Cisco known exploited vulnerabilities
Every Cisco CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 102 in all, 21 added in the last 12 months.
- CVE-2026-76418Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of…Cisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-76519Cisco Secure Email Gateway Arbitrary File Write VulnerabilityCisco Secure Email
- CVE-2026-76504Cisco Catalyst SD-WAN Manager System Account Authorization Bypass VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2026-76460Cisco Identity Services Engine Authentication Bypass VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76461Cisco Secure Email Gateway SQL Injection VulnerabilityCisco Secure Email
- CVE-2026-20079Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-20316Cisco Secure Firewall Management Center Software Static Credential VulnerabilityCisco Secure Firewall Management Center
- CVE-2008-4128Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Serv
- CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery VulnerabilityCisco Unified Communications Manager
- CVE-2026-20262Cisco Catalyst SD-WAN Manager Arbitrary File Write VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2026-20245Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation VulnerabilityCisco Catalyst SD-WAN Controller · Cisco Catalyst SD-WAN Ma…
- CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCisco Catalyst SD-WAN Controller · Cisco Catalyst SD-WAN Ma…
- CVE-2026-20133A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affectCisco Catalyst SD-WAN Manager
- CVE-2026-20128Cisco Catalyst SD-WAN Manager Information Disclosure VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2026-20122Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2026-20131Cisco Secure Firewall Management Center Software Remote Code Execution VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20127Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2022-20775Cisco SD-WAN Software Privilege Escalation VulnerabilityCisco Catalyst SD-WAN · Cisco SD-WAN vContainer +2
- CVE-2026-20045Cisco Unified Communications Products Remote Code Execution VulnerabilityCisco Unified Communications Manager · Cisco Unity Connecti…
- CVE-2025-20393Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution VulnerabilityCisco Secure Email
- CVE-2025-20352A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the fCisco IOS
- CVE-2025-20362Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2025-20333A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat DCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2025-20337Cisco ISE API Unauthenticated Remote Code Execution VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2025-20281Cisco ISE API Unauthenticated Remote Code Execution VulnerabilityCisco Identity Services Engine Software
- CVE-2024-20439A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by usCisco Smart License Utility
- CVE-2023-20118A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Cisco Small Business RV Series Router Firmware
- CVE-2014-2120Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attacker
- CVE-2024-20481A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat DefeCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2024-20399Cisco NX-OS Software CLI Command Injection VulnerabilityCisco NX-OS Software
- CVE-2024-20359A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco AdapCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2024-20353A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat DefensCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2020-3259Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2023-20273A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the priCisco IOS XE Software
- CVE-2023-20198Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software.Cisco IOS XE Software
- CVE-2023-20109A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an Cisco IOS
- CVE-2023-20269A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTDCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2016-6415The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5
- CVE-2004-1464Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a craf
- CVE-2017-6742A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to rCisco IOS XE Software · IntelliShield Universal Product
- CVE-2020-3433Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityCisco AnyConnect Secure Mobility Client
- CVE-2020-3153Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityCisco AnyConnect Secure Mobility Client
- CVE-2019-15271Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution VulnerabilityCisco Small Business RV Series Router Firmware
- CVE-2016-6367Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain pri
- CVE-2016-6366Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V,
- CVE-2022-20821Cisco IOS XR Software Health Check Open Port VulnerabilityCisco IOS XR Software
- CVE-2018-0147A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unautheCisco Secure Access Control System
- CVE-2018-0125A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unautCisco RV132W and RV134W
- CVE-2017-3881A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unautheCisco IOS and IOS XE Software
FAQ
Cisco KEV questions.
How many Cisco vulnerabilities are in CISA KEV?
102 Cisco vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 21 of them added in the last 12 months. The newest is CVE-2026-76418 (Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability), added 2026-10-29.
Which Cisco products are in CISA KEV?
44 products, including Secure Firewall ASA Software and Cisco Secure FTD Software, Secure Email Gateway, Catalyst SD-WAN Manager. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Cisco KEV vulnerabilities used by ransomware?
CISA knows ransomware campaigns exploit 7 of the 102 Cisco entries.