Cisco — security advisories

100 advisories47 exploitedlatest 2026-07-08⚡ RSS feed

Tracked Cisco products:

Unified Communications Manager Catalyst SD-WAN Controller Catalyst SD-WAN Manager Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, Catalyst SD-WAN Validator Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Catalyst SD-WAN Controller & Manager IOS Software and IOS XE Software Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC)IOS and IOS XE Software SD-WAN CLI Catalyst SD-WAN Controller and Manager Catalyst SD-WAN IOS and XE Software Small Business RV Series Routers Unified Communications Products Secure Email Gateway, Secure Email, AsyncOS Software, Web Manager IOS Software IOS and IOS XE Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)Identity Services Engine Catalyst Switches Smart Licensing Utility Adaptive Security Appliance (ASA)Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)NX-OS Small Business Routers Catalyst 6800 Series Switches IOS XE Software IOS XE Adaptive Security Appliance

⚡ Watch Cisco

Get an email when a new Cisco advisory drops — max one per day, one-click unsubscribe.

Cisco Advance Notification for Publication of July 15, 2026, Security Advisories

unknowncisco-psirt2026-07-08

Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

criticalCVE-2026-20181 CVE-2026-20190cisco-psirt2026-07-06

Cisco Catalyst Center Arbitrary File Read Vulnerability

highCVE-2026-20191cisco-psirt2026-07-06

[UPDATE] [medium] Cisco Catalyst Center: Vulnerability Allows Information Disclosure

mediumCVE-2026-20191cert-bund2026-07-03

ClamAV Vulnerabilities Affecting Cisco Products: July 2026

highCVE-2026-20213 CVE-2026-20214 CVE-2026-20215 CVE-2026-20216cisco-psirt2026-07-02

Cisco security advisory (AV26-646)

unknowncccs2026-07-02

NCSC-2026-0218 [1.00] [M/H] Vulnerability fixed in Cisco Catalyst Center

unknownCVE-2026-20191ncsc-nl2026-07-02

Multiple vulnerabilities in Cisco products (July 2, 2026)

unknownCVE-2026-20216 CVE-2026-20243 CVE-2026-20215 CVE-2026-20213cert-fr-avis2026-07-02

Cisco Advance Notification for Publication of July 1, 2026, Security Advisories

highCVE-2026-20191 CVE-2026-20216 CVE-2026-20213 CVE-2026-20214cisco-psirt2026-07-01

Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

criticalexploitedCVE-2026-20230cisco-psirt2026-07-01

Cisco security advisory (AV26-547) – Update 1

criticalexploitedCVE-2026-20230cccs2026-06-25

Cisco Finesse Remote File Inclusion Vulnerability

mediumCVE-2026-20175cisco-psirt2026-06-25

CVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

criticalexploitedCVE-2026-20230cisa-kev2026-06-25

Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities

mediumCVE-2026-20055 CVE-2026-20109cisco-psirt2026-06-22

NCSC-2026-0208 [1.00] [M/H] Vulnerabilities fixed in Cisco Identity Services Engine

unknownCVE-2026-20181 CVE-2026-20190ncsc-nl2026-06-19

Cisco security advisory (AV26-613)

criticalcccs2026-06-17

Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability

mediumCVE-2026-20246cisco-psirt2026-06-17

Cisco Crosswork Network Controller Server-Side Template Injection Vulnerability

mediumCVE-2026-20220cisco-psirt2026-06-17

Cisco Webex App Open Redirect Vulnerability

mediumCVE-2026-20178cisco-psirt2026-06-17

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

criticalexploitedCVE-2026-20127cisco-psirt2026-06-16

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

highexploitedCVE-2026-20182cisco-psirt2026-06-16

NCSC-2026-0199 [1.00] [M/H] Vulnerability fixed in Cisco Catalyst SD-WAN Manager

unknownCVE-2026-20262ncsc-nl2026-06-16

Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

mediumexploitedCVE-2026-20262cisco-psirt2026-06-15

CVE-2026-20262: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

criticalexploitedCVE-2026-20262cisa-kev2026-06-15

Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability

unknownexploitedCVE-2026-20182 CVE-2026-20127 CVE-2026-20245cisco-psirt2026-06-12

CVE-2026-20245: Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

criticalexploitedCVE-2026-20245cisa-kev2026-06-09

Cisco Webex Meetings Cross-Site Scripting Vulnerability

mediumCVE-2026-20233cisco-psirt2026-06-03

Cisco ThousandEyes Enterprise Agent BrowserBot Command Injection Vulnerability

mediumCVE-2026-20206cisco-psirt2026-05-20

Cisco Nexus 3000 and 9000 Series Switches Border Gateway Protocol Denial of Service Vulnerability

mediumCVE-2026-20171cisco-psirt2026-05-20

Cisco Secure Workload Unauthorized API Access Vulnerability

criticalCVE-2026-20223cisco-psirt2026-05-20

Cisco ThousandEyes Virtual Appliance Authenticated Remote Code Execution Vulnerability

mediumCVE-2026-20199cisco-psirt2026-05-20

Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense

unknownexploitedCVE-2025-20333 CVE-2025-20362cisco-psirt2026-05-19

Cisco Catalyst SD-WAN Manager Vulnerabilities

criticalCVE-2026-20209 CVE-2026-20210 CVE-2026-20224cisco-psirt2026-05-14

Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory

unknownCVE-2026-20188cisco-psirt2026-05-14

CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

criticalexploitedCVE-2026-20182cisa-kev2026-05-14

Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities

highCVE-2026-20034 CVE-2026-20035cisco-psirt2026-05-06

Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability

mediumCVE-2026-20172cisco-psirt2026-05-06

Cisco IoT Field Network Director Vulnerabilities

highCVE-2026-20167 CVE-2026-20168 CVE-2026-20169cisco-psirt2026-05-06

Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vulnerability

highCVE-2026-20185cisco-psirt2026-05-06

Cisco Prime Infrastructure Information Disclosure Vulnerability

mediumCVE-2026-20189cisco-psirt2026-05-06

Cisco Slido Insecure Direct Object Reference Vulnerability

mediumCVE-2026-20219cisco-psirt2026-05-06

Cisco Identity Services Engine Authentication Bypass Vulnerabilities

mediumCVE-2026-20193 CVE-2026-20195cisco-psirt2026-05-06

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities

mediumCVE-2025-20204 CVE-2025-20205cisco-psirt2026-05-05

Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities

criticalCVE-2026-20147 CVE-2026-20148cisco-psirt2026-04-28

Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability

highCVE-2023-20185cisco-psirt2026-04-24

Cisco Integrated Management Controller Cross-Site Scripting Vulnerabilities

mediumCVE-2026-20085 CVE-2026-20087 CVE-2026-20088 CVE-2026-20089cisco-psirt2026-04-22

Cisco Integrated Management Controller Command Injection and Remote Code Execution Vulnerabilities

highCVE-2026-20094 CVE-2026-20095 CVE-2026-20096 CVE-2026-20097cisco-psirt2026-04-22

Cisco Catalyst SD-WAN Vulnerabilities

criticalexploitedCVE-2026-20122 CVE-2026-20126 CVE-2026-20128 CVE-2026-20129cisco-psirt2026-04-22

CVE-2026-20133: Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

criticalexploitedCVE-2026-20133cisa-kev2026-04-20

CVE-2026-20122: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

criticalexploitedCVE-2026-20122cisa-kev2026-04-20

CVE-2026-20128: Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

criticalexploitedCVE-2026-20128cisa-kev2026-04-20

Cisco Webex Services Certificate Validation Vulnerability

criticalCVE-2026-20184cisco-psirt2026-04-16

Cisco Secure Web Appliance Authentication Bypass Vulnerability

mediumCVE-2026-20152cisco-psirt2026-04-16

Cisco Webex Contact Center Cross-Site Scripting Vulnerability

mediumCVE-2026-20170cisco-psirt2026-04-15

Cisco ThousandEyes Enterprise Agent Arbitrary File Overwrite Vulnerability

mediumCVE-2026-20161cisco-psirt2026-04-15

Cisco Unity Connection Arbitrary File Download Vulnerabilities

mediumCVE-2026-20078 CVE-2026-20081cisco-psirt2026-04-15

Cisco Unity Connection Cross-Site Scripting, Open Redirect, and SQL Injection Vulnerabilities

mediumCVE-2026-20059 CVE-2026-20060 CVE-2026-20061cisco-psirt2026-04-15

Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities

mediumCVE-2026-20132cisco-psirt2026-04-15

Cisco Identity Services Engine Remote Code Execution Vulnerabilities

criticalCVE-2026-20180 CVE-2026-20186cisco-psirt2026-04-15

Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability

mediumCVE-2026-20136cisco-psirt2026-04-15

Cisco IOS XE Software Denial of Service Vulnerability

mediumCVE-2026-20110cisco-psirt2026-04-02

Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability

highCVE-2026-20151cisco-psirt2026-04-01

Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability

mediumCVE-2026-20174cisco-psirt2026-04-01

Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability

criticalCVE-2026-20160cisco-psirt2026-04-01

Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability

highCVE-2026-20155cisco-psirt2026-04-01

Cisco Integrated Management Controller Authentication Bypass Vulnerability

criticalCVE-2026-20093cisco-psirt2026-04-01

CVE-2026-20131: Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2026-20131cisa-kev2026-03-19

2026-002: Multiple Vulnerabilities in Cisco Products

criticalexploitedCVE-2026-20127cert-eu2026-02-26

CVE-2026-20127: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

criticalexploitedCVE-2026-20127cisa-kev2026-02-25

CVE-2022-20775: Cisco SD-WAN Path Traversal Vulnerability

criticalexploitedCVE-2022-20775cisa-kev2026-02-25

[Update] Vulnerability in Cisco Catalyst SD-WAN (February 25, 2026)

unknownexploitedCVE-2026-20127cert-fr-alerte2026-02-25

CVE-2026-20045: Cisco Unified Communications Products Code Injection Vulnerability

criticalexploitedCVE-2026-20045cisa-kev2026-01-21

2025-042: Critical Vulnerability in Cisco Secure Email and Web Manager

criticalCVE-2025-20393cert-eu2025-12-18

CVE-2025-20393: Cisco Multiple Products Improper Input Validation Vulnerability

criticalexploitedCVE-2025-20393cisa-kev2025-12-17

CVE-2025-20352: Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

criticalexploitedCVE-2025-20352cisa-kev2025-09-29

CVE-2025-20362: Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

criticalexploitedCVE-2025-20362cisa-kev2025-09-25

CVE-2025-20333: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

criticalexploitedCVE-2025-20333cisa-kev2025-09-25

[Update] Multiple vulnerabilities in Cisco ASA and FTD (September 25, 2025)

unknownCVE-2025-20333 CVE-2025-20362cert-fr-alerte2025-09-25

CVE-2025-20281: Cisco Identity Services Engine Injection Vulnerability

criticalexploitedCVE-2025-20281cisa-kev2025-07-28

CVE-2025-20337: Cisco Identity Services Engine Injection Vulnerability

criticalexploitedCVE-2025-20337cisa-kev2025-07-28

CVE-2024-20439: Cisco Smart Licensing Utility Static Credential Vulnerability

criticalexploitedCVE-2024-20439cisa-kev2025-03-31

CVE-2023-20118: Cisco Small Business RV Series Routers Command Injection Vulnerability

criticalexploitedCVE-2023-20118cisa-kev2025-03-03

CVE-2014-2120: Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

criticalexploitedCVE-2014-2120cisa-kev2024-11-12

CVE-2024-20481: Cisco ASA and FTD Denial-of-Service Vulnerability

criticalexploitedCVE-2024-20481cisa-kev2024-10-24

CVE-2024-20399: Cisco NX-OS Command Injection Vulnerability

criticalexploitedCVE-2024-20399cisa-kev2024-07-02

Multiple vulnerabilities in Cisco products (April 25, 2024)

unknownexploitedCVE-2024-20353 CVE-2024-20359cert-fr-alerte2024-04-25

CVE-2024-20353: Cisco ASA and FTD Denial of Service Vulnerability

criticalexploitedCVE-2024-20353cisa-kev2024-04-24

CVE-2024-20359: Cisco ASA and FTD Privilege Escalation Vulnerability

criticalexploitedCVE-2024-20359cisa-kev2024-04-24

CVE-2020-3259: Cisco ASA and FTD Information Disclosure Vulnerability

criticalexploitedCVE-2020-3259cisa-kev2024-02-15

CVE-2023-20273: Cisco IOS XE Web UI Command Injection Vulnerability

criticalexploitedCVE-2023-20273cisa-kev2023-10-23

[Update] Multiple vulnerabilities in Cisco IOS XE (October 17, 2023)

unknownexploitedCVE-2023-20198cert-fr-alerte2023-10-17

CVE-2023-20198: Cisco IOS XE Web UI Privilege Escalation Vulnerability

criticalexploitedCVE-2023-20198cisa-kev2023-10-16

CVE-2023-20109: Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

criticalexploitedCVE-2023-20109cisa-kev2023-10-10

CVE-2023-20269: Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

criticalexploitedCVE-2023-20269cisa-kev2023-09-13

CVE-2016-6415: Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

criticalexploitedCVE-2016-6415cisa-kev2023-05-19

CVE-2004-1464: Cisco IOS Denial-of-Service Vulnerability

criticalexploitedCVE-2004-1464cisa-kev2023-05-19

CVE-2017-6742: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

criticalexploitedCVE-2017-6742cisa-kev2023-04-19

CVE-2020-3153: Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

criticalexploitedCVE-2020-3153cisa-kev2022-10-24

CVE-2020-3433: Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

criticalexploitedCVE-2020-3433cisa-kev2022-10-24

CVE-2019-15271: Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2019-15271cisa-kev2022-06-08