Skip to content
CVE Tracker

Cisco vulnerabilities

3,438 published CVEs name Cisco among the affected products; CISA lists 62 of them as exploited in the wild.

All 3,438 in the listAtom feed of new CVEs
Published CVEs
3,438
Last 12 months
410
Critical
276
Known exploited
62

Critical 276High 1,217Medium 1,931Low 12Not scored 2

CVEs per yearBy the year they were published

  1. 2020597
  2. 20201
  3. 20201
  4. 20203
  5. 20203
  6. 20201
  7. 2021613
  8. 2022347
  9. 2023270
  10. 2024278
  11. 2025236
  12. 2026393

Known exploitedNewest addition to KEV first

  • CVE-2026-76418

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

    ExploitedHigh8.6
  • CVE-2026-76519

    Cisco Secure Email Gateway Arbitrary File Write Vulnerability

    Cisco · Cisco Secure Email

    ExploitedCritical9.8
  • CVE-2026-76504

    Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability

    Cisco · Cisco Catalyst SD-WAN Manager

    ExploitedCritical9.8
  • CVE-2026-76460

    Cisco Identity Services Engine Authentication Bypass Vulnerability

    Cisco · Cisco Identity Services Engine Software

    ExploitedCritical10.0
  • CVE-2026-76461

    Cisco Secure Email Gateway SQL Injection Vulnerability

    Cisco · Cisco Secure Email

    ExploitedCritical9.8
  • CVE-2026-20079

    Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability

    Cisco · Cisco Secure Firewall Management Center (FMC)

    ExploitedCritical10.0
  • CVE-2026-20349

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

    Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

    ExploitedHigh8.6
  • CVE-2026-20316

    Cisco Secure Firewall Management Center Software Static Credential Vulnerability

    Cisco · Cisco Secure Firewall Management Center (FMC)

    ExploitedMedium5.3
  • CVE-2026-20230

    Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

    Cisco · Cisco Unified Communications Manager

    ExploitedHigh8.6
  • CVE-2026-20262

    Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

    Cisco · Cisco Catalyst SD-WAN Manager

    ExploitedMedium6.5

Newest CVEs

  • CVE-2026-76418

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

    ExploitedHigh8.6
  • CVE-2026-76497

    Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities

    Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway

    Medium6.6
  • CVE-2026-76505

    Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability

    Cisco · Cisco IOS XR Software

    High7.5
  • CVE-2026-76524

    Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability

    Cisco · Cisco Open Source Snort3

    High7.8
  • CVE-2026-76496

    Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities

    Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway

    High7.0
  • CVE-2026-76495

    Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities

    Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway

    High7.8
  • CVE-2026-76494

    Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities

    Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway

    High7.8
  • CVE-2026-76493

    Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities

    Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway

    High7.5
  • CVE-2026-76490

    Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities

    Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway

    High8.6
  • CVE-2026-76489

    Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability

    Cisco · Cisco Open Source Snort3

    Medium5.8

Products with the most CVEs

  1. Cisco Small Business RV Series Router Firmware262
  2. Cisco IOS XE Software248
  3. Cisco Identity Services Engine Software198
  4. Cisco Firepower Threat Defense Software160
  5. Cisco Adaptive Security Appliance (ASA) Software159
  6. Cisco Firepower Management Center128
  7. Cisco IOS XR Software115
  8. Cisco NX-OS Software102
  9. Cisco Secure Firewall Threat Defense (FTD) Software81
  10. Cisco Data Center Network Manager74

Most common weaknesses

  1. CWE-20 Improper input validation494
  2. CWE-79 Cross-site scripting (XSS)409
  3. CWE-78 OS command injection254
  4. CWE-787 Out-of-bounds write161
  5. CWE-284 Improper access control159
  6. CWE-119 Memory buffer bounds error141
  7. CWE-121 Stack-based buffer overflow135
  8. CWE-22 Path traversal128
  9. CWE-77 Command injection122
  10. CWE-400 Uncontrolled resource consumption118