Cisco vulnerabilities
3,441 published CVEs name Cisco among the affected products; CISA lists 62 of them as exploited in the wild.
- Published CVEs
- 3,441
- Last 12 months
- 402
- Critical
- 276
- Known exploited
- 62
Critical 276High 1,218Medium 1,933Low 12Not scored 2
CVEs per yearBy the year they were published
- 20091
- 20161
- 20178
- 2018146
- 2019566
- 2020557
- 2021586
- 2022316
- 2023264
- 2024361
- 2025239
- 2026396
Known exploitedNewest addition to KEV first
- CVE-2026-76418
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
ExploitedHigh8.6 - CVE-2026-76519
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
Cisco · Cisco Secure Email
ExploitedCritical9.8 - CVE-2026-76504
Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
Cisco · Cisco Catalyst SD-WAN Manager
ExploitedCritical9.8 - CVE-2026-76460
Cisco Identity Services Engine Authentication Bypass Vulnerability
Cisco · Cisco Identity Services Engine Software
ExploitedCritical10.0 - CVE-2026-76461
Cisco Secure Email Gateway SQL Injection Vulnerability
Cisco · Cisco Secure Email
ExploitedCritical9.8 - CVE-2026-20079
Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
Cisco · Cisco Secure Firewall Management Center (FMC)
ExploitedCritical10.0 - CVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
ExploitedHigh8.6 - CVE-2026-20316
Cisco Secure Firewall Management Center Software Static Credential Vulnerability
Cisco · Cisco Secure Firewall Management Center (FMC)
ExploitedMedium5.3 - CVE-2026-20230
Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
Cisco · Cisco Unified Communications Manager
ExploitedHigh8.6 - CVE-2026-20262
Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
Cisco · Cisco Catalyst SD-WAN Manager
ExploitedMedium6.5
Newest CVEs
- CVE-2026-20241
Cisco Identity Services Engine Authorization Bypass Vulnerability
Cisco · Cisco Identity Services Engine Software
Medium5.3 - CVE-2026-76419
Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
Cisco · Cisco Unified Communications Manager
Medium6.1 - CVE-2026-76506
Cisco Unified Computing System Central Remote Code Execution Vulnerability
Cisco · Cisco Unified Computing System Central Software
High7.6 - CVE-2026-76418
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
ExploitedHigh8.6 - CVE-2026-76497
Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities
Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway
Medium6.6 - CVE-2026-76505
Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability
Cisco · Cisco IOS XR Software
High7.5 - CVE-2026-76524
Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability
Cisco · Cisco Open Source Snort3
High7.8 - CVE-2026-76496
Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities
Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway
High7.0 - CVE-2026-76495
Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities
Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway
High7.8 - CVE-2026-76494
Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities
Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway
High7.8
Products with the most CVEs
- Cisco Small Business RV Series Router Firmware262
- Cisco IOS XE Software248
- Cisco Identity Services Engine Software199
- Cisco Firepower Threat Defense Software160
- Cisco Adaptive Security Appliance (ASA) Software159
- Cisco Firepower Management Center128
- Cisco IOS XR Software115
- Cisco NX-OS Software102
- Cisco Secure Firewall Threat Defense (FTD) Software81
- Cisco Data Center Network Manager74
Most common weaknesses
- CWE-20 Improper input validation494
- CWE-79 Cross-site scripting (XSS)410
- CWE-78 OS command injection254
- CWE-787 Out-of-bounds write161
- CWE-284 Improper access control159
- CWE-119 Memory buffer bounds error141
- CWE-121 Stack-based buffer overflow135
- CWE-22 Path traversal129
- CWE-77 Command injection122
- CWE-400 Uncontrolled resource consumption118