Network and edge
Switches, routers and SD-WAN
The core of the corporate network: switches, routers, SD-WAN and Wi-Fi controllers.
For example: Cisco IOS XE, Juniper Junos, MikroTik RouterOS, Arista EOS.
-
22 vulnerabilities added in the last 12 months
-
90 exploited vulnerabilities in the catalog, in total
-
6 added in the last 30 days
Pace of additions
| Period | Vulnerabilities added |
|---|---|
| Sep 9, 2025 to Oct 8, 2025 | 1 |
| Oct 9, 2025 to Nov 7, 2025 | 0 |
| Nov 8, 2025 to Dec 7, 2025 | 0 |
| Dec 8, 2025 to Jan 6, 2026 | 1 |
| Jan 7, 2026 to Feb 5, 2026 | 1 |
| Feb 6, 2026 to Mar 7, 2026 | 2 |
| Mar 8, 2026 to Apr 6, 2026 | 0 |
| Apr 7, 2026 to May 6, 2026 | 3 |
| May 7, 2026 to Jun 5, 2026 | 1 |
| Jun 6, 2026 to Jul 5, 2026 | 6 |
| Jul 6, 2026 to Aug 4, 2026 | 2 |
| Aug 5, 2026 to Sep 3, 2026 | 0 |
| Sep 4, 2026 to Oct 3, 2026 (in progress) | 6 |
Affected brands
In alphabetical order, with their number of vulnerabilities in this category.
- Arista 3 vulnerabilities · 3 in the last 12 months
- Aviatrix 2 vulnerabilities
- Cisco 58 vulnerabilities · 10 in the last 12 months
- Citrix 3 vulnerabilities
- Juniper 7 vulnerabilities
- MikroTik 5 vulnerabilities · 3 in the last 12 months
- MRLG (Multi-Router Looking Glass) 1 vulnerability
- NETGEAR 1 vulnerability
- Ruckus Wireless 1 vulnerability
- Sierra Wireless 1 vulnerability · 1 in the last 12 months
- Ubiquiti 4 vulnerabilities · 3 in the last 12 months
- Versa Networks 2 vulnerabilities · 1 in the last 12 months
- VMware (Broadcom) 1 vulnerability
- Zyxel 1 vulnerability · 1 in the last 12 months
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
See also
- Firewalls, VPNs and remote access 111 vulnerabilities
- Home and small-office routers, cameras and IoT 90 vulnerabilities
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this category.
- Rank 1
Cisco Catalyst SD-WANCVE-2026-76504
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 9.8critical
Added Sep 30, 2026
- Rank 2
MikroTik RouterOSCVE-2026-67279
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
Recently added
CVSS severity 6.5medium
Added Sep 25, 2026
- Rank 3
Arista SD-WAN (VeloCloud)CVE-2026-93952
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 10.0critical
Added Sep 22, 2026
- Rank 4
Zyxel Switches (GS, XGS)CVE-2026-7273
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 8.8high
Added Sep 21, 2026
- Rank 5
MikroTik RouterOSCVE-2026-86060
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 9.8critical
Added Sep 10, 2026
- Rank 6
MikroTik RouterOSCVE-2026-67277
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
Recently added
CVSS severity 8.2high
Added Sep 10, 2026
- Rank 7
Arista SD-WAN (VeloCloud)CVE-2026-16812
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
Hunt for compromise (CISA)
CVSS severity 10.0critical
Added Jul 27, 2026
- Rank 8
Ubiquiti UniFi OS / UniFi NetworkCVE-2026-34908
Ubiquiti UniFi OS Improper Access Control Vulnerability
CVSS severity 10.0critical
Added Jun 23, 2026
- Rank 9
Ubiquiti UniFi OS / UniFi NetworkCVE-2026-34909
Ubiquiti UniFi OS Path Traversal Vulnerability
CVSS severity 10.0critical
Added Jun 23, 2026
- Rank 10
Ubiquiti UniFi OS / UniFi NetworkCVE-2026-34910
Ubiquiti UniFi OS Improper Input Validation Vulnerability
CVSS severity 10.0critical
Added Jun 23, 2026
Show 80 more vulnerabilities
- Rank 11
Cisco Catalyst SD-WANCVE-2026-20182
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
CVSS severity 10.0critical
Added May 14, 2026
- Rank 12
Cisco Catalyst SD-WANCVE-2026-20127
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
CVSS severity 10.0critical
Added Feb 25, 2026
- Rank 13
Sierra Wireless AirLink ALEOSCVE-2018-4063
Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability
CVE from 2018, added in 2025
CVSS severity 8.8high
Added Dec 12, 2025
- Rank 14
Cisco IOS / IOS XECVE-2008-4128
Cisco IOS Cross-Site Request Forgery Vulnerability
Hunt for compromise (CISA)CVE from 2008, added in 2026
CVSS severity 8.1high
Added Jul 13, 2026
- Rank 15
Cisco Catalyst SD-WANCVE-2026-20245
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
CVSS severity 7.8high
Added Jun 9, 2026
- Rank 16
Cisco Catalyst SD-WANCVE-2022-20775
Cisco SD-WAN Path Traversal Vulnerability
CVE from 2022, added in 2026
CVSS severity 7.8high
Added Feb 25, 2026
- Rank 17
Cisco Catalyst SD-WANCVE-2026-20128
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
CVSS severity 7.5high
Added Apr 20, 2026
- Rank 18
Cisco Catalyst SD-WANCVE-2026-20133
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
CVSS severity 7.5high
Added Apr 20, 2026
- Rank 19
Versa Networks ConcertoCVE-2025-34026
Versa Concerto Improper Authentication Vulnerability
CVSS severity 7.5high
Added Jan 22, 2026
- Rank 20
Cisco Catalyst SD-WANCVE-2026-20262
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
CVSS severity 6.5medium
Added Jun 15, 2026
- Rank 21
Arista EOSCVE-2026-7473
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
CVSS severity 5.8medium
Added Jun 9, 2026
- Rank 22
Cisco Catalyst SD-WANCVE-2026-20122
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
CVSS severity 5.4medium
Added Apr 20, 2026
- Rank 23
Cisco IOS / IOS XECVE-2023-20198
Cisco IOS XE Web UI Privilege Escalation Vulnerability
CVSS severity 10.0critical
Added Oct 16, 2023
- Rank 24
MRLG (Multi-Router Looking Glass) Multi-Router Looking Glass (MRLG)CVE-2014-3931
Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
CVE from 2014, added in 2025
CVSS severity 9.8critical
Added Jul 7, 2025
- Rank 25
Aviatrix ControllerCVE-2024-50603
Aviatrix Controllers OS Command Injection Vulnerability
CVSS severity 9.8critical
Added Jan 16, 2025
- Rank 26
Juniper Junos OSCVE-2023-36845
Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
CVSS severity 9.8critical
Added Nov 13, 2023
- Rank 27
Ruckus Wireless Wi-Fi access points and controllersCVE-2023-25717
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
CVSS severity 9.8critical
Added May 12, 2023
- Rank 28
MikroTik RouterOSCVE-2018-7445
MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
CVE from 2018, added in 2022
CVSS severity 9.8critical
Added Sep 8, 2022
- Rank 29
Ubiquiti airOS (airMAX)CVE-2010-5330
Ubiquiti AirOS Command Injection Vulnerability
CVE from 2010, added in 2022
CVSS severity 9.8critical
Added Apr 15, 2022
- Rank 30
Cisco IOS / IOS XECVE-2017-3881
Cisco IOS and IOS XE Remote Code Execution Vulnerability
CVE from 2017, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
- Rank 31
Citrix SD-WANCVE-2017-6316
Citrix Multiple Products Remote Code Execution Vulnerability
CVE from 2017, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
- Rank 32
Citrix SD-WANCVE-2019-12989
Citrix SD-WAN and NetScaler SQL Injection Vulnerability
CVE from 2019, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
- Rank 33
Juniper Junos OSCVE-2020-1631
Juniper Junos OS Path Traversal Vulnerability
CVE from 2020, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
- Rank 34
Cisco IOS / IOS XECVE-2017-12240
Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
CVE from 2017, added in 2022
CVSS severity 9.8critical
Added Mar 3, 2022
- Rank 35
Cisco IOS / IOS XECVE-2018-0151
Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
CVE from 2018, added in 2022
CVSS severity 9.8critical
Added Mar 3, 2022
- Rank 36
Aviatrix ControllerCVE-2021-40870
Aviatrix Controller Unrestricted Upload of File
CVSS severity 9.8critical
Added Jan 18, 2022
- Rank 37
Cisco IOS / IOS XECVE-2018-0171
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
CVE from 2018, added in 2021
CVSS severity 9.8critical
Added Nov 3, 2021
- Rank 38
NETGEAR Switches (GS, JGS, MS)CVE-2020-26919
Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
CVSS severity 9.8critical
Added Nov 3, 2021
- Rank 39
MikroTik RouterOSCVE-2018-14847
MikroTik Router OS Directory Traversal Vulnerability
CVE from 2018, added in 2021
CVSS severity 9.1critical
Added Dec 1, 2021
- Rank 40
Cisco IOS / IOS XECVE-2017-6742
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
CVE from 2017, added in 2023
CVSS severity 8.8high
Added Apr 19, 2023
- Rank 41
Citrix SD-WANCVE-2019-12991
Citrix SD-WAN and NetScaler Command Injection Vulnerability
CVE from 2019, added in 2022
CVSS severity 8.8high
Added Mar 25, 2022
- Rank 42
Cisco IOS / IOS XECVE-2017-6736
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
CVE from 2017, added in 2022
CVSS severity 8.8high
Added Mar 3, 2022
- Rank 43
Cisco IOS / IOS XECVE-2017-6737
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
CVE from 2017, added in 2022
CVSS severity 8.8high
Added Mar 3, 2022
- Rank 44
Cisco IOS / IOS XECVE-2017-6738
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
CVE from 2017, added in 2022
CVSS severity 8.8high
Added Mar 3, 2022
- Rank 45
Cisco IOS / IOS XECVE-2017-6739
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
CVE from 2017, added in 2022
CVSS severity 8.8high
Added Mar 3, 2022
- Rank 46
Cisco IOS / IOS XECVE-2017-6740
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
CVE from 2017, added in 2022
CVSS severity 8.8high
Added Mar 3, 2022
- Rank 47
Cisco IOS / IOS XECVE-2017-6743
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
CVE from 2017, added in 2022
CVSS severity 8.8high
Added Mar 3, 2022
- Rank 48
Cisco IOS / IOS XECVE-2017-6744
Cisco IOS Software SNMP Remote Code Execution Vulnerability
CVE from 2017, added in 2022
CVSS severity 8.8high
Added Mar 3, 2022
- Rank 49
Cisco IOS / IOS XE / IOS XRCVE-2018-0167
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
CVE from 2018, added in 2022
CVSS severity 8.8high
Added Mar 3, 2022
- Rank 50
Cisco IOS XRCVE-2020-3118
Cisco IOS XR Software Discovery Protocol Format String Vulnerability
CVSS severity 8.8high
Added Nov 3, 2021
- Rank 51
Cisco IOS / IOS XECVE-2018-0155
Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
CVE from 2018, added in 2022
CVSS severity 8.6high
Added Mar 3, 2022
- Rank 52
Cisco IOS / IOS XECVE-2018-0158
Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
CVE from 2018, added in 2022
CVSS severity 8.6high
Added Mar 3, 2022
- Rank 53
Cisco IOS / IOS XECVE-2018-0172
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
CVE from 2018, added in 2022
CVSS severity 8.6high
Added Mar 3, 2022
- Rank 54
Cisco IOS / IOS XECVE-2018-0173
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
CVE from 2018, added in 2022
CVSS severity 8.6high
Added Mar 3, 2022
- Rank 55
Cisco IOS / IOS XECVE-2018-0174
Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
CVE from 2018, added in 2022
CVSS severity 8.6high
Added Mar 3, 2022
- Rank 56
Cisco IOS XRCVE-2020-3566
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
CVSS severity 8.6high
Added Nov 3, 2021
- Rank 57
Cisco IOS XRCVE-2020-3569
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
CVSS severity 8.6high
Added Nov 3, 2021
- Rank 58
VMware (Broadcom) SD-WAN (VeloCloud)CVE-2018-6961
VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability
CVE from 2018, added in 2022
CVSS severity 8.1high
Added Mar 25, 2022
- Rank 59
Cisco IOS / IOS XE / IOS XRCVE-2018-0175
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
CVE from 2018, added in 2022
CVSS severity 8.0high
Added Mar 3, 2022
- Rank 60
Cisco IOS / IOS XECVE-2025-20352
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
CVSS severity 7.7high
Added Sep 29, 2025
- Rank 61
Cisco IOS / IOS XE / IOS XRCVE-2016-6415
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
CVE from 2016, added in 2023
CVSS severity 7.5high
Added May 19, 2023
- Rank 62
Cisco IOS XRCVE-2010-3035
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
CVE from 2010, added in 2022
CVSS severity 7.5high
Added Mar 25, 2022
- Rank 63
Cisco IOS / IOS XECVE-2017-12231
Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability
CVE from 2017, added in 2022
CVSS severity 7.5high
Added Mar 3, 2022
- Rank 64
Cisco IOS / IOS XECVE-2017-12233
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
CVE from 2017, added in 2022
CVSS severity 7.5high
Added Mar 3, 2022
- Rank 65
Cisco IOS / IOS XECVE-2017-12234
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
CVE from 2017, added in 2022
CVSS severity 7.5high
Added Mar 3, 2022
- Rank 66
Cisco IOS / IOS XECVE-2017-12235
Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
CVE from 2017, added in 2022
CVSS severity 7.5high
Added Mar 3, 2022
- Rank 67
Cisco IOS / IOS XECVE-2017-12237
Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
CVE from 2017, added in 2022
CVSS severity 7.5high
Added Mar 3, 2022
- Rank 68
Cisco IOS / IOS XECVE-2017-6627
Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
CVE from 2017, added in 2022
CVSS severity 7.5high
Added Mar 3, 2022
- Rank 69
Cisco IOS / IOS XECVE-2018-0154
Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
CVE from 2018, added in 2022
CVSS severity 7.5high
Added Mar 3, 2022
- Rank 70
Cisco IOS / IOS XECVE-2018-0156
Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
CVE from 2018, added in 2022
CVSS severity 7.5high
Added Mar 3, 2022
- Rank 71
Cisco IOS / IOS XECVE-2018-0159
Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
CVE from 2018, added in 2022
CVSS severity 7.5high
Added Mar 3, 2022
- Rank 72
Versa Networks DirectorCVE-2024-39717
Versa Director Dangerous File Type Upload Vulnerability
CVSS severity 7.2high
Added Aug 23, 2024
- Rank 73
Cisco IOS / IOS XECVE-2023-20273
Cisco IOS XE Web UI Command Injection Vulnerability
CVSS severity 7.2high
Added Oct 23, 2023
- Rank 74
Cisco NX-OSCVE-2024-20399
Cisco NX-OS Command Injection Vulnerability
CVSS severity 6.7medium
Added Jul 2, 2024
- Rank 75
Cisco IOS / IOS XECVE-2023-20109
Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
CVSS severity 6.6medium
Added Oct 10, 2023
- Rank 76
Cisco IOS XRCVE-2022-20821
Cisco IOS XR Open Port Vulnerability
CVSS severity 6.5medium
Added May 23, 2022
- Rank 77
Cisco IOS / IOS XECVE-2017-12232
Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
CVE from 2017, added in 2022
CVSS severity 6.5medium
Added Mar 3, 2022
- Rank 78
Cisco IOS / IOS XECVE-2017-12238
Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
CVE from 2017, added in 2022
CVSS severity 6.5medium
Added Mar 3, 2022
- Rank 79
Cisco IOS / IOS XECVE-2017-6663
Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
CVE from 2017, added in 2022
CVSS severity 6.5medium
Added Mar 3, 2022
- Rank 80
Cisco IOS / IOS XECVE-2018-0161
Cisco IOS Software Resource Management Errors Vulnerability
CVE from 2018, added in 2022
CVSS severity 6.3medium
Added Mar 3, 2022
- Rank 81
Cisco IOS / IOS XECVE-2004-1464
Cisco IOS Denial-of-Service Vulnerability
CVE from 2004, added in 2023
CVSS severity 5.9medium
Added May 19, 2023
- Rank 82
Cisco IOS XRCVE-2009-2055
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
CVE from 2009, added in 2022
CVSS severity 5.9medium
Added Mar 25, 2022
- Rank 83
Cisco IOS / IOS XECVE-2017-12319
Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
CVE from 2017, added in 2022
CVSS severity 5.9medium
Added Mar 3, 2022
- Rank 84
Cisco IOS / IOS XECVE-2018-0179
Cisco IOS Software Denial-of-Service Vulnerability
CVE from 2018, added in 2022
CVSS severity 5.9medium
Added Mar 3, 2022
- Rank 85
Cisco IOS / IOS XECVE-2018-0180
Cisco IOS Software Denial-of-Service Vulnerability
CVE from 2018, added in 2022
CVSS severity 5.9medium
Added Mar 3, 2022
- Rank 86
Juniper Junos OSCVE-2023-36844
Juniper Junos OS EX Series PHP External Variable Modification Vulnerability
CVSS severity 5.3medium
Added Nov 13, 2023
- Rank 87
Juniper Junos OSCVE-2023-36846
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
CVSS severity 5.3medium
Added Nov 13, 2023
- Rank 88
Juniper Junos OSCVE-2023-36847
Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
CVSS severity 5.3medium
Added Nov 13, 2023
- Rank 89
Juniper Junos OSCVE-2023-36851
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
CVSS severity 5.3medium
Added Nov 13, 2023
- Rank 90
Juniper Junos OSCVE-2025-21590
Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
CVSS severity 4.4medium
Added Mar 13, 2025
Filed under another category
These 4 vulnerabilities also concern this type of product, but are counted in their main category. My radar finds them when you follow this category.
Citrix NetScaler ADC / GatewayCVE-2019-19781
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
RansomwareCVE from 2019, added in 2021
CVSS severity 9.8critical
Added Nov 3, 2021
Citrix NetScaler ADC / GatewayCVE-2020-8193
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
CVSS severity 6.5medium
Added Nov 3, 2021
Citrix NetScaler ADC / GatewayCVE-2020-8195
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
CVSS severity 6.5medium
Added Nov 3, 2021
Citrix NetScaler ADC / GatewayCVE-2020-8196
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
CVSS severity 4.3medium
Added Nov 3, 2021
Follow and verify
Get new vulnerabilities in this category: RSS feed (add it to Outlook, Teams, Slack or your feed reader).
Indicative classification, based on the vendor and product names given by CISA. How products are classified.