Cisco known exploited vulnerabilities

CISA's Known Exploited Vulnerabilities catalog lists 101 Cisco vulnerabilities: 20 added in the last 365 days, 28 rated critical (CVSS 9 or higher), and 7 with known ransomware use. The most recent was added Oct 14, 2026.

RSS feed for Cisco exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant

Added to KEV	CVE	Vulnerability	CVSS	EPSS	Federal due date	Ransomware use
2026-10-14	CVE-2026-76519	Cisco Secure Email Gateway Relative Path Traversal Vulnerability	9.8 (v3.1)	2.2%	2026-10-17	Unknown
2026-09-30	CVE-2026-76504	Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability	9.8 (v3.1)	38.9%	2026-10-03	Unknown
2026-09-16	CVE-2026-76460	Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability	10 (v3.1)	75.6%	2026-09-19	Unknown
2026-09-14	CVE-2026-76461	Cisco Secure Email Gateway SQL Injection Vulnerability	9.8 (v3.1)	29.5%	2026-09-17	Unknown
2026-09-09	CVE-2026-20079	Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability	10 (v3.1)	88.5%	2026-09-12	Unknown
2026-08-11	CVE-2026-20349	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability	8.6 (v3.1)	1.0%	2026-08-14	Unknown
2026-07-29	CVE-2026-20316	Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability	5.3 (v3.1)	35.1%	2026-08-01	Known
2026-07-13	CVE-2008-4128	Cisco IOS Cross-Site Request Forgery Vulnerability	8.1 (v3.1)	33.9%	2026-07-16	Unknown
2026-06-25	CVE-2026-20230	Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability	8.6 (v3.1)	88.2%	2026-06-28	Unknown
2026-06-15	CVE-2026-20262	Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability	6.5 (v3.1)	29.1%	2026-06-29	Unknown
2026-06-09	CVE-2026-20245	Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability	7.8 (v3.1)	25.3%	2026-06-23	Unknown
2026-05-14	CVE-2026-20182	Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability	10 (v3.1)	91.8%	2026-05-17	Unknown
2026-04-20	CVE-2026-20122	Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability	5.4 (v3.1)	25.8%	2026-04-23	Unknown
2026-04-20	CVE-2026-20128	Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability	7.5 (v3.1)	7.3%	2026-04-23	Unknown
2026-04-20	CVE-2026-20133	Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability	6.5 (v3.1)	31.5%	2026-04-23	Unknown
2026-03-19	CVE-2026-20131	Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability	10 (v3.1)	43.2%	2026-03-22	Known
2026-02-25	CVE-2022-20775	Cisco SD-WAN Path Traversal Vulnerability	7.8 (v3.1)	12.5%	2026-02-27	Unknown
2026-02-25	CVE-2026-20127	Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability	10 (v3.1)	89.3%	2026-02-27	Unknown
2026-01-21	CVE-2026-20045	Cisco Unified Communications Products Code Injection Vulnerability	8.2 (v3.1)	4.5%	2026-02-11	Unknown
2025-12-17	CVE-2025-20393	Cisco Multiple Products Improper Input Validation Vulnerability	10 (v3.1)	32.4%	2025-12-24	Unknown
2025-09-29	CVE-2025-20352	Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability	7.7 (v3.1)	41.5%	2025-10-20	Unknown
2025-09-25	CVE-2025-20333	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability	9.9 (v3.1)	71.2%	2025-09-26	Unknown
2025-09-25	CVE-2025-20362	Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability	6.5 (v3.1)	87.1%	2025-09-26	Unknown
2025-07-28	CVE-2025-20281	Cisco Identity Services Engine Injection Vulnerability	10 (v3.1)	97.6%	2025-08-18	Unknown
2025-07-28	CVE-2025-20337	Cisco Identity Services Engine Injection Vulnerability	10 (v3.1)	74.5%	2025-08-18	Unknown
2025-03-31	CVE-2024-20439	Cisco Smart Licensing Utility Static Credential Vulnerability	9.8 (v3.1)	97.1%	2025-04-21	Unknown
2025-03-03	CVE-2023-20118	Cisco Small Business RV Series Routers Command Injection Vulnerability	6.5 (v3.1)	54.1%	2025-03-24	Unknown
2024-11-12	CVE-2014-2120	Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability	5.4 (v3.1)	22.6%	2024-12-03	Unknown
2024-10-24	CVE-2024-20481	Cisco ASA and FTD Denial-of-Service Vulnerability	5.8 (v3.1)	15.9%	2024-11-14	Unknown
2024-07-02	CVE-2024-20399	Cisco NX-OS Command Injection Vulnerability	6 (v3.1)	4.3%	2024-07-23	Unknown
2024-04-24	CVE-2024-20353	Cisco ASA and FTD Denial of Service Vulnerability	8.6 (v3.1)	69.8%	2024-05-01	Unknown
2024-04-24	CVE-2024-20359	Cisco ASA and FTD Privilege Escalation Vulnerability	6 (v3.1)	18.8%	2024-05-01	Unknown
2024-02-15	CVE-2020-3259	Cisco ASA and FTD Information Disclosure Vulnerability	7.5 (v3.0)	71.5%	2024-03-07	Known
2023-10-23	CVE-2023-20273	Cisco IOS XE Web UI Command Injection Vulnerability	7.2 (v3.1)	92.9%	2023-10-27	Unknown
2023-10-16	CVE-2023-20198	Cisco IOS XE Web UI Privilege Escalation Vulnerability	10 (v3.1)	99.6%	2023-10-20	Unknown
2023-10-10	CVE-2023-20109	Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability	6.6 (v3.1)	2.5%	2023-10-31	Unknown
2023-09-13	CVE-2023-20269	Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability	5 (v3.1)	26.6%	2023-10-04	Known
2023-05-19	CVE-2004-1464	Cisco IOS Denial-of-Service Vulnerability	5.9 (v3.1)	4.8%	2023-06-09	Unknown
2023-05-19	CVE-2016-6415	Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability	7.5 (v3.1)	87.7%	2023-06-09	Unknown
2023-04-19	CVE-2017-6742	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	8.8 (v3.0)	21.4%	2023-05-10	Unknown
2022-10-24	CVE-2020-3153	Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability	6.5 (v3.0)	28.3%	2022-11-14	Known
2022-10-24	CVE-2020-3433	Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability	7.8 (v3.1)	10.0%	2022-11-14	Known
2022-06-08	CVE-2019-15271	Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability	8.8 (v3.0)	5.5%	2022-06-22	Unknown
2022-05-24	CVE-2016-6366	Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability	8.8 (v3.1)	87.6%	2022-06-14	Unknown
2022-05-24	CVE-2016-6367	Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability	7.8 (v3.1)	22.6%	2022-06-14	Unknown
2022-05-23	CVE-2022-20821	Cisco IOS XR Open Port Vulnerability	6.5 (v3.1)	11.5%	2022-06-13	Unknown
2022-03-25	CVE-2009-2055	Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability	5.9 (v3.1)	3.3%	2022-04-15	Unknown
2022-03-25	CVE-2010-3035	Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability	7.5 (v3.1)	5.7%	2022-04-15	Unknown
2022-03-25	CVE-2015-0666	Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability	7.5 (v3.1)	40.4%	2022-04-15	Unknown
2022-03-25	CVE-2017-3881	Cisco IOS and IOS XE Remote Code Execution Vulnerability	9.8 (v3.1)	99.0%	2022-04-15	Unknown
2022-03-25	CVE-2018-0125	Cisco VPN Routers Remote Code Execution Vulnerability	9.8 (v3.1)	55.2%	2022-04-15	Unknown
2022-03-25	CVE-2018-0147	Cisco Secure Access Control System Java Deserialization Vulnerability	9.8 (v3.1)	18.2%	2022-04-15	Unknown
2022-03-03	CVE-2017-12231	Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability	7.5 (v3.1)	7.1%	2022-03-24	Unknown
2022-03-03	CVE-2017-12232	Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability	6.5 (v3.1)	2.2%	2022-03-24	Unknown
2022-03-03	CVE-2017-12233	Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability	7.5 (v3.1)	7.1%	2022-03-24	Unknown
2022-03-03	CVE-2017-12234	Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability	7.5 (v3.1)	7.1%	2022-03-24	Unknown
2022-03-03	CVE-2017-12235	Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability	7.5 (v3.1)	7.1%	2022-03-24	Unknown
2022-03-03	CVE-2017-12237	Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability	7.5 (v3.1)	7.1%	2022-03-24	Unknown
2022-03-03	CVE-2017-12238	Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability	6.5 (v3.1)	2.0%	2022-03-24	Unknown
2022-03-03	CVE-2017-12240	Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability	9.8 (v3.1)	13.8%	2022-03-24	Unknown
2022-03-03	CVE-2017-12319	Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability	5.9 (v3.1)	5.2%	2022-03-24	Unknown
2022-03-03	CVE-2017-6627	Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability	7.5 (v3.1)	6.2%	2022-03-24	Unknown
2022-03-03	CVE-2017-6663	Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability	6.5 (v3.1)	2.1%	2022-03-24	Unknown
2022-03-03	CVE-2017-6736	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	8.8 (v3.0)	70.4%	2022-03-24	Unknown
2022-03-03	CVE-2017-6737	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	8.8 (v3.0)	45.2%	2022-03-24	Unknown
2022-03-03	CVE-2017-6738	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	8.8 (v3.0)	10.9%	2022-03-24	Unknown
2022-03-03	CVE-2017-6739	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	8.8 (v3.0)	10.9%	2022-03-24	Unknown
2022-03-03	CVE-2017-6740	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	8.8 (v3.0)	11.1%	2022-03-24	Unknown
2022-03-03	CVE-2017-6743	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	8.8 (v3.0)	10.9%	2022-03-24	Unknown
2022-03-03	CVE-2017-6744	Cisco IOS Software SNMP Remote Code Execution Vulnerability	8.8 (v3.0)	7.3%	2022-03-24	Unknown
2022-03-03	CVE-2018-0151	Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability	9.8 (v3.1)	14.2%	2022-03-17	Unknown
2022-03-03	CVE-2018-0154	Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability	7.5 (v3.1)	7.1%	2022-03-17	Unknown
2022-03-03	CVE-2018-0155	Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability	8.6 (v3.1)	7.7%	2022-03-17	Unknown
2022-03-03	CVE-2018-0156	Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability	7.5 (v3.1)	9.4%	2022-03-17	Unknown
2022-03-03	CVE-2018-0158	Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability	8.6 (v3.1)	7.2%	2022-03-17	Unknown
2022-03-03	CVE-2018-0159	Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability	7.5 (v3.1)	6.9%	2022-03-17	Unknown
2022-03-03	CVE-2018-0161	Cisco IOS Software Resource Management Errors Vulnerability	6.3 (v3.1)	4.1%	2022-03-17	Unknown
2022-03-03	CVE-2018-0167	Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability	8.8 (v3.1)	3.4%	2022-03-17	Unknown
2022-03-03	CVE-2018-0172	Cisco IOS and IOS XE Software Improper Input Validation Vulnerability	8.6 (v3.1)	7.8%	2022-03-17	Unknown
2022-03-03	CVE-2018-0173	Cisco IOS and IOS XE Software Improper Input Validation Vulnerability	8.6 (v3.1)	7.6%	2022-03-17	Unknown
2022-03-03	CVE-2018-0174	Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability	8.6 (v3.1)	7.6%	2022-03-17	Unknown
2022-03-03	CVE-2018-0175	Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability	8 (v3.1)	3.5%	2022-03-17	Unknown
2022-03-03	CVE-2018-0179	Cisco IOS Software Denial-of-Service Vulnerability	5.9 (v3.1)	4.9%	2022-03-17	Unknown
2022-03-03	CVE-2018-0180	Cisco IOS Software Denial-of-Service Vulnerability	5.9 (v3.1)	4.9%	2022-03-17	Unknown
2022-03-03	CVE-2019-1652	Cisco Small Business Routers Improper Input Validation Vulnerability	7.2 (v3.0)	95.9%	2022-03-17	Unknown
2022-03-03	CVE-2022-20699	Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability	10 (v3.1)	72.5%	2022-03-17	Unknown
2022-03-03	CVE-2022-20700	Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability	10 (v3.1)	5.7%	2022-03-17	Unknown
2022-03-03	CVE-2022-20701	Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability	10 (v3.1)	9.7%	2022-03-17	Unknown
2022-03-03	CVE-2022-20703	Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability	10 (v3.1)	9.2%	2022-03-17	Unknown
2022-03-03	CVE-2022-20708	Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability	10 (v3.1)	14.9%	2022-03-17	Unknown
2021-11-03	CVE-2018-0171	Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability	9.8 (v3.1)	99.5%	2022-05-03	Unknown
2021-11-03	CVE-2018-0296	Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability	7.5 (v3.1)	99.9%	2022-05-03	Unknown
2021-11-03	CVE-2019-1653	Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability	7.5 (v3.0)	99.9%	2022-05-03	Unknown
2021-11-03	CVE-2020-3118	Cisco IOS XR Software Discovery Protocol Format String Vulnerability	8.8 (v3.0)	11.7%	2022-05-03	Unknown
2021-11-03	CVE-2020-3161	Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability	9.8 (v3.0)	83.9%	2022-05-03	Unknown
2021-11-03	CVE-2020-3452	Cisco ASA and FTD Read-Only Path Traversal Vulnerability	7.5 (v3.1)	>99.9%	2022-05-03	Unknown
2021-11-03	CVE-2020-3566	Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability	8.6 (v3.1)	3.7%	2022-05-03	Unknown
2021-11-03	CVE-2020-3569	Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability	8.6 (v3.1)	3.3%	2022-05-03	Unknown
2021-11-03	CVE-2020-3580	Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability	6.1 (v3.1)	85.6%	2022-05-03	Known
2021-11-03	CVE-2021-1497	Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability	9.8 (v3.1)	>99.9%	2021-11-17	Unknown
2021-11-03	CVE-2021-1498	Cisco HyperFlex HX Data Platform Command Injection Vulnerability	9.8 (v3.1)	>99.9%	2021-11-17	Unknown