News stories · 30d
10
Advisories · 30d
22
Added to KEV · 90d
7
Actively exploited (CISA KEV)
| Added | CVE | Product | Vulnerability | Ransomware |
|---|---|---|---|---|
| 2026-10-14 | CVE-2026-76519 | Secure Email Gateway | Cisco Secure Email Gateway Relative Path Traversal Vulnerability | |
| 2026-09-30 | CVE-2026-76504 | Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | |
| 2026-09-16 | CVE-2026-76460 | Identity Services Engine | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | |
| 2026-09-14 | CVE-2026-76461 | Secure Email Gateway | Cisco Secure Email Gateway SQL Injection Vulnerability | |
| 2026-09-09 | CVE-2026-20079 | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | |
| 2026-08-11 | CVE-2026-20349 | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | |
| 2026-07-29 | CVE-2026-20316 | Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | Known |
| 2026-07-13 | CVE-2008-4128 | IOS | Cisco IOS Cross-Site Request Forgery Vulnerability | |
| 2026-06-25 | CVE-2026-20230 | Unified Communications Manager | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | |
| 2026-06-15 | CVE-2026-20262 | Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | |
| 2026-06-09 | CVE-2026-20245 | Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | |
| 2026-05-14 | CVE-2026-20182 | Catalyst SD-WAN | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | |
| 2026-04-20 | CVE-2026-20122 | Catalyst SD-WAN Manger | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | |
| 2026-04-20 | CVE-2026-20133 | Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | |
| 2026-04-20 | CVE-2026-20128 | Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | |
| 2026-03-19 | CVE-2026-20131 | Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability | Known |
| 2026-02-25 | CVE-2022-20775 | SD-WAN | Cisco SD-WAN Path Traversal Vulnerability | |
| 2026-02-25 | CVE-2026-20127 | Catalyst SD-WAN Controller and Manager | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | |
| 2026-01-21 | CVE-2026-20045 | Unified Communications Manager | Cisco Unified Communications Products Code Injection Vulnerability | |
| 2025-12-17 | CVE-2025-20393 | Multiple Products | Cisco Multiple Products Improper Input Validation Vulnerability | |
| 2025-09-29 | CVE-2025-20352 | IOS and IOS XE | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | |
| 2025-09-25 | CVE-2025-20362 | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | |
| 2025-09-25 | CVE-2025-20333 | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | |
| 2025-07-28 | CVE-2025-20337 | Identity Services Engine | Cisco Identity Services Engine Injection Vulnerability | |
| 2025-07-28 | CVE-2025-20281 | Identity Services Engine | Cisco Identity Services Engine Injection Vulnerability |
CVEs in the news
CVE-2026-76519 9.8CVE-2026-76455 9.8CVE-2026-76456 8.6CVE-2026-76457 8.6CVE-2026-76459 9.8CVE-2026-76458 8.6CVE-2026-76453 8.8CVE-2026-76504 9.8CVE-2026-76463 8.8CVE-2026-76464 9.6CVE-2026-76467 7.5CVE-2026-76468 8.2CVE-2026-76469 7.4CVE-2026-76470 8.8CVE-2026-76472 8.8CVE-2026-0322 7.2CVE-2026-105133 7.3CVE-2026-105134 10CVE-2026-76465 9.8CVE-2026-76485 9.8
Timeline (last 30 days)
- Cisco Meraki Security Hardening Release: October 2026 — Cisco Security Advisories, 2026-10-15
- U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog — Security Affairs, 2026-10-15
- CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products — Help Net Security, 2026-10-15
- Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks — Cybersecurity News, 2026-10-15
- Cisco make-me-root email bug exploited as a 0-day by unknown crims — The Register, 2026-10-14
- Cisco patches new Secure Email Gateway zero-day exploited in attacks — BleepingComputer +5 sources, 2026-10-14
- Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 — Cisco Security Advisories, 2026-10-14
- Cisco Advance Notification for Publication of October 21, 2026, Security Advisories — Cisco Security Advisories, 2026-10-14
- Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability — Cisco Security Advisories, 2026-10-13
- Cisco Patches a Dozen Critical Vulnerabilities — SecurityWeek, 2026-10-08
- Cisco warns of critical flaws allowing Nexus switch takeover — BleepingComputer, 2026-10-08
- Cisco NX-OS Software NX-API Remote Code Execution Vulnerability — Cisco Security Advisories, 2026-10-08
- Cisco quantum network controller lets apps order entanglement on demand — Help Net Security, 2026-10-07
- Cisco Advance Notification for Publication of October 7, 2026, Security Advisories — Cisco Security Advisories, 2026-10-07
- Cisco NX-OS Software Python Sandbox Escape Vulnerability — Cisco Security Advisories, 2026-10-07
- Cisco Finesse Server-Side Request Forgery Vulnerability — Cisco Security Advisories, 2026-10-07
- Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability — Cisco Security Advisories, 2026-10-07
- Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability — Cisco Security Advisories, 2026-10-07
- Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability — Cisco Security Advisories, 2026-10-07
- Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026 — Cisco Security Advisories, 2026-10-07
- Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass Vulnerability — Cisco Security Advisories, 2026-10-07
- Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities — Cisco Security Advisories, 2026-10-07
- Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026 — Cisco Security Advisories, 2026-10-07
- Cisco NX-OS Software Control Plane Denial of Service Vulnerability — Cisco Security Advisories, 2026-10-07
- Cisco License (Smart Software Manager) On-Prem Vulnerabilities — Cisco Security Advisories, 2026-10-07
- Cisco NX-OS Software Security Hardening Release: October 2026 — Cisco Security Advisories, 2026-10-07
- Cisco IOS XE Software Security Hardening Release: August 2026 — Cisco Security Advisories, 2026-10-02
- CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV — The Hacker News, 2026-10-01
- Cisco warns of new SD-WAN zero-day exploited in attacks — BleepingComputer +8 sources, 2026-09-30
- Cisco Identity Services Engine Authentication Bypass Vulnerabilities — Cisco Security Advisories, 2026-09-24
- Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE — 0dayfans, 2026-09-23
- Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service Vulnerability — Cisco Security Advisories, 2026-09-23