Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

Cisco: actively exploited vulnerabilities

100 vulnerabilities in Cisco products (IOS / IOS XE, ASA / Firepower (FTD), RV routers (Small Business)…) are in CISA’s catalog of exploited vulnerabilities, 7 of them added in the last 90 days. Last added: September 30, 2026.

Cisco security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Cisco category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Follow a single Cisco product (IOS / IOS XE, ASA / Firepower (FTD)…) rather than the whole brand.

  • IOS / IOS XE39 vulnerabilities, Switches and routers
  • ASA / Firepower (FTD)14 vulnerabilities, Firewalls and VPNs
  • RV routers (Small Business)10 vulnerabilities, Home routers and IoT
  • Catalyst SD-WAN9 vulnerabilities, Switches and routers
  • IOS XR6 vulnerabilities, Switches and routers
  • Identity Services Engine (ISE)3 vulnerabilities, Identity and access
  • IOS / IOS XE / IOS XR3 vulnerabilities, Switches and routers
  • Secure Firewall Management Center (FMC)3 vulnerabilities, Firewalls and VPNs
  • AnyConnect Secure Mobility Client2 vulnerabilities, Firewalls and VPNs
  • HyperFlex HX2 vulnerabilities, Virtualization and VDI
  • Secure Email Gateway2 vulnerabilities, Email
  • Unified Communications Manager2 vulnerabilities, Collaboration and video
Show 5 more products
  • IP Phones1 vulnerability, Collaboration and video
  • NX-OS1 vulnerability, Switches and routers
  • Prime Data Center Network Manager (DCNM)1 vulnerability, Monitoring and ITSM
  • Secure Access Control System (ACS)1 vulnerability, Identity and access
  • Smart Licensing Utility1 vulnerability, Monitoring and ITSM

Name used by CISA: Cisco. Product families: indicative classification by this site.

Pace of additions

Number of Cisco vulnerabilities added to CISA’s KEV catalog, per 30-day period (the last one, still in progress, ends on October 3, 2026). Source: CISA KEV catalog.
Catalog additions per 30-day period
PeriodVulnerabilities added
Sep 9, 2025 to Oct 8, 20253
Oct 9, 2025 to Nov 7, 20250
Nov 8, 2025 to Dec 7, 20250
Dec 8, 2025 to Jan 6, 20261
Jan 7, 2026 to Feb 5, 20261
Feb 6, 2026 to Mar 7, 20262
Mar 8, 2026 to Apr 6, 20261
Apr 7, 2026 to May 6, 20263
May 7, 2026 to Jun 5, 20261
Jun 6, 2026 to Jul 5, 20263
Jul 6, 2026 to Aug 4, 20262
Aug 5, 2026 to Sep 3, 20261
Sep 4, 2026 to Oct 3, 2026 (in progress)4

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Cisco list.

  1. Rank 1

    Cisco Catalyst SD-WANCVE-2026-76504

    Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 30, 2026

  2. Rank 2

    Cisco Identity Services Engine (ISE)CVE-2026-76460

    Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Sep 16, 2026

  3. Rank 3

    Cisco Secure Email GatewayCVE-2026-76461

    Cisco Secure Email Gateway SQL Injection Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 14, 2026

  4. Rank 4

    Cisco Secure Firewall Management Center (FMC)CVE-2026-20079

    Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Sep 9, 2026

  5. Rank 5

    Cisco Catalyst SD-WANCVE-2026-20182

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    CVSS severity 10.0critical

    Added May 14, 2026

  6. Rank 6

    Cisco Secure Firewall Management Center (FMC)CVE-2026-20131

    Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

    Ransomware

    CVSS severity 10.0critical

    Added Mar 19, 2026

  7. Rank 7

    Cisco Catalyst SD-WANCVE-2026-20127

    Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

    CVSS severity 10.0critical

    Added Feb 25, 2026

  8. Rank 8

    Cisco Secure Email GatewayCVE-2025-20393

    Cisco Multiple Products Improper Input Validation Vulnerability

    CVSS severity 10.0critical

    Added Dec 17, 2025

  9. Rank 9

    Cisco Unified Communications ManagerCVE-2026-20045

    Cisco Unified Communications Products Code Injection Vulnerability

    CVSS severity 9.8critical

    Added Jan 21, 2026

  10. Rank 10

    Cisco ASA / Firepower (FTD)CVE-2026-20349

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

    CVSS severity 8.6high

    Added Aug 11, 2026

Show 90 more vulnerabilities
  1. Rank 11

    Cisco Unified Communications ManagerCVE-2026-20230

    Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

    CVSS severity 8.6high

    Added Jun 25, 2026

  2. Rank 12

    Cisco IOS / IOS XECVE-2008-4128

    Cisco IOS Cross-Site Request Forgery Vulnerability

    Hunt for compromise (CISA)CVE from 2008, added in 2026

    CVSS severity 8.1high

    Added Jul 13, 2026

  3. Rank 13

    Cisco Catalyst SD-WANCVE-2026-20245

    Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

    CVSS severity 7.8high

    Added Jun 9, 2026

  4. Rank 14

    Cisco Catalyst SD-WANCVE-2022-20775

    Cisco SD-WAN Path Traversal Vulnerability

    CVE from 2022, added in 2026

    CVSS severity 7.8high

    Added Feb 25, 2026

  5. Rank 15

    Cisco Catalyst SD-WANCVE-2026-20128

    Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

    CVSS severity 7.5high

    Added Apr 20, 2026

  6. Rank 16

    Cisco Catalyst SD-WANCVE-2026-20133

    Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

    CVSS severity 7.5high

    Added Apr 20, 2026

  7. Rank 17

    Cisco Catalyst SD-WANCVE-2026-20262

    Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

    CVSS severity 6.5medium

    Added Jun 15, 2026

  8. Rank 18

    Cisco Catalyst SD-WANCVE-2026-20122

    Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

    CVSS severity 5.4medium

    Added Apr 20, 2026

  9. Rank 19

    Cisco Secure Firewall Management Center (FMC)CVE-2026-20316

    Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

    Ransomware

    CVSS severity 5.3medium

    Added Jul 29, 2026

  10. Rank 20

    Cisco Identity Services Engine (ISE)CVE-2025-20281

    Cisco Identity Services Engine Injection Vulnerability

    CVSS severity 10.0critical

    Added Jul 28, 2025

  11. Rank 21

    Cisco Identity Services Engine (ISE)CVE-2025-20337

    Cisco Identity Services Engine Injection Vulnerability

    CVSS severity 10.0critical

    Added Jul 28, 2025

  12. Rank 22

    Cisco IOS / IOS XECVE-2023-20198

    Cisco IOS XE Web UI Privilege Escalation Vulnerability

    CVSS severity 10.0critical

    Added Oct 16, 2023

  13. Rank 23

    Cisco ASA / Firepower (FTD)CVE-2025-20333

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

    CVSS severity 9.9critical

    Added Sep 25, 2025

  14. Rank 24

    Cisco Smart Licensing UtilityCVE-2024-20439

    Cisco Smart Licensing Utility Static Credential Vulnerability

    CVSS severity 9.8critical

    Added Mar 31, 2025

  15. Rank 25

    Cisco IOS / IOS XECVE-2017-3881

    Cisco IOS and IOS XE Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  16. Rank 26

    Cisco RV routers (Small Business)CVE-2018-0125

    Cisco VPN Routers Remote Code Execution Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  17. Rank 27

    Cisco Secure Access Control System (ACS)CVE-2018-0147

    Cisco Secure Access Control System Java Deserialization Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Mar 25, 2022

  18. Rank 28

    Cisco IOS / IOS XECVE-2017-12240

    Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  19. Rank 29

    Cisco IOS / IOS XECVE-2018-0151

    Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 9.8critical

    Added Mar 3, 2022

  20. Rank 30

    Cisco RV routers (Small Business)CVE-2022-20699

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added Mar 3, 2022

  21. Rank 31

    Cisco RV routers (Small Business)CVE-2022-20700

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    CVSS severity 9.8critical

    Added Mar 3, 2022

  22. Rank 32

    Cisco IOS / IOS XECVE-2018-0171

    Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

    CVE from 2018, added in 2021

    CVSS severity 9.8critical

    Added Nov 3, 2021

  23. Rank 33

    Cisco IP PhonesCVE-2020-3161

    Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  24. Rank 34

    Cisco HyperFlex HXCVE-2021-1497

    Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  25. Rank 35

    Cisco HyperFlex HXCVE-2021-1498

    Cisco HyperFlex HX Data Platform Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  26. Rank 36

    Cisco ASA / Firepower (FTD)CVE-2023-20269

    Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

    Ransomware

    CVSS severity 9.1critical

    Added Sep 13, 2023

  27. Rank 37

    Cisco IOS / IOS XECVE-2017-6742

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2023

    CVSS severity 8.8high

    Added Apr 19, 2023

  28. Rank 38

    Cisco RV routers (Small Business)CVE-2019-15271

    Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  29. Rank 39

    Cisco ASA / Firepower (FTD)CVE-2016-6366

    Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 8.8high

    Added May 24, 2022

  30. Rank 40

    Cisco IOS / IOS XECVE-2017-6736

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  31. Rank 41

    Cisco IOS / IOS XECVE-2017-6737

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  32. Rank 42

    Cisco IOS / IOS XECVE-2017-6738

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  33. Rank 43

    Cisco IOS / IOS XECVE-2017-6739

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  34. Rank 44

    Cisco IOS / IOS XECVE-2017-6740

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  35. Rank 45

    Cisco IOS / IOS XECVE-2017-6743

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  36. Rank 46

    Cisco IOS / IOS XECVE-2017-6744

    Cisco IOS Software SNMP Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  37. Rank 47

    Cisco IOS / IOS XE / IOS XRCVE-2018-0167

    Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.8high

    Added Mar 3, 2022

  38. Rank 48

    Cisco IOS XRCVE-2020-3118

    Cisco IOS XR Software Discovery Protocol Format String Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  39. Rank 49

    Cisco ASA / Firepower (FTD)CVE-2025-20362

    Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

    CVSS severity 8.6high

    Added Sep 25, 2025

  40. Rank 50

    Cisco ASA / Firepower (FTD)CVE-2024-20353

    Cisco ASA and FTD Denial of Service Vulnerability

    CVSS severity 8.6high

    Added Apr 24, 2024

  41. Rank 51

    Cisco IOS / IOS XECVE-2018-0155

    Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.6high

    Added Mar 3, 2022

  42. Rank 52

    Cisco IOS / IOS XECVE-2018-0158

    Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.6high

    Added Mar 3, 2022

  43. Rank 53

    Cisco IOS / IOS XECVE-2018-0172

    Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.6high

    Added Mar 3, 2022

  44. Rank 54

    Cisco IOS / IOS XECVE-2018-0173

    Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.6high

    Added Mar 3, 2022

  45. Rank 55

    Cisco IOS / IOS XECVE-2018-0174

    Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.6high

    Added Mar 3, 2022

  46. Rank 56

    Cisco IOS XRCVE-2020-3566

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

    CVSS severity 8.6high

    Added Nov 3, 2021

  47. Rank 57

    Cisco IOS XRCVE-2020-3569

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

    CVSS severity 8.6high

    Added Nov 3, 2021

  48. Rank 58

    Cisco IOS / IOS XE / IOS XRCVE-2018-0175

    Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.0high

    Added Mar 3, 2022

  49. Rank 59

    Cisco RV routers (Small Business)CVE-2022-20703

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    CVSS severity 8.0high

    Added Mar 3, 2022

  50. Rank 60

    Cisco RV routers (Small Business)CVE-2022-20708

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    CVSS severity 8.0high

    Added Mar 3, 2022

  51. Rank 61

    Cisco AnyConnect Secure Mobility ClientCVE-2020-3433

    Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

    RansomwareCVE from 2020, added in 2022

    CVSS severity 7.8high

    Added Oct 24, 2022

  52. Rank 62

    Cisco ASA / Firepower (FTD)CVE-2016-6367

    Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 7.8high

    Added May 24, 2022

  53. Rank 63

    Cisco RV routers (Small Business)CVE-2022-20701

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    CVSS severity 7.8high

    Added Mar 3, 2022

  54. Rank 64

    Cisco IOS / IOS XECVE-2025-20352

    Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

    CVSS severity 7.7high

    Added Sep 29, 2025

  55. Rank 65

    Cisco ASA / Firepower (FTD)CVE-2020-3259

    Cisco ASA and FTD Information Disclosure Vulnerability

    RansomwareCVE from 2020, added in 2024

    CVSS severity 7.5high

    Added Feb 15, 2024

  56. Rank 66

    Cisco IOS / IOS XE / IOS XRCVE-2016-6415

    Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

    CVE from 2016, added in 2023

    CVSS severity 7.5high

    Added May 19, 2023

  57. Rank 67

    Cisco IOS XRCVE-2010-3035

    Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

    CVE from 2010, added in 2022

    CVSS severity 7.5high

    Added Mar 25, 2022

  58. Rank 68

    Cisco Prime Data Center Network Manager (DCNM)CVE-2015-0666

    Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability

    CVE from 2015, added in 2022

    CVSS severity 7.5high

    Added Mar 25, 2022

  59. Rank 69

    Cisco IOS / IOS XECVE-2017-12231

    Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  60. Rank 70

    Cisco IOS / IOS XECVE-2017-12233

    Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  61. Rank 71

    Cisco IOS / IOS XECVE-2017-12234

    Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  62. Rank 72

    Cisco IOS / IOS XECVE-2017-12235

    Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  63. Rank 73

    Cisco IOS / IOS XECVE-2017-12237

    Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  64. Rank 74

    Cisco IOS / IOS XECVE-2017-6627

    Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  65. Rank 75

    Cisco IOS / IOS XECVE-2018-0154

    Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  66. Rank 76

    Cisco IOS / IOS XECVE-2018-0156

    Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  67. Rank 77

    Cisco IOS / IOS XECVE-2018-0159

    Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 7.5high

    Added Mar 3, 2022

  68. Rank 78

    Cisco ASA / Firepower (FTD)CVE-2018-0296

    Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability

    CVE from 2018, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  69. Rank 79

    Cisco RV routers (Small Business)CVE-2019-1653

    Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  70. Rank 80

    Cisco ASA / Firepower (FTD)CVE-2020-3452

    Cisco ASA and FTD Read-Only Path Traversal Vulnerability

    CVSS severity 7.5high

    Added Nov 3, 2021

  71. Rank 81

    Cisco RV routers (Small Business)CVE-2023-20118

    Cisco Small Business RV Series Routers Command Injection Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 7.2high

    Added Mar 3, 2025

  72. Rank 82

    Cisco IOS / IOS XECVE-2023-20273

    Cisco IOS XE Web UI Command Injection Vulnerability

    CVSS severity 7.2high

    Added Oct 23, 2023

  73. Rank 83

    Cisco RV routers (Small Business)CVE-2019-1652

    Cisco Small Business Routers Improper Input Validation Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 7.2high

    Added Mar 3, 2022

  74. Rank 84

    Cisco NX-OSCVE-2024-20399

    Cisco NX-OS Command Injection Vulnerability

    CVSS severity 6.7medium

    Added Jul 2, 2024

  75. Rank 85

    Cisco IOS / IOS XECVE-2023-20109

    Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

    CVSS severity 6.6medium

    Added Oct 10, 2023

  76. Rank 86

    Cisco AnyConnect Secure Mobility ClientCVE-2020-3153

    Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

    RansomwareCVE from 2020, added in 2022

    CVSS severity 6.5medium

    Added Oct 24, 2022

  77. Rank 87

    Cisco IOS XRCVE-2022-20821

    Cisco IOS XR Open Port Vulnerability

    CVSS severity 6.5medium

    Added May 23, 2022

  78. Rank 88

    Cisco IOS / IOS XECVE-2017-12232

    Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 6.5medium

    Added Mar 3, 2022

  79. Rank 89

    Cisco IOS / IOS XECVE-2017-12238

    Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 6.5medium

    Added Mar 3, 2022

  80. Rank 90

    Cisco IOS / IOS XECVE-2017-6663

    Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 6.5medium

    Added Mar 3, 2022

  81. Rank 91

    Cisco IOS / IOS XECVE-2018-0161

    Cisco IOS Software Resource Management Errors Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 6.3medium

    Added Mar 3, 2022

  82. Rank 92

    Cisco ASA / Firepower (FTD)CVE-2014-2120

    Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

    CVE from 2014, added in 2024

    CVSS severity 6.1medium

    Added Nov 12, 2024

  83. Rank 93

    Cisco ASA / Firepower (FTD)CVE-2020-3580

    Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability

    Ransomware

    CVSS severity 6.1medium

    Added Nov 3, 2021

  84. Rank 94

    Cisco ASA / Firepower (FTD)CVE-2024-20359

    Cisco ASA and FTD Privilege Escalation Vulnerability

    CVSS severity 6.0medium

    Added Apr 24, 2024

  85. Rank 95

    Cisco IOS / IOS XECVE-2004-1464

    Cisco IOS Denial-of-Service Vulnerability

    CVE from 2004, added in 2023

    CVSS severity 5.9medium

    Added May 19, 2023

  86. Rank 96

    Cisco IOS XRCVE-2009-2055

    Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

    CVE from 2009, added in 2022

    CVSS severity 5.9medium

    Added Mar 25, 2022

  87. Rank 97

    Cisco IOS / IOS XECVE-2017-12319

    Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 5.9medium

    Added Mar 3, 2022

  88. Rank 98

    Cisco IOS / IOS XECVE-2018-0179

    Cisco IOS Software Denial-of-Service Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 5.9medium

    Added Mar 3, 2022

  89. Rank 99

    Cisco IOS / IOS XECVE-2018-0180

    Cisco IOS Software Denial-of-Service Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 5.9medium

    Added Mar 3, 2022

  90. Rank 100

    Cisco ASA / Firepower (FTD)CVE-2024-20481

    Cisco ASA and FTD Denial-of-Service Vulnerability

    CVSS severity 5.8medium

    Added Oct 24, 2024

Follow and verify

Get new Cisco vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.