Cisco known exploited vulnerabilities
The Beam CVE database tracks 101 known exploited vulnerabilities for Cisco: 27 critical, 54 high and 20 medium severity. The newest is CVE-2026-76519, published Oct 14, 2026.
These are the Cisco vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog: flaws with confirmed exploitation in the wild. Each entry links the vendor bulletin and CISA’s required action.
- Vulnerabilities tracked
- 101
- Critical
- 27
- Known exploited (CISA KEV)
- 101
- Published in the last 30 days
- 2
All entries, newest first
CVE-2026-76519
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
critical9.8ExploitedOct 14, 2026CVE-2026-76504
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
critical9.8ExploitedSep 30, 2026CVE-2026-76460
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
critical10.0ExploitedSep 16, 2026CVE-2026-76461
Cisco Secure Email Gateway SQL Injection Vulnerability
critical9.8ExploitedSep 14, 2026CVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
high8.6ExploitedAug 11, 2026CVE-2026-20316
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
medium5.3ExploitedJul 29, 2026CVE-2026-20262
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
medium6.5ExploitedJun 15, 2026CVE-2026-20245
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
high7.8ExploitedJun 4, 2026CVE-2026-20230
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
high8.6ExploitedJun 3, 2026CVE-2026-20182
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
critical10.0ExploitedMay 14, 2026CVE-2026-20079
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
critical10.0ExploitedMar 4, 2026CVE-2026-20131
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
critical10.0ExploitedMar 4, 2026CVE-2026-20122
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
medium5.4ExploitedFeb 25, 2026CVE-2026-20127
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
critical10.0ExploitedFeb 25, 2026CVE-2026-20128
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
high7.5ExploitedFeb 25, 2026CVE-2026-20133
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
high7.5ExploitedFeb 25, 2026CVE-2026-20045
Cisco Unified Communications Products Code Injection Vulnerability
critical9.8ExploitedJan 21, 2026CVE-2025-20393
Cisco Multiple Products Improper Input Validation Vulnerability
critical10.0ExploitedDec 17, 2025CVE-2025-20333
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
critical9.9ExploitedSep 25, 2025CVE-2025-20362
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
high8.6ExploitedSep 25, 2025CVE-2025-20352
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
high7.7ExploitedSep 24, 2025CVE-2025-20337
Cisco Identity Services Engine Injection Vulnerability
critical10.0ExploitedJul 16, 2025CVE-2025-20281
Cisco Identity Services Engine Injection Vulnerability
critical10.0ExploitedJun 25, 2025CVE-2024-20481
Cisco ASA and FTD Denial-of-Service Vulnerability
medium5.8ExploitedOct 23, 2024CVE-2024-20439
Cisco Smart Licensing Utility Static Credential Vulnerability
critical9.8ExploitedSep 4, 2024CVE-2024-20399
Cisco NX-OS Command Injection Vulnerability
medium6.7ExploitedJul 1, 2024CVE-2024-20353
Cisco ASA and FTD Denial of Service Vulnerability
high8.6ExploitedApr 24, 2024CVE-2024-20359
Cisco ASA and FTD Privilege Escalation Vulnerability
medium6.0ExploitedApr 24, 2024CVE-2023-20273
Cisco IOS XE Web UI Command Injection Vulnerability
high7.2ExploitedOct 25, 2023CVE-2023-20198
Cisco IOS XE Web UI Privilege Escalation Vulnerability
critical10.0ExploitedOct 16, 2023CVE-2023-20109
Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
medium6.6ExploitedSep 27, 2023CVE-2023-20269
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
critical9.1ExploitedSep 6, 2023CVE-2023-20118
Cisco Small Business RV Series Routers Command Injection Vulnerability
high7.2ExploitedApr 13, 2023CVE-2022-20775
Cisco SD-WAN Path Traversal Vulnerability
high7.8ExploitedSep 30, 2022CVE-2022-20821
Cisco IOS XR Open Port Vulnerability
medium6.5ExploitedMay 26, 2022CVE-2022-20699
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
critical9.8ExploitedFeb 10, 2022CVE-2022-20700
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
critical9.8ExploitedFeb 10, 2022CVE-2022-20701
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
high7.8ExploitedFeb 10, 2022CVE-2022-20703
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
high8.0ExploitedFeb 10, 2022CVE-2022-20708
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
high8.0ExploitedFeb 10, 2022CVE-2021-1497
Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
critical9.8ExploitedMay 6, 2021CVE-2021-1498
Cisco HyperFlex HX Data Platform Command Injection Vulnerability
critical9.8ExploitedMay 6, 2021CVE-2020-3580
Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability
medium6.1ExploitedOct 21, 2020CVE-2020-3569
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
high8.6ExploitedSep 23, 2020CVE-2020-3566
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
high8.6ExploitedAug 29, 2020CVE-2020-3433
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
high7.8ExploitedAug 17, 2020CVE-2020-3452
Cisco ASA and FTD Read-Only Path Traversal Vulnerability
high7.5ExploitedJul 22, 2020CVE-2020-3259
Cisco ASA and FTD Information Disclosure Vulnerability
high7.5ExploitedMay 6, 2020CVE-2020-3161
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
critical9.8ExploitedApr 15, 2020CVE-2020-3153
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
medium6.5ExploitedFeb 19, 2020CVE-2020-3118
Cisco IOS XR Software Discovery Protocol Format String Vulnerability
high8.8ExploitedFeb 5, 2020CVE-2019-15271
Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability
high8.8ExploitedNov 26, 2019CVE-2019-1652
Cisco Small Business Routers Improper Input Validation Vulnerability
high7.2ExploitedJan 24, 2019CVE-2019-1653
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
high7.5ExploitedJan 24, 2019CVE-2018-0296
Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
high7.5ExploitedJun 7, 2018CVE-2018-0151
Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
critical9.8ExploitedMar 28, 2018CVE-2018-0154
Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
high7.5ExploitedMar 28, 2018CVE-2018-0155
Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
high8.6ExploitedMar 28, 2018CVE-2018-0156
Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
high7.5ExploitedMar 28, 2018CVE-2018-0158
Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
high8.6ExploitedMar 28, 2018CVE-2018-0159
Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
high7.5ExploitedMar 28, 2018CVE-2018-0161
Cisco IOS Software Resource Management Errors Vulnerability
medium6.3ExploitedMar 28, 2018CVE-2018-0167
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
high8.8ExploitedMar 28, 2018CVE-2018-0171
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
critical9.8ExploitedMar 28, 2018CVE-2018-0172
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
high8.6ExploitedMar 28, 2018CVE-2018-0173
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
high8.6ExploitedMar 28, 2018CVE-2018-0174
Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
high8.6ExploitedMar 28, 2018CVE-2018-0175
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
high8.0ExploitedMar 28, 2018CVE-2018-0179
Cisco IOS Software Denial-of-Service Vulnerability
medium5.9ExploitedMar 28, 2018CVE-2018-0180
Cisco IOS Software Denial-of-Service Vulnerability
medium5.9ExploitedMar 28, 2018CVE-2017-12319
Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
medium5.9ExploitedMar 27, 2018CVE-2018-0147
Cisco Secure Access Control System Java Deserialization Vulnerability
critical9.8ExploitedMar 8, 2018CVE-2018-0125
Cisco VPN Routers Remote Code Execution Vulnerability
critical9.8ExploitedFeb 8, 2018CVE-2017-12231
Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability
high7.5ExploitedSep 29, 2017CVE-2017-12232
Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
medium6.5ExploitedSep 29, 2017CVE-2017-12233
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
high7.5ExploitedSep 29, 2017CVE-2017-12234
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
high7.5ExploitedSep 29, 2017CVE-2017-12235
Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
high7.5ExploitedSep 29, 2017CVE-2017-12237
Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
high7.5ExploitedSep 29, 2017CVE-2017-12238
Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
medium6.5ExploitedSep 29, 2017CVE-2017-12240
Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
critical9.8ExploitedSep 29, 2017CVE-2017-6627
Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
high7.5ExploitedSep 7, 2017CVE-2017-6663
Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
medium6.5ExploitedAug 7, 2017CVE-2017-6736
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
high8.8ExploitedJul 17, 2017CVE-2017-6737
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
high8.8ExploitedJul 17, 2017CVE-2017-6738
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
high8.8ExploitedJul 17, 2017CVE-2017-6739
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
high8.8ExploitedJul 17, 2017CVE-2017-6740
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
high8.8ExploitedJul 17, 2017CVE-2017-6742
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
high8.8ExploitedJul 17, 2017CVE-2017-6743
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
high8.8ExploitedJul 17, 2017CVE-2017-6744
Cisco IOS Software SNMP Remote Code Execution Vulnerability
high8.8ExploitedJul 17, 2017CVE-2017-3881
Cisco IOS and IOS XE Remote Code Execution Vulnerability
critical9.8ExploitedMar 17, 2017CVE-2016-6415
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
high7.5ExploitedSep 19, 2016CVE-2016-6366
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
high8.8ExploitedAug 18, 2016CVE-2016-6367
Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
high7.8ExploitedAug 18, 2016CVE-2015-0666
Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
high7.5ExploitedApr 3, 2015CVE-2014-2120
Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
medium6.1ExploitedMar 19, 2014CVE-2010-3035
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
high7.5ExploitedAug 30, 2010CVE-2009-2055
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
medium5.9ExploitedAug 19, 2009CVE-2008-4128
Cisco IOS Cross-Site Request Forgery Vulnerability
high8.1ExploitedSep 18, 2008CVE-2004-1464
Cisco IOS Denial-of-Service Vulnerability
medium5.9ExploitedDec 31, 2004
