Cisco
Cisco known exploited vulnerabilities
Every Cisco vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first. 7 of them are known to be used by ransomware.
100 CVEs
- CVE-2026-76504Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability · added September 30, 2026
- CVE-2026-76460Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability · added September 16, 2026
- CVE-2026-76461Cisco Secure Email Gateway SQL Injection Vulnerability · added September 14, 2026
- CVE-2026-20079Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability · added September 9, 2026
- CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability · added August 11, 2026
- CVE-2026-20316 ransomwareCisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability · added July 29, 2026
- CVE-2008-4128Cisco IOS Cross-Site Request Forgery Vulnerability · added July 13, 2026
- CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability · added June 25, 2026
- CVE-2026-20262Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability · added June 15, 2026
- CVE-2026-20245Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability · added June 9, 2026
- CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability · added May 14, 2026
- CVE-2026-20133Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability · added April 20, 2026
- CVE-2026-20128Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability · added April 20, 2026
- CVE-2026-20122Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability · added April 20, 2026
- CVE-2026-20131 ransomwareCisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability · added March 19, 2026
- CVE-2026-20127Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability · added February 25, 2026
- CVE-2022-20775Cisco SD-WAN Path Traversal Vulnerability · added February 25, 2026
- CVE-2026-20045Cisco Unified Communications Products Code Injection Vulnerability · added January 21, 2026
- CVE-2025-20393Cisco Multiple Products Improper Input Validation Vulnerability · added December 17, 2025
- CVE-2025-20352Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability · added September 29, 2025
- CVE-2025-20362Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability · added September 25, 2025
- CVE-2025-20333Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability · added September 25, 2025
- CVE-2025-20337Cisco Identity Services Engine Injection Vulnerability · added July 28, 2025
- CVE-2025-20281Cisco Identity Services Engine Injection Vulnerability · added July 28, 2025
- CVE-2024-20439Cisco Smart Licensing Utility Static Credential Vulnerability · added March 31, 2025
- CVE-2023-20118Cisco Small Business RV Series Routers Command Injection Vulnerability · added March 3, 2025
- CVE-2014-2120Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability · added November 12, 2024
- CVE-2024-20481Cisco ASA and FTD Denial-of-Service Vulnerability · added October 24, 2024
- CVE-2024-20399Cisco NX-OS Command Injection Vulnerability · added July 2, 2024
- CVE-2024-20359Cisco ASA and FTD Privilege Escalation Vulnerability · added April 24, 2024
- CVE-2024-20353Cisco ASA and FTD Denial of Service Vulnerability · added April 24, 2024
- CVE-2020-3259 ransomwareCisco ASA and FTD Information Disclosure Vulnerability · added February 15, 2024
- CVE-2023-20273Cisco IOS XE Web UI Command Injection Vulnerability · added October 23, 2023
- CVE-2023-20198Cisco IOS XE Web UI Privilege Escalation Vulnerability · added October 16, 2023
- CVE-2023-20109Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability · added October 10, 2023
- CVE-2023-20269 ransomwareCisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability · added September 13, 2023
- CVE-2016-6415Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability · added May 19, 2023
- CVE-2004-1464Cisco IOS Denial-of-Service Vulnerability · added May 19, 2023
- CVE-2017-6742Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability · added April 19, 2023
- CVE-2020-3433 ransomwareCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability · added October 24, 2022
- CVE-2020-3153 ransomwareCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability · added October 24, 2022
- CVE-2019-15271Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability · added June 8, 2022
- CVE-2016-6367Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability · added May 24, 2022
- CVE-2016-6366Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability · added May 24, 2022
- CVE-2022-20821Cisco IOS XR Open Port Vulnerability · added May 23, 2022
- CVE-2018-0147Cisco Secure Access Control System Java Deserialization Vulnerability · added March 25, 2022
- CVE-2018-0125Cisco VPN Routers Remote Code Execution Vulnerability · added March 25, 2022
- CVE-2017-3881Cisco IOS and IOS XE Remote Code Execution Vulnerability · added March 25, 2022
- CVE-2015-0666Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability · added March 25, 2022
- CVE-2010-3035Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability · added March 25, 2022
- CVE-2009-2055Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability · added March 25, 2022
- CVE-2022-20708Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability · added March 3, 2022
- CVE-2022-20703Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability · added March 3, 2022
- CVE-2022-20701Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability · added March 3, 2022
- CVE-2022-20700Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability · added March 3, 2022
- CVE-2022-20699Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability · added March 3, 2022
- CVE-2019-1652Cisco Small Business Routers Improper Input Validation Vulnerability · added March 3, 2022
- CVE-2018-0180Cisco IOS Software Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2018-0179Cisco IOS Software Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2018-0175Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability · added March 3, 2022
- CVE-2018-0174Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability · added March 3, 2022
- CVE-2018-0173Cisco IOS and IOS XE Software Improper Input Validation Vulnerability · added March 3, 2022
- CVE-2018-0172Cisco IOS and IOS XE Software Improper Input Validation Vulnerability · added March 3, 2022
- CVE-2018-0167Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability · added March 3, 2022
- CVE-2018-0161Cisco IOS Software Resource Management Errors Vulnerability · added March 3, 2022
- CVE-2018-0159Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2018-0158Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability · added March 3, 2022
- CVE-2018-0156Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2018-0155Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2018-0154Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2018-0151Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2017-12319Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2017-12240Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2017-12238Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2017-12237Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2017-12235Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2017-12234Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2017-12233Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2017-12232Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2017-12231Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2017-6744Cisco IOS Software SNMP Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2017-6743Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2017-6740Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2017-6739Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2017-6738Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2017-6737Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2017-6736Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2017-6663Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2017-6627Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability · added March 3, 2022
- CVE-2021-1498Cisco HyperFlex HX Data Platform Command Injection Vulnerability · added November 3, 2021
- CVE-2021-1497Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability · added November 3, 2021
- CVE-2020-3580 ransomwareCisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability · added November 3, 2021
- CVE-2020-3569Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability · added November 3, 2021
- CVE-2020-3566Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability · added November 3, 2021
- CVE-2020-3452Cisco ASA and FTD Read-Only Path Traversal Vulnerability · added November 3, 2021
- CVE-2020-3161Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability · added November 3, 2021
- CVE-2020-3118Cisco IOS XR Software Discovery Protocol Format String Vulnerability · added November 3, 2021
- CVE-2019-1653Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability · added November 3, 2021
- CVE-2018-0296Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability · added November 3, 2021
- CVE-2018-0171Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability · added November 3, 2021
Source: CISA Known Exploited Vulnerabilities Catalog (public domain).