Security Digest
Cisco: known exploited vulnerabilities
36 Cisco CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-10-14 | CVE-2026-76519 | Cisco Secure Email Gateway Cisco Secure Email Gateway Relative Path Traversal Vulnerability | 2026-10-17 |
| 2026-09-30 | CVE-2026-76504 | Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | 2026-10-03 |
| 2026-09-16 | CVE-2026-76460 | Cisco Identity Services Engine Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | 2026-09-19 |
| 2026-09-14 | CVE-2026-76461 | Cisco Secure Email Gateway Cisco Secure Email Gateway SQL Injection Vulnerability | 2026-09-17 |
| 2026-09-09 | CVE-2026-20079 | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-09-12 |
| 2026-08-11 | CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | 2026-08-14 |
| 2026-07-29 | CVE-2026-20316 | Cisco Secure Firewall Management Center (FMC) Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability Ransomware | 2026-08-01 |
| 2026-07-13 | CVE-2008-4128 | Cisco IOS Cisco IOS Cross-Site Request Forgery Vulnerability | 2026-07-16 |
| 2026-06-25 | CVE-2026-20230 | Cisco Unified Communications Manager Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | 2026-06-28 |
| 2026-06-15 | CVE-2026-20262 | Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | 2026-06-29 |
| 2026-06-09 | CVE-2026-20245 | Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | 2026-06-23 |
| 2026-05-14 | CVE-2026-20182 | Cisco Catalyst SD-WAN Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 2026-05-17 |
| 2026-04-20 | CVE-2026-20133 | Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 2026-04-23 |
| 2026-04-20 | CVE-2026-20128 | Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | 2026-04-23 |
| 2026-04-20 | CVE-2026-20122 | Cisco Catalyst SD-WAN Manger Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | 2026-04-23 |
| 2026-03-19 | CVE-2026-20131 | Cisco Secure Firewall Management Center (FMC) Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability Ransomware | 2026-03-22 |
| 2026-02-25 | CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | 2026-02-27 |
| 2026-02-25 | CVE-2022-20775 | Cisco SD-WAN Cisco SD-WAN Path Traversal Vulnerability | 2026-02-27 |
| 2026-01-21 | CVE-2026-20045 | Cisco Unified Communications Manager Cisco Unified Communications Products Code Injection Vulnerability | 2026-02-11 |
| 2025-12-17 | CVE-2025-20393 | Cisco Multiple Products Cisco Multiple Products Improper Input Validation Vulnerability | 2025-12-24 |
| 2025-09-29 | CVE-2025-20352 | Cisco IOS and IOS XE Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | 2025-10-20 |
| 2025-09-25 | CVE-2025-20362 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | 2025-09-26 |
| 2025-09-25 | CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | 2025-09-26 |
| 2025-07-28 | CVE-2025-20337 | Cisco Identity Services Engine Cisco Identity Services Engine Injection Vulnerability | 2025-08-18 |
| 2025-07-28 | CVE-2025-20281 | Cisco Identity Services Engine Cisco Identity Services Engine Injection Vulnerability | 2025-08-18 |
| 2025-03-31 | CVE-2024-20439 | Cisco Smart Licensing Utility Cisco Smart Licensing Utility Static Credential Vulnerability | 2025-04-21 |
| 2025-03-03 | CVE-2023-20118 | Cisco Small Business RV Series Routers Cisco Small Business RV Series Routers Command Injection Vulnerability | 2025-03-24 |
| 2024-11-12 | CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability | 2024-12-03 |
| 2024-10-24 | CVE-2024-20481 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Denial-of-Service Vulnerability | 2024-11-14 |
| 2024-07-02 | CVE-2024-20399 | Cisco NX-OS Cisco NX-OS Command Injection Vulnerability | 2024-07-23 |
| 2024-04-24 | CVE-2024-20359 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Privilege Escalation Vulnerability | 2024-05-01 |
| 2024-04-24 | CVE-2024-20353 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Denial of Service Vulnerability | 2024-05-01 |
| 2024-02-15 | CVE-2020-3259 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Information Disclosure Vulnerability Ransomware | 2024-03-07 |
| 2023-10-23 | CVE-2023-20273 | Cisco Cisco IOS XE Web UI Cisco IOS XE Web UI Command Injection Vulnerability | 2023-10-27 |
| 2023-10-16 | CVE-2023-20198 | Cisco IOS XE Web UI Cisco IOS XE Web UI Privilege Escalation Vulnerability | 2023-10-20 |
| 2023-10-10 | CVE-2023-20109 | Cisco IOS and IOS XE Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | 2023-10-31 |