netVigilance Vulnerability intelligence since 2004

Cisco

97 Cisco vulnerabilities with confirmed exploitation in the wild, as published by CISA; 96 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Cisco
Vulnerability Status
in 2d2026-09-12 CVE-2026-20079 Cisco / Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability 2026-09-09 10.0 active
overdue 27d2026-08-14 CVE-2026-20349 Cisco / Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability 2026-08-11 8.6 past due
overdue 40d2026-08-01 CVE-2026-20316 Cisco / Secure Firewall Management Center (FMC) Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability 2026-07-29 5.3 past due
overdue 56d2026-07-16 CVE-2008-4128 Cisco / IOS Cisco IOS Cross-Site Request Forgery Vulnerability 2026-07-13 4.3 past due
overdue 74d2026-06-28 CVE-2026-20230 Cisco / Unified Communications Manager Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability 2026-06-25 8.6 past due
overdue 73d2026-06-29 CVE-2026-20262 Cisco / Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability 2026-06-15 6.5 past due
overdue 79d2026-06-23 CVE-2026-20245 Cisco / Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability 2026-06-09 7.8 past due
overdue 116d2026-05-17 CVE-2026-20182 Cisco / Catalyst SD-WAN Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability 2026-05-14 10.0 past due
overdue 140d2026-04-23 CVE-2026-20133 Cisco / Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability 2026-04-20 7.5 past due
overdue 140d2026-04-23 CVE-2026-20128 Cisco / Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability 2026-04-20 7.5 past due
overdue 140d2026-04-23 CVE-2026-20122 Cisco / Catalyst SD-WAN Manger Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability 2026-04-20 5.4 past due
overdue 172d2026-03-22 CVE-2026-20131 Cisco / Secure Firewall Management Center (FMC) Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability 2026-03-19 10.0 past dueransomware
overdue 195d2026-02-27 CVE-2026-20127 Cisco / Catalyst SD-WAN Controller and Manager Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability 2026-02-25 10.0 past due
overdue 195d2026-02-27 CVE-2022-20775 Cisco / SD-WAN Cisco SD-WAN Path Traversal Vulnerability 2026-02-25 7.8 past due
overdue 211d2026-02-11 CVE-2026-20045 Cisco / Unified Communications Manager Cisco Unified Communications Products Code Injection Vulnerability 2026-01-21 9.8 past due
overdue 260d2025-12-24 CVE-2025-20393 Cisco / Multiple Products Cisco Multiple Products Improper Input Validation Vulnerability 2025-12-17 10.0 past due
overdue 325d2025-10-20 CVE-2025-20352 Cisco / IOS and IOS XE Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability 2025-09-29 7.7 past due
overdue 349d2025-09-26 CVE-2025-20362 Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability 2025-09-25 8.6 past due
overdue 349d2025-09-26 CVE-2025-20333 Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability 2025-09-25 9.9 past due
overdue 388d2025-08-18 CVE-2025-20337 Cisco / Identity Services Engine Cisco Identity Services Engine Injection Vulnerability 2025-07-28 10.0 past due
overdue 388d2025-08-18 CVE-2025-20281 Cisco / Identity Services Engine Cisco Identity Services Engine Injection Vulnerability 2025-07-28 10.0 past due
overdue 507d2025-04-21 CVE-2024-20439 Cisco / Smart Licensing Utility Cisco Smart Licensing Utility Static Credential Vulnerability 2025-03-31 9.8 past due
overdue 535d2025-03-24 CVE-2023-20118 Cisco / Small Business RV Series Routers Cisco Small Business RV Series Routers Command Injection Vulnerability 2025-03-03 7.2 past due
overdue 646d2024-12-03 CVE-2014-2120 Cisco / Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability 2024-11-12 6.1 past due
overdue 665d2024-11-14 CVE-2024-20481 Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Denial-of-Service Vulnerability 2024-10-24 5.8 past due
overdue 779d2024-07-23 CVE-2024-20399 Cisco / NX-OS Cisco NX-OS Command Injection Vulnerability 2024-07-02 6.7 past due
overdue 862d2024-05-01 CVE-2024-20359 Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Privilege Escalation Vulnerability 2024-04-24 6.0 past due
overdue 862d2024-05-01 CVE-2024-20353 Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Denial of Service Vulnerability 2024-04-24 8.6 past due
overdue 917d2024-03-07 CVE-2020-3259 Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Information Disclosure Vulnerability 2024-02-15 7.5 past dueransomware
overdue 1049d2023-10-27 CVE-2023-20273 Cisco / Cisco IOS XE Web UI Cisco IOS XE Web UI Command Injection Vulnerability 2023-10-23 7.2 past due
overdue 1056d2023-10-20 CVE-2023-20198 Cisco / IOS XE Web UI Cisco IOS XE Web UI Privilege Escalation Vulnerability 2023-10-16 10.0 past due
overdue 1045d2023-10-31 CVE-2023-20109 Cisco / IOS and IOS XE Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability 2023-10-10 6.6 past due
overdue 1072d2023-10-04 CVE-2023-20269 Cisco / Adaptive Security Appliance and Firepower Threat Defense Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability 2023-09-13 9.1 past dueransomware
overdue 1189d2023-06-09 CVE-2016-6415 Cisco / IOS, IOS XR, and IOS XE Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability 2023-05-19 7.5 past due
overdue 1189d2023-06-09 CVE-2004-1464 Cisco / IOS Cisco IOS Denial-of-Service Vulnerability 2023-05-19 5.9 past due
overdue 1219d2023-05-10 CVE-2017-6742 Cisco / IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2023-04-19 8.8 past due
overdue 1396d2022-11-14 CVE-2020-3433 Cisco / AnyConnect Secure Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability 2022-10-24 7.8 past dueransomware
overdue 1396d2022-11-14 CVE-2020-3153 Cisco / AnyConnect Secure Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability 2022-10-24 6.5 past dueransomware
overdue 1541d2022-06-22 CVE-2019-15271 Cisco / RV Series Routers Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability 2022-06-08 8.8 past due
overdue 1549d2022-06-14 CVE-2016-6367 Cisco / Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability 2022-05-24 7.8 past due
overdue 1549d2022-06-14 CVE-2016-6366 Cisco / Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability 2022-05-24 8.8 past due
overdue 1550d2022-06-13 CVE-2022-20821 Cisco / IOS XR Cisco IOS XR Open Port Vulnerability 2022-05-23 6.5 past due
overdue 1609d2022-04-15 CVE-2018-0147 Cisco / Secure Access Control System (ACS) Cisco Secure Access Control System Java Deserialization Vulnerability 2022-03-25 9.8 past due
overdue 1609d2022-04-15 CVE-2018-0125 Cisco / VPN Routers Cisco VPN Routers Remote Code Execution Vulnerability 2022-03-25 9.8 past due
overdue 1609d2022-04-15 CVE-2017-3881 Cisco / IOS and IOS XE Cisco IOS and IOS XE Remote Code Execution Vulnerability 2022-03-25 9.8 past due
overdue 1609d2022-04-15 CVE-2015-0666 Cisco / Prime Data Center Network Manager (DCNM) Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability 2022-03-25 7.5 past due
overdue 1609d2022-04-15 CVE-2010-3035 Cisco / IOS XR Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability 2022-03-25 7.5 past due
overdue 1609d2022-04-15 CVE-2009-2055 Cisco / IOS XR Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability 2022-03-25 5.9 past due
overdue 1638d2022-03-17 CVE-2022-20708 Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 8.0 past due
overdue 1638d2022-03-17 CVE-2022-20703 Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 8.0 past due
overdue 1638d2022-03-17 CVE-2022-20701 Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 7.8 past due
overdue 1638d2022-03-17 CVE-2022-20700 Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 9.8 past due
overdue 1638d2022-03-17 CVE-2022-20699 Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 9.8 past due
overdue 1638d2022-03-17 CVE-2019-1652 Cisco / Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Cisco Small Business Routers Improper Input Validation Vulnerability 2022-03-03 7.2 past due
overdue 1638d2022-03-17 CVE-2018-0180 Cisco / IOS Software Cisco IOS Software Denial-of-Service Vulnerability 2022-03-03 5.9 past due
overdue 1638d2022-03-17 CVE-2018-0179 Cisco / IOS Software Cisco IOS Software Denial-of-Service Vulnerability 2022-03-03 5.9 past due
overdue 1638d2022-03-17 CVE-2018-0175 Cisco / IOS, XR, and XE Software Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability 2022-03-03 8.0 past due
overdue 1638d2022-03-17 CVE-2018-0174 Cisco / IOS XE Software Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability 2022-03-03 8.6 past due
overdue 1638d2022-03-17 CVE-2018-0173 Cisco / IOS and IOS XE Software Cisco IOS and IOS XE Software Improper Input Validation Vulnerability 2022-03-03 8.6 past due
overdue 1638d2022-03-17 CVE-2018-0172 Cisco / IOS and IOS XE Software Cisco IOS and IOS XE Software Improper Input Validation Vulnerability 2022-03-03 8.6 past due
overdue 1638d2022-03-17 CVE-2018-0167 Cisco / IOS, XR, and XE Software Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability 2022-03-03 8.8 past due
overdue 1638d2022-03-17 CVE-2018-0161 Cisco / IOS Software Cisco IOS Software Resource Management Errors Vulnerability 2022-03-03 6.3 past due
overdue 1638d2022-03-17 CVE-2018-0159 Cisco / IOS Software and Cisco IOS XE Software Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability 2022-03-03 7.5 past due
overdue 1638d2022-03-17 CVE-2018-0158 Cisco / IOS Software and Cisco IOS XE Software Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability 2022-03-03 8.6 past due
overdue 1638d2022-03-17 CVE-2018-0156 Cisco / IOS Software and Cisco IOS XE Software Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability 2022-03-03 7.5 past due
overdue 1638d2022-03-17 CVE-2018-0155 Cisco / Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability 2022-03-03 8.6 past due
overdue 1638d2022-03-17 CVE-2018-0154 Cisco / IOS Software Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability 2022-03-03 7.5 past due
overdue 1638d2022-03-17 CVE-2018-0151 Cisco / IOS and IOS XE Software Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability 2022-03-03 9.8 past due
overdue 1631d2022-03-24 CVE-2017-6744 Cisco / IOS software Cisco IOS Software SNMP Remote Code Execution Vulnerability 2022-03-03 8.8 past due
overdue 1631d2022-03-24 CVE-2017-6743 Cisco / IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 8.8 past due
overdue 1631d2022-03-24 CVE-2017-6740 Cisco / IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 8.8 past due
overdue 1631d2022-03-24 CVE-2017-6739 Cisco / IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 8.8 past due
overdue 1631d2022-03-24 CVE-2017-6738 Cisco / IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 8.8 past due
overdue 1631d2022-03-24 CVE-2017-6737 Cisco / IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 8.8 past due
overdue 1631d2022-03-24 CVE-2017-6736 Cisco / IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 8.8 past due
overdue 1631d2022-03-24 CVE-2017-6663 Cisco / IOS and IOS XE Software Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability 2022-03-03 6.5 past due
overdue 1631d2022-03-24 CVE-2017-6627 Cisco / IOS and IOS XE Software Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability 2022-03-03 7.5 past due
overdue 1631d2022-03-24 CVE-2017-12319 Cisco / IOS XE Software Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability 2022-03-03 5.9 past due
overdue 1631d2022-03-24 CVE-2017-12240 Cisco / IOS and IOS XE Software Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability 2022-03-03 9.8 past due
overdue 1631d2022-03-24 CVE-2017-12238 Cisco / Catalyst 6800 Series Switches Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability 2022-03-03 6.5 past due
overdue 1631d2022-03-24 CVE-2017-12237 Cisco / IOS and IOS XE Software Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability 2022-03-03 7.5 past due
overdue 1631d2022-03-24 CVE-2017-12235 Cisco / IOS software Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability 2022-03-03 7.5 past due
overdue 1631d2022-03-24 CVE-2017-12234 Cisco / IOS software Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability 2022-03-03 7.5 past due
overdue 1631d2022-03-24 CVE-2017-12233 Cisco / IOS software Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability 2022-03-03 7.5 past due
overdue 1631d2022-03-24 CVE-2017-12232 Cisco / IOS software Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability 2022-03-03 6.5 past due
overdue 1631d2022-03-24 CVE-2017-12231 Cisco / IOS software Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability 2022-03-03 7.5 past due
overdue 1758d2021-11-17 CVE-2021-1498 Cisco / HyperFlex HX Cisco HyperFlex HX Data Platform Command Injection Vulnerability 2021-11-03 9.8 past due
overdue 1758d2021-11-17 CVE-2021-1497 Cisco / HyperFlex HX Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability 2021-11-03 9.8 past due
overdue 1591d2022-05-03 CVE-2020-3580 Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability 2021-11-03 6.1 past dueransomware
overdue 1591d2022-05-03 CVE-2020-3569 Cisco / IOS XR Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability 2021-11-03 8.6 past due
overdue 1591d2022-05-03 CVE-2020-3566 Cisco / IOS XR Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability 2021-11-03 8.6 past due
overdue 1591d2022-05-03 CVE-2020-3452 Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Read-Only Path Traversal Vulnerability 2021-11-03 7.5 past due
overdue 1591d2022-05-03 CVE-2020-3161 Cisco / Cisco IP Phones Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability 2021-11-03 9.8 past due
overdue 1591d2022-05-03 CVE-2020-3118 Cisco / IOS XR Cisco IOS XR Software Discovery Protocol Format String Vulnerability 2021-11-03 8.8 past due
overdue 1591d2022-05-03 CVE-2019-1653 Cisco / Small Business RV320 and RV325 Routers Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability 2021-11-03 7.5 past due
overdue 1591d2022-05-03 CVE-2018-0296 Cisco / Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability 2021-11-03 7.5 past due
overdue 1591d2022-05-03 CVE-2018-0171 Cisco / IOS and IOS XE Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability 2021-11-03 9.8 past due