Cisco IOS vulnerabilities

CVEs per yearBy the year they were published

1. 20176
2. 20201
3. 20232
4. 20248
5. 202519
6. 20263

Known exploitedNewest addition to KEV first

• CVE-2025-20352

  A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An…

  Cisco · IOS

  ExploitedHigh7.7
• CVE-2023-20109

  A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated,…

  Cisco · IOS

  ExploitedMedium6.6
• CVE-2017-6744

  The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated,…

  Cisco · IOS

  ExploitedHigh8.8
• CVE-2017-6743

  The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated,…

  Cisco · IOS

  ExploitedHigh8.8
• CVE-2017-6740

  The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated,…

  Cisco · IOS

  ExploitedHigh8.8
• CVE-2017-6738

  The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated,…

  Cisco · IOS

  ExploitedHigh8.8
• CVE-2017-6737

  A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute…

  Cisco · IOS

  ExploitedHigh8.8
• CVE-2017-6736

  The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated,…

  Cisco · IOS

  ExploitedHigh8.8

Newest CVEs

• CVE-2026-20301

  Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability

  Cisco · Cisco IOS XE Software

  High8.6
• CVE-2026-20125

  A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an…

  Cisco · IOS

  High7.7
• CVE-2026-20012

  A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security…

  Cisco · IOS

  High8.6
• CVE-2025-20363

  A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software,…

  Cisco · IOS

  Critical9.0
• CVE-2025-20149

  A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload…

  Cisco · IOS

  Medium6.5
• CVE-2025-20327

  A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS)…

  Cisco · IOS

  High7.7
• CVE-2025-20352

  A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An…

  Cisco · IOS

  ExploitedHigh7.7
• CVE-2025-20160

  A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker…

  Cisco · IOS

  High8.1
• CVE-2025-20239

  A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance…

  Cisco · IOS

  High8.6
• CVE-2025-20225

  A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance…

  Cisco · IOS

  Medium5.8