cisco IOS XR Software8 CVEs in the last year, 2 critical
- Cisco Emergency Responder8 CVEs in the last year, 3 critical
- Cisco IOS XE Software7 CVEs in the last year, 2 critical
- Cisco Campus Gateway Software7 CVEs in the last year, 1 critical
- Cisco Secure Endpoint6 CVEs in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- CCCS (Canada) · Oct 29, 2026Cisco security advisory (AV26-1102)CVE-2026-76418
- Cisco PSIRT · Oct 28, 2026Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCVE-2026-20127
- Cisco PSIRT · Oct 28, 2026Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityCVE-2026-76418
- Cisco PSIRT · Oct 23, 2026Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate AuthoritiesADV-cisco-ec79e3d0f354
- Cisco PSIRT · Oct 22, 2026Multiple Cisco Products Snort 3 SMTP MIME Denial of Service VulnerabilityCVE-2026-20011
- Cisco PSIRT · Oct 22, 2026Multiple Cisco Products Snort 3 Security Hardening Release: October 2026CVE-2026-20043CVE-2026-20236CVE-2026-20291CVE-2026-20356
- Cisco PSIRT · Oct 22, 2026Multiple Cisco Products Snort 3 Denial of Service VulnerabilitiesCVE-2026-20019CVE-2026-20179CVE-2026-20197CVE-2026-76489
- Cisco PSIRT · Oct 22, 2026Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service VulnerabilityCVE-2026-20221
- Cisco PSIRT · Oct 22, 2026Multiple Cisco Products Snort 3 Denial of Service VulnerabilityCVE-2026-76445
- Cisco PSIRT · Oct 22, 2026Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service VulnerabilityCVE-2026-20218
- CCCS (Canada) · Oct 21, 2026Cisco security advisory (AV26-1073)ADV-cccs-f99ddc6a588d
- Cisco PSIRT · Oct 21, 2026Open Source Snort 3 Control Channel Socket Arbitrary Command Execution VulnerabilityCVE-2026-76524
- Cisco PSIRT · Oct 21, 2026Cisco Secure Client Secure Firewall Posture Module Privilege Escalation VulnerabilityCVE-2026-76462
- Cisco PSIRT · Oct 21, 2026Cisco Unified Communications Products Security Hardening Release: October 2026CVE-2026-76473CVE-2026-76474CVE-2026-76475CVE-2026-76476CVE-2026-76477CVE-2026-76478
- Cisco PSIRT · Oct 21, 2026Cisco Expressway Series Information Disclosure VulnerabilityCVE-2026-76435
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.