Network and edge
Switches, routers and SD-WAN
The core of the corporate network: switches, routers, SD-WAN and Wi-Fi controllers.
For example: Cisco IOS XE, Juniper Junos, MikroTik RouterOS, Arista EOS.
-
22 vulnerabilities added in the last 12 months
-
89 exploited vulnerabilities in the catalog, in total
-
5 added in the last 30 days
Pace of additions
| Period | Vulnerabilities added |
|---|---|
| Sep 4, 2025 to Oct 3, 2025 | 1 |
| Oct 4, 2025 to Nov 2, 2025 | 0 |
| Nov 3, 2025 to Dec 2, 2025 | 0 |
| Dec 3, 2025 to Jan 1, 2026 | 1 |
| Jan 2, 2026 to Jan 31, 2026 | 1 |
| Feb 1, 2026 to Mar 2, 2026 | 2 |
| Mar 3, 2026 to Apr 1, 2026 | 0 |
| Apr 2, 2026 to May 1, 2026 | 3 |
| May 2, 2026 to May 31, 2026 | 1 |
| Jun 1, 2026 to Jun 30, 2026 | 6 |
| Jul 1, 2026 to Jul 30, 2026 | 2 |
| Jul 31, 2026 to Aug 29, 2026 | 0 |
| Aug 30, 2026 to Sep 28, 2026 (in progress) | 5 |
Affected brands
In alphabetical order, with their number of vulnerabilities in this category.
- Arista 3 vulnerabilities · 3 in the last 12 months
- Aviatrix 2 vulnerabilities
- Cisco 57 vulnerabilities · 10 in the last 12 months
- Citrix 3 vulnerabilities
- Juniper 7 vulnerabilities
- MikroTik 5 vulnerabilities · 3 in the last 12 months
- MRLG (Multi-Router Looking Glass) 1 vulnerability
- NETGEAR 1 vulnerability
- Ruckus Wireless 1 vulnerability
- Sierra Wireless 1 vulnerability · 1 in the last 12 months
- Ubiquiti 4 vulnerabilities · 3 in the last 12 months
- Versa Networks 2 vulnerabilities · 1 in the last 12 months
- VMware (Broadcom) 1 vulnerability
- Zyxel 1 vulnerability · 1 in the last 12 months
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
See also
- Firewalls, VPNs and remote access 111 vulnerabilities
- Home and small-office routers, cameras and IoT 90 vulnerabilities
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this category.
Rank 1MikroTik RouterOS
CVE-2026-67279Recently added
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
Added to the catalog less than 30 days ago: ranked by date added.
- Added
- Sep 25, 2026
- CISA deadline
- 3 days
- CVSS severity
- 6.5 (medium)
Rank 2Arista SD-WAN (VeloCloud)
CVE-2026-93952Recently addedHunt for compromise (CISA)
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Added to the catalog less than 30 days ago: ranked by date added.
- Added
- Sep 22, 2026
- CISA deadline
- 3 days
- CVSS severity
- 10.0 (critical)
Rank 3Zyxel Switches (GS, XGS)
CVE-2026-7273Recently addedHunt for compromise (CISA)
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Added to the catalog less than 30 days ago: ranked by date added.
- Added
- Sep 21, 2026
- CISA deadline
- 3 days
- CVSS severity
- 8.8 (high)
Rank 4MikroTik RouterOS
CVE-2026-86060Recently addedHunt for compromise (CISA)
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
Added to the catalog less than 30 days ago: ranked by date added.
- Added
- Sep 10, 2026
- CISA deadline
- 3 days
- CVSS severity
- 9.8 (critical)
Rank 5MikroTik RouterOS
CVE-2026-67277Recently added
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
Added to the catalog less than 30 days ago: ranked by date added.
- Added
- Sep 10, 2026
- CISA deadline
- 3 days
- CVSS severity
- 8.2 (high)
Rank 6Arista SD-WAN (VeloCloud)
CVE-2026-16812Hunt for compromise (CISA)
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jul 27, 2026
- CISA deadline
- 3 days
- CVSS severity
- 10.0 (critical)
Rank 7Ubiquiti UniFi OS / UniFi Network
CVE-2026-34908Ubiquiti UniFi OS Improper Access Control Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jun 23, 2026
- CISA deadline
- 3 days
- CVSS severity
- 10.0 (critical)
Rank 8Ubiquiti UniFi OS / UniFi Network
CVE-2026-34909Ubiquiti UniFi OS Path Traversal Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jun 23, 2026
- CISA deadline
- 3 days
- CVSS severity
- 10.0 (critical)
Rank 9Ubiquiti UniFi OS / UniFi Network
CVE-2026-34910Ubiquiti UniFi OS Improper Input Validation Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jun 23, 2026
- CISA deadline
- 3 days
- CVSS severity
- 10.0 (critical)
Rank 10Cisco Catalyst SD-WAN
CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- May 14, 2026
- CISA deadline
- 3 days
- CVSS severity
- 10.0 (critical)
Show 79 more vulnerabilities
Rank 11Cisco Catalyst SD-WAN
CVE-2026-20127Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Feb 25, 2026
- CISA deadline
- 2 days
- CVSS severity
- 10.0 (critical)
Rank 12Sierra Wireless AirLink ALEOS
CVE-2018-4063CVE from 2018, added in 2025
Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Dec 12, 2025
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Rank 13Cisco IOS / IOS XE
CVE-2008-4128Hunt for compromise (CISA)CVE from 2008, added in 2026
Cisco IOS Cross-Site Request Forgery Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jul 13, 2026
- CISA deadline
- 3 days
- CVSS severity
- 8.1 (high)
Rank 14Cisco Catalyst SD-WAN
CVE-2026-20245Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jun 9, 2026
- CISA deadline
- 14 days
- CVSS severity
- 7.8 (high)
Rank 15Cisco Catalyst SD-WAN
CVE-2022-20775CVE from 2022, added in 2026
Cisco SD-WAN Path Traversal Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Feb 25, 2026
- CISA deadline
- 2 days
- CVSS severity
- 7.8 (high)
Rank 16Cisco IOS / IOS XE
CVE-2025-20352Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Sep 29, 2025
- CISA deadline
- 21 days
- CVSS severity
- 7.7 (high)
Rank 17Cisco Catalyst SD-WAN
CVE-2026-20128Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Apr 20, 2026
- CISA deadline
- 3 days
- CVSS severity
- 7.5 (high)
Rank 18Cisco Catalyst SD-WAN
CVE-2026-20133Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Apr 20, 2026
- CISA deadline
- 3 days
- CVSS severity
- 7.5 (high)
Rank 19Versa Networks Concerto
CVE-2025-34026Versa Concerto Improper Authentication Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jan 22, 2026
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Rank 20Cisco Catalyst SD-WAN
CVE-2026-20262Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jun 15, 2026
- CISA deadline
- 14 days
- CVSS severity
- 6.5 (medium)
Rank 21Arista EOS
CVE-2026-7473Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jun 9, 2026
- CISA deadline
- 14 days
- CVSS severity
- 5.8 (medium)
Rank 22Cisco Catalyst SD-WAN
CVE-2026-20122Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Apr 20, 2026
- CISA deadline
- 3 days
- CVSS severity
- 5.4 (medium)
Rank 23Cisco IOS / IOS XE
CVE-2023-20198Cisco IOS XE Web UI Privilege Escalation Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Oct 16, 2023
- CISA deadline
- 4 days
- CVSS severity
- 10.0 (critical)
Rank 24MRLG (Multi-Router Looking Glass) Multi-Router Looking Glass (MRLG)
CVE-2014-3931CVE from 2014, added in 2025
Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jul 7, 2025
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 25Aviatrix Controller
CVE-2024-50603Aviatrix Controllers OS Command Injection Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jan 16, 2025
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 26Juniper Junos OS
CVE-2023-36845Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 13, 2023
- CISA deadline
- 4 days
- CVSS severity
- 9.8 (critical)
Rank 27Ruckus Wireless Wi-Fi access points and controllers
CVE-2023-25717Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
Added more than a year ago: ranked by severity.
- Added
- May 12, 2023
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 28MikroTik RouterOS
CVE-2018-7445CVE from 2018, added in 2022
MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Sep 8, 2022
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 29Ubiquiti airOS (airMAX)
CVE-2010-5330CVE from 2010, added in 2022
Ubiquiti AirOS Command Injection Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Apr 15, 2022
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 30Cisco IOS / IOS XE
CVE-2017-3881CVE from 2017, added in 2022
Cisco IOS and IOS XE Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 25, 2022
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 31Citrix SD-WAN
CVE-2017-6316CVE from 2017, added in 2022
Citrix Multiple Products Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 25, 2022
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 32Citrix SD-WAN
CVE-2019-12989CVE from 2019, added in 2022
Citrix SD-WAN and NetScaler SQL Injection Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 25, 2022
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 33Juniper Junos OS
CVE-2020-1631CVE from 2020, added in 2022
Juniper Junos OS Path Traversal Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 25, 2022
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 34Cisco IOS / IOS XE
CVE-2017-12240CVE from 2017, added in 2022
Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 35Cisco IOS / IOS XE
CVE-2018-0151CVE from 2018, added in 2022
Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 9.8 (critical)
Rank 36Aviatrix Controller
CVE-2021-40870Aviatrix Controller Unrestricted Upload of File
Added more than a year ago: ranked by severity.
- Added
- Jan 18, 2022
- CISA deadline
- 14 days
- CVSS severity
- 9.8 (critical)
Rank 37Cisco IOS / IOS XE
CVE-2018-0171CVE from 2018, added in 2021
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 9.8 (critical)
Rank 38NETGEAR Switches (GS, JGS, MS)
CVE-2020-26919Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 9.8 (critical)
Rank 39MikroTik RouterOS
CVE-2018-14847CVE from 2018, added in 2021
MikroTik Router OS Directory Traversal Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Dec 1, 2021
- CISA deadline
- 182 days
- CVSS severity
- 9.1 (critical)
Rank 40Cisco IOS / IOS XE
CVE-2017-6742CVE from 2017, added in 2023
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Apr 19, 2023
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Rank 41Citrix SD-WAN
CVE-2019-12991CVE from 2019, added in 2022
Citrix SD-WAN and NetScaler Command Injection Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 25, 2022
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Rank 42Cisco IOS / IOS XE
CVE-2017-6736CVE from 2017, added in 2022
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Rank 43Cisco IOS / IOS XE
CVE-2017-6737CVE from 2017, added in 2022
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Rank 44Cisco IOS / IOS XE
CVE-2017-6738CVE from 2017, added in 2022
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Rank 45Cisco IOS / IOS XE
CVE-2017-6739CVE from 2017, added in 2022
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Rank 46Cisco IOS / IOS XE
CVE-2017-6740CVE from 2017, added in 2022
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Rank 47Cisco IOS / IOS XE
CVE-2017-6743CVE from 2017, added in 2022
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Rank 48Cisco IOS / IOS XE
CVE-2017-6744CVE from 2017, added in 2022
Cisco IOS Software SNMP Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Rank 49Cisco IOS / IOS XE / IOS XR
CVE-2018-0167CVE from 2018, added in 2022
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 8.8 (high)
Rank 50Cisco IOS XR
CVE-2020-3118Cisco IOS XR Software Discovery Protocol Format String Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 8.8 (high)
Rank 51Cisco IOS / IOS XE
CVE-2018-0155CVE from 2018, added in 2022
Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 8.6 (high)
Rank 52Cisco IOS / IOS XE
CVE-2018-0158CVE from 2018, added in 2022
Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 8.6 (high)
Rank 53Cisco IOS / IOS XE
CVE-2018-0172CVE from 2018, added in 2022
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 8.6 (high)
Rank 54Cisco IOS / IOS XE
CVE-2018-0173CVE from 2018, added in 2022
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 8.6 (high)
Rank 55Cisco IOS / IOS XE
CVE-2018-0174CVE from 2018, added in 2022
Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 8.6 (high)
Rank 56Cisco IOS XR
CVE-2020-3566Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 8.6 (high)
Rank 57Cisco IOS XR
CVE-2020-3569Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 8.6 (high)
Rank 58VMware (Broadcom) SD-WAN (VeloCloud)
CVE-2018-6961CVE from 2018, added in 2022
VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 25, 2022
- CISA deadline
- 21 days
- CVSS severity
- 8.1 (high)
Rank 59Cisco IOS / IOS XE / IOS XR
CVE-2018-0175CVE from 2018, added in 2022
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 8.0 (high)
Rank 60Cisco IOS / IOS XE / IOS XR
CVE-2016-6415CVE from 2016, added in 2023
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
Added more than a year ago: ranked by severity.
- Added
- May 19, 2023
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Rank 61Cisco IOS XR
CVE-2010-3035CVE from 2010, added in 2022
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 25, 2022
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Rank 62Cisco IOS / IOS XE
CVE-2017-12231CVE from 2017, added in 2022
Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Rank 63Cisco IOS / IOS XE
CVE-2017-12233CVE from 2017, added in 2022
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Rank 64Cisco IOS / IOS XE
CVE-2017-12234CVE from 2017, added in 2022
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Rank 65Cisco IOS / IOS XE
CVE-2017-12235CVE from 2017, added in 2022
Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Rank 66Cisco IOS / IOS XE
CVE-2017-12237CVE from 2017, added in 2022
Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Rank 67Cisco IOS / IOS XE
CVE-2017-6627CVE from 2017, added in 2022
Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Rank 68Cisco IOS / IOS XE
CVE-2018-0154CVE from 2018, added in 2022
Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 7.5 (high)
Rank 69Cisco IOS / IOS XE
CVE-2018-0156CVE from 2018, added in 2022
Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 7.5 (high)
Rank 70Cisco IOS / IOS XE
CVE-2018-0159CVE from 2018, added in 2022
Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 7.5 (high)
Rank 71Versa Networks Director
CVE-2024-39717Versa Director Dangerous File Type Upload Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Aug 23, 2024
- CISA deadline
- 21 days
- CVSS severity
- 7.2 (high)
Rank 72Cisco IOS / IOS XE
CVE-2023-20273Cisco IOS XE Web UI Command Injection Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Oct 23, 2023
- CISA deadline
- 4 days
- CVSS severity
- 7.2 (high)
Rank 73Cisco NX-OS
CVE-2024-20399Cisco NX-OS Command Injection Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jul 2, 2024
- CISA deadline
- 21 days
- CVSS severity
- 6.7 (medium)
Rank 74Cisco IOS / IOS XE
CVE-2023-20109Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Oct 10, 2023
- CISA deadline
- 21 days
- CVSS severity
- 6.6 (medium)
Rank 75Cisco IOS XR
CVE-2022-20821Cisco IOS XR Open Port Vulnerability
Added more than a year ago: ranked by severity.
- Added
- May 23, 2022
- CISA deadline
- 21 days
- CVSS severity
- 6.5 (medium)
Rank 76Cisco IOS / IOS XE
CVE-2017-12232CVE from 2017, added in 2022
Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 6.5 (medium)
Rank 77Cisco IOS / IOS XE
CVE-2017-12238CVE from 2017, added in 2022
Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 6.5 (medium)
Rank 78Cisco IOS / IOS XE
CVE-2017-6663CVE from 2017, added in 2022
Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 6.5 (medium)
Rank 79Cisco IOS / IOS XE
CVE-2018-0161CVE from 2018, added in 2022
Cisco IOS Software Resource Management Errors Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 6.3 (medium)
Rank 80Cisco IOS / IOS XE
CVE-2004-1464CVE from 2004, added in 2023
Cisco IOS Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- May 19, 2023
- CISA deadline
- 21 days
- CVSS severity
- 5.9 (medium)
Rank 81Cisco IOS XR
CVE-2009-2055CVE from 2009, added in 2022
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 25, 2022
- CISA deadline
- 21 days
- CVSS severity
- 5.9 (medium)
Rank 82Cisco IOS / IOS XE
CVE-2017-12319CVE from 2017, added in 2022
Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 21 days
- CVSS severity
- 5.9 (medium)
Rank 83Cisco IOS / IOS XE
CVE-2018-0179CVE from 2018, added in 2022
Cisco IOS Software Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 5.9 (medium)
Rank 84Cisco IOS / IOS XE
CVE-2018-0180CVE from 2018, added in 2022
Cisco IOS Software Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 5.9 (medium)
Rank 85Juniper Junos OS
CVE-2023-36844Juniper Junos OS EX Series PHP External Variable Modification Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 13, 2023
- CISA deadline
- 4 days
- CVSS severity
- 5.3 (medium)
Rank 86Juniper Junos OS
CVE-2023-36846Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 13, 2023
- CISA deadline
- 4 days
- CVSS severity
- 5.3 (medium)
Rank 87Juniper Junos OS
CVE-2023-36847Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 13, 2023
- CISA deadline
- 4 days
- CVSS severity
- 5.3 (medium)
Rank 88Juniper Junos OS
CVE-2023-36851Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 13, 2023
- CISA deadline
- 4 days
- CVSS severity
- 5.3 (medium)
Rank 89Juniper Junos OS
CVE-2025-21590Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 13, 2025
- CISA deadline
- 21 days
- CVSS severity
- 4.4 (medium)
Filed under another category
These 4 vulnerabilities also concern this type of product, but are counted in their main category. My radar finds them when you follow this category.
Citrix NetScaler ADC / Gateway
CVE-2019-19781RansomwareCVE from 2019, added in 2021
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 9.8 (critical)
Citrix NetScaler ADC / Gateway
CVE-2020-8193Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 6.5 (medium)
Citrix NetScaler ADC / Gateway
CVE-2020-8195Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 6.5 (medium)
Citrix NetScaler ADC / Gateway
CVE-2020-8196Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 4.3 (medium)
Follow and verify
Get new vulnerabilities in this category: RSS feed (add it to Outlook, Teams, Slack or your feed reader).
Indicative classification, based on the vendor and product names given by CISA. How products are classified.