https://exploit-radar.com/en/flux/marques/cisco.xml Exploit Radar: exploited Cisco vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for Cisco products. 2026-09-16T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-76460/ CVE-2026-76460 — Cisco Identity Services Engine (ISE) 2026-09-16T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 16, 2026. https://exploit-radar.com/en/cve/CVE-2026-76461/ CVE-2026-76461 — Cisco Secure Email Gateway 2026-09-14T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 14, 2026. https://exploit-radar.com/en/cve/CVE-2026-20079/ CVE-2026-20079 — Cisco Secure Firewall Management Center (FMC) 2026-09-09T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 9, 2026. https://exploit-radar.com/en/cve/CVE-2026-20349/ CVE-2026-20349 — Cisco ASA / Firepower (FTD) 2026-08-11T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 11, 2026. https://exploit-radar.com/en/cve/CVE-2026-20316/ CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC) 2026-07-29T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 29, 2026. https://exploit-radar.com/en/cve/CVE-2008-4128/ CVE-2008-4128 — Cisco IOS / IOS XE 2026-07-13T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 13, 2026. https://exploit-radar.com/en/cve/CVE-2026-20230/ CVE-2026-20230 — Cisco Unified Communications Manager 2026-06-25T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on June 25, 2026. https://exploit-radar.com/en/cve/CVE-2026-20262/ CVE-2026-20262 — Cisco Catalyst SD-WAN 2026-06-15T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 15, 2026. https://exploit-radar.com/en/cve/CVE-2026-20245/ CVE-2026-20245 — Cisco Catalyst SD-WAN 2026-06-09T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. For cloud services, follow the guidance from Cisco. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 9, 2026. https://exploit-radar.com/en/cve/CVE-2026-20182/ CVE-2026-20182 — Cisco Catalyst SD-WAN 2026-05-14T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on May 14, 2026. https://exploit-radar.com/en/cve/CVE-2026-20128/ CVE-2026-20128 — Cisco Catalyst SD-WAN 2026-04-20T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on April 20, 2026. https://exploit-radar.com/en/cve/CVE-2026-20133/ CVE-2026-20133 — Cisco Catalyst SD-WAN 2026-04-20T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on April 20, 2026. https://exploit-radar.com/en/cve/CVE-2026-20122/ CVE-2026-20122 — Cisco Catalyst SD-WAN 2026-04-20T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on April 20, 2026. https://exploit-radar.com/en/cve/CVE-2026-20131/ CVE-2026-20131 — Cisco Secure Firewall Management Center (FMC) 2026-03-19T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. For cloud services, follow the guidance from Cisco. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 19, 2026. https://exploit-radar.com/en/cve/CVE-2026-20127/ CVE-2026-20127 — Cisco Catalyst SD-WAN 2026-02-25T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 2 days. Added to CISA’s catalog of exploited vulnerabilities on February 25, 2026. https://exploit-radar.com/en/cve/CVE-2022-20775/ CVE-2022-20775 — Cisco Catalyst SD-WAN 2026-02-25T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 2 days. Added to CISA’s catalog of exploited vulnerabilities on February 25, 2026. https://exploit-radar.com/en/cve/CVE-2026-20045/ CVE-2026-20045 — Cisco Unified Communications Manager 2026-01-21T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. For cloud services, follow the guidance from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 21, 2026. https://exploit-radar.com/en/cve/CVE-2025-20393/ CVE-2025-20393 — Cisco Secure Email Gateway 2025-12-17T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. For cloud services, follow the guidance from Cisco. CISA deadline: 7 days. Added to CISA’s catalog of exploited vulnerabilities on December 17, 2025. https://exploit-radar.com/en/cve/CVE-2025-20352/ CVE-2025-20352 — Cisco IOS / IOS XE 2025-09-29T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. For cloud services, follow the guidance from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 29, 2025. https://exploit-radar.com/en/cve/CVE-2025-20333/ CVE-2025-20333 — Cisco ASA / Firepower (FTD) 2025-09-25T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 1 day. Added to CISA’s catalog of exploited vulnerabilities on September 25, 2025. https://exploit-radar.com/en/cve/CVE-2025-20362/ CVE-2025-20362 — Cisco ASA / Firepower (FTD) 2025-09-25T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 1 day. Added to CISA’s catalog of exploited vulnerabilities on September 25, 2025. https://exploit-radar.com/en/cve/CVE-2025-20281/ CVE-2025-20281 — Cisco Identity Services Engine (ISE) 2025-07-28T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. For cloud services, follow the guidance from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 28, 2025. https://exploit-radar.com/en/cve/CVE-2025-20337/ CVE-2025-20337 — Cisco Identity Services Engine (ISE) 2025-07-28T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. For cloud services, follow the guidance from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 28, 2025. https://exploit-radar.com/en/cve/CVE-2024-20439/ CVE-2024-20439 — Cisco Smart Licensing Utility 2025-03-31T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. For cloud services, follow the guidance from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 31, 2025. https://exploit-radar.com/en/cve/CVE-2023-20118/ CVE-2023-20118 — Cisco RV routers (Small Business) 2025-03-03T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. For cloud services, follow the guidance from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2025. https://exploit-radar.com/en/cve/CVE-2014-2120/ CVE-2014-2120 — Cisco ASA / Firepower (FTD) 2024-11-12T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 12, 2024. https://exploit-radar.com/en/cve/CVE-2024-20481/ CVE-2024-20481 — Cisco ASA / Firepower (FTD) 2024-10-24T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 24, 2024. https://exploit-radar.com/en/cve/CVE-2024-20399/ CVE-2024-20399 — Cisco NX-OS 2024-07-02T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 2, 2024. https://exploit-radar.com/en/cve/CVE-2024-20353/ CVE-2024-20353 — Cisco ASA / Firepower (FTD) 2024-04-24T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. CISA deadline: 7 days. Added to CISA’s catalog of exploited vulnerabilities on April 24, 2024. https://exploit-radar.com/en/cve/CVE-2024-20359/ CVE-2024-20359 — Cisco ASA / Firepower (FTD) 2024-04-24T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. CISA deadline: 7 days. Added to CISA’s catalog of exploited vulnerabilities on April 24, 2024. https://exploit-radar.com/en/cve/CVE-2020-3259/ CVE-2020-3259 — Cisco ASA / Firepower (FTD) 2024-02-15T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on February 15, 2024. https://exploit-radar.com/en/cve/CVE-2023-20273/ CVE-2023-20273 — Cisco IOS / IOS XE 2023-10-23T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 4 days. Added to CISA’s catalog of exploited vulnerabilities on October 23, 2023. https://exploit-radar.com/en/cve/CVE-2023-20198/ CVE-2023-20198 — Cisco IOS / IOS XE 2023-10-16T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 4 days. Added to CISA’s catalog of exploited vulnerabilities on October 16, 2023. https://exploit-radar.com/en/cve/CVE-2023-20109/ CVE-2023-20109 — Cisco IOS / IOS XE 2023-10-10T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 10, 2023. https://exploit-radar.com/en/cve/CVE-2023-20269/ CVE-2023-20269 — Cisco ASA / Firepower (FTD) 2023-09-13T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on September 13, 2023. https://exploit-radar.com/en/cve/CVE-2016-6415/ CVE-2016-6415 — Cisco IOS / IOS XE / IOS XR 2023-05-19T00:00:00Z Apply the security update from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 19, 2023. https://exploit-radar.com/en/cve/CVE-2004-1464/ CVE-2004-1464 — Cisco IOS / IOS XE 2023-05-19T00:00:00Z Apply the security update from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 19, 2023. https://exploit-radar.com/en/cve/CVE-2017-6742/ CVE-2017-6742 — Cisco IOS / IOS XE 2023-04-19T00:00:00Z Apply the security update from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on April 19, 2023. https://exploit-radar.com/en/cve/CVE-2020-3433/ CVE-2020-3433 — Cisco AnyConnect Secure Mobility Client 2022-10-24T00:00:00Z Apply the security update from Cisco. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 24, 2022. https://exploit-radar.com/en/cve/CVE-2020-3153/ CVE-2020-3153 — Cisco AnyConnect Secure Mobility Client 2022-10-24T00:00:00Z Apply the security update from Cisco. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 24, 2022. https://exploit-radar.com/en/cve/CVE-2019-15271/ CVE-2019-15271 — Cisco RV routers (Small Business) 2022-06-08T00:00:00Z Apply the security update from Cisco. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2022. https://exploit-radar.com/en/cve/CVE-2016-6366/ CVE-2016-6366 — Cisco ASA / Firepower (FTD) 2022-05-24T00:00:00Z Apply the security update from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 24, 2022. https://exploit-radar.com/en/cve/CVE-2016-6367/ CVE-2016-6367 — Cisco ASA / Firepower (FTD) 2022-05-24T00:00:00Z Apply the security update from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 24, 2022. https://exploit-radar.com/en/cve/CVE-2022-20821/ CVE-2022-20821 — Cisco IOS XR 2022-05-23T00:00:00Z Apply the security update from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 23, 2022. https://exploit-radar.com/en/cve/CVE-2017-3881/ CVE-2017-3881 — Cisco IOS / IOS XE 2022-03-25T00:00:00Z Apply the security update from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2022. https://exploit-radar.com/en/cve/CVE-2018-0125/ CVE-2018-0125 — Cisco RV routers (Small Business) 2022-03-25T00:00:00Z Apply the security update from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2022. https://exploit-radar.com/en/cve/CVE-2018-0147/ CVE-2018-0147 — Cisco Secure Access Control System (ACS) 2022-03-25T00:00:00Z Apply the security update from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2022. https://exploit-radar.com/en/cve/CVE-2010-3035/ CVE-2010-3035 — Cisco IOS XR 2022-03-25T00:00:00Z Apply the security update from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2022. https://exploit-radar.com/en/cve/CVE-2015-0666/ CVE-2015-0666 — Cisco Prime Data Center Network Manager (DCNM) 2022-03-25T00:00:00Z Apply the security update from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2022. https://exploit-radar.com/en/cve/CVE-2009-2055/ CVE-2009-2055 — Cisco IOS XR 2022-03-25T00:00:00Z Apply the security update from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2022.