Cisco vulnerabilities
3,442 CVEs and advisories name Cisco as an affected vendor, 63 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-20356Cisco CyberVision Center Sensor Explorer Stored Cross-Site Scripting Vulnerability
- CVE-2025-20361Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability
- CVE-2025-20363A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defens
- CVE-2025-20362Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FT
- CVE-2025-20333A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat D
- CVE-2025-20314A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacke
- CVE-2025-20316A vulnerability in the access control list (ACL) programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches cou
- CVE-2025-20293A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL) coul
- CVE-2025-20338A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute…
- CVE-2025-20240A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a refl
- CVE-2025-20149A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected
- CVE-2025-20313Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthentic
- CVE-2025-20311A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthe
- CVE-2025-20327A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of s
- CVE-2025-20312A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote att
- CVE-2025-20352A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the f
- CVE-2025-20160A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated
- CVE-2025-20315A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote
- CVE-2025-20334A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with r
- CVE-2025-20339Cisco SD-WAN vEdge Software Access Control List Bypass Vulnerability
- CVE-2025-20365A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjac
- CVE-2025-20364A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated,
- CVE-2025-20340Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability
- CVE-2025-20159Cisco IOS XR Software Management Interface ACL Bypass Vulnerability
- CVE-2025-20248Cisco IOS XR Software Image Verification Bypass Vulnerability
- CVE-2025-20328A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated, remote attacker with low privileg
- CVE-2025-20291A vulnerability in Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to redirect a targeted Webex Meetings user to
- CVE-2025-20335Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Arbitrary File Write Vulnerability
- CVE-2025-20336Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Disclosure Vulnerability
- CVE-2025-20330Cisco Unified Communications Manager IM and Presence Cross-Site Scripting Vulnerability