Vendor
Cisco
7,011 known vulnerabilities in products by Cisco, 106 of them actively exploited (CISA KEV).
Key figures
7,011
Vulnerabilities
106
Actively exploited (KEV)
8
Used by ransomware
515
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2026-20131 | Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability In CISA KEVRansomware | 10.0 | |
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomware | 10.0 | |
| Critical | CVE-2026-76461 | Cisco Secure Email Gateway SQL Injection Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2026-76460 | Cisco Identity Services Engine Authentication Bypass Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2026-20316 | Cisco Secure Firewall Management Center Software Static Credential Vulnerability In CISA KEVRansomware | 5.3 | |
| Critical | CVE-2026-20182 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEV | 7.5 | |
| Critical | CVE-2026-20079 | Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2026-20127 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2026-20230 | Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability In CISA KEV | 8.6 | |
| Critical | CVE-2020-3259 | Cisco ASA and FTD Information Disclosure Vulnerability In CISA KEVRansomware | 7.5 | |
| Critical | CVE-2025-20393 | Cisco Multiple Products Improper Input Validation Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2025-20333 | Cisco Secure Firewall Threat Defense (FTD) Software: Classic Buffer Overflow In CISA KEV | 9.9 | |
| Critical | CVE-2025-20281 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2025-20337 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2025-32433 | Erlang/OTP SSH Vulnerable to Pre-Authentication RCE In CISA KEV | 10.0 | |
| Critical | CVE-2020-3433 | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2024-20439 | Cisco Smart Licensing Utility Static Credential Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-3580 | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability In CISA KEVRansomware | 6.1 | |
| Critical | CVE-2026-20245 | Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2020-3153 | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability In CISA KEVRansomware | 6.5 | |
| Critical | CVE-2023-20198 | Cisco IOS XE Web UI Privilege Escalation Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2023-20269 | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability In CISA KEVRansomware | 5.0 | |
| Critical | CVE-2026-20045 | Cisco Unified Communications Products Remote Code Execution Vulnerability In CISA KEV | 8.2 | |
| Critical | CVE-2022-22965 | Spring Framework JDK 9+ Remote Code Execution Vulnerability In CISA KEV | 9.8 |
News
- Cisco warns of actively exploited Secure Email Gateway flawcsoonline,
- Vulnérabilité dans Cisco AsyncOS Software pour Secure Email Gateway (15 octobre 2026)cert-fr,
- Cisco SD-WAN Manager hit by zero-day admin access attackcsoonline,
- CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEVthehackernews,
- Vulnérabilité dans Cisco Catalyst SD-WAN (01 octobre 2026)cert-fr,
- Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Managerthehackernews,