--- title: "Cisco: known exploited vulnerabilities" url: https://erroneo.us/security/vendor/cisco/ description: "Every Cisco vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (36), newest first, with due dates and fixes." type: vendor section: "Security Digest" date_modified: 2026-10-14 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Cisco: known exploited vulnerabilities - 2026-10-14 [CVE-2026-76519](https://erroneo.us/security/cve/CVE-2026-76519/index.md) Cisco Secure Email Gateway: Cisco Secure Email Gateway Relative Path Traversal Vulnerability (due 2026-10-17; ransomware: Unknown) - 2026-09-30 [CVE-2026-76504](https://erroneo.us/security/cve/CVE-2026-76504/index.md) Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability (due 2026-10-03; ransomware: Unknown) - 2026-09-16 [CVE-2026-76460](https://erroneo.us/security/cve/CVE-2026-76460/index.md) Cisco Identity Services Engine: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability (due 2026-09-19; ransomware: Unknown) - 2026-09-14 [CVE-2026-76461](https://erroneo.us/security/cve/CVE-2026-76461/index.md) Cisco Secure Email Gateway: Cisco Secure Email Gateway SQL Injection Vulnerability (due 2026-09-17; ransomware: Unknown) - 2026-09-09 [CVE-2026-20079](https://erroneo.us/security/cve/CVE-2026-20079/index.md) Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability (due 2026-09-12; ransomware: Unknown) - 2026-08-11 [CVE-2026-20349](https://erroneo.us/security/cve/CVE-2026-20349/index.md) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) : Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability (due 2026-08-14; ransomware: Unknown) - 2026-07-29 [CVE-2026-20316](https://erroneo.us/security/cve/CVE-2026-20316/index.md) Cisco Secure Firewall Management Center (FMC): Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability (due 2026-08-01; ransomware: Known) - 2026-07-13 [CVE-2008-4128](https://erroneo.us/security/cve/CVE-2008-4128/index.md) Cisco IOS: Cisco IOS Cross-Site Request Forgery Vulnerability (due 2026-07-16; ransomware: Unknown) - 2026-06-25 [CVE-2026-20230](https://erroneo.us/security/cve/CVE-2026-20230/index.md) Cisco Unified Communications Manager: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability (due 2026-06-28; ransomware: Unknown) - 2026-06-15 [CVE-2026-20262](https://erroneo.us/security/cve/CVE-2026-20262/index.md) Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability (due 2026-06-29; ransomware: Unknown) - 2026-06-09 [CVE-2026-20245](https://erroneo.us/security/cve/CVE-2026-20245/index.md) Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability (due 2026-06-23; ransomware: Unknown) - 2026-05-14 [CVE-2026-20182](https://erroneo.us/security/cve/CVE-2026-20182/index.md) Cisco Catalyst SD-WAN: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability (due 2026-05-17; ransomware: Unknown) - 2026-04-20 [CVE-2026-20133](https://erroneo.us/security/cve/CVE-2026-20133/index.md) Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (due 2026-04-23; ransomware: Unknown) - 2026-04-20 [CVE-2026-20128](https://erroneo.us/security/cve/CVE-2026-20128/index.md) Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability (due 2026-04-23; ransomware: Unknown) - 2026-04-20 [CVE-2026-20122](https://erroneo.us/security/cve/CVE-2026-20122/index.md) Cisco Catalyst SD-WAN Manger: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability (due 2026-04-23; ransomware: Unknown) - 2026-03-19 [CVE-2026-20131](https://erroneo.us/security/cve/CVE-2026-20131/index.md) Cisco Secure Firewall Management Center (FMC): Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability (due 2026-03-22; ransomware: Known) - 2026-02-25 [CVE-2026-20127](https://erroneo.us/security/cve/CVE-2026-20127/index.md) Cisco Catalyst SD-WAN Controller and Manager: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability (due 2026-02-27; ransomware: Unknown) - 2026-02-25 [CVE-2022-20775](https://erroneo.us/security/cve/CVE-2022-20775/index.md) Cisco SD-WAN: Cisco SD-WAN Path Traversal Vulnerability (due 2026-02-27; ransomware: Unknown) - 2026-01-21 [CVE-2026-20045](https://erroneo.us/security/cve/CVE-2026-20045/index.md) Cisco Unified Communications Manager: Cisco Unified Communications Products Code Injection Vulnerability (due 2026-02-11; ransomware: Unknown) - 2025-12-17 [CVE-2025-20393](https://erroneo.us/security/cve/CVE-2025-20393/index.md) Cisco Multiple Products: Cisco Multiple Products Improper Input Validation Vulnerability (due 2025-12-24; ransomware: Unknown) - 2025-09-29 [CVE-2025-20352](https://erroneo.us/security/cve/CVE-2025-20352/index.md) Cisco IOS and IOS XE: Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability (due 2025-10-20; ransomware: Unknown) - 2025-09-25 [CVE-2025-20362](https://erroneo.us/security/cve/CVE-2025-20362/index.md) Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense: Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability (due 2025-09-26; ransomware: Unknown) - 2025-09-25 [CVE-2025-20333](https://erroneo.us/security/cve/CVE-2025-20333/index.md) Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability (due 2025-09-26; ransomware: Unknown) - 2025-07-28 [CVE-2025-20337](https://erroneo.us/security/cve/CVE-2025-20337/index.md) Cisco Identity Services Engine: Cisco Identity Services Engine Injection Vulnerability (due 2025-08-18; ransomware: Unknown) - 2025-07-28 [CVE-2025-20281](https://erroneo.us/security/cve/CVE-2025-20281/index.md) Cisco Identity Services Engine: Cisco Identity Services Engine Injection Vulnerability (due 2025-08-18; ransomware: Unknown) - 2025-03-31 [CVE-2024-20439](https://erroneo.us/security/cve/CVE-2024-20439/index.md) Cisco Smart Licensing Utility: Cisco Smart Licensing Utility Static Credential Vulnerability (due 2025-04-21; ransomware: Unknown) - 2025-03-03 [CVE-2023-20118](https://erroneo.us/security/cve/CVE-2023-20118/index.md) Cisco Small Business RV Series Routers: Cisco Small Business RV Series Routers Command Injection Vulnerability (due 2025-03-24; ransomware: Unknown) - 2024-11-12 [CVE-2014-2120](https://erroneo.us/security/cve/CVE-2014-2120/index.md) Cisco Adaptive Security Appliance (ASA): Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability (due 2024-12-03; ransomware: Unknown) - 2024-10-24 [CVE-2024-20481](https://erroneo.us/security/cve/CVE-2024-20481/index.md) Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD): Cisco ASA and FTD Denial-of-Service Vulnerability (due 2024-11-14; ransomware: Unknown) - 2024-07-02 [CVE-2024-20399](https://erroneo.us/security/cve/CVE-2024-20399/index.md) Cisco NX-OS: Cisco NX-OS Command Injection Vulnerability (due 2024-07-23; ransomware: Unknown) - 2024-04-24 [CVE-2024-20359](https://erroneo.us/security/cve/CVE-2024-20359/index.md) Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD): Cisco ASA and FTD Privilege Escalation Vulnerability (due 2024-05-01; ransomware: Unknown) - 2024-04-24 [CVE-2024-20353](https://erroneo.us/security/cve/CVE-2024-20353/index.md) Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD): Cisco ASA and FTD Denial of Service Vulnerability (due 2024-05-01; ransomware: Unknown) - 2024-02-15 [CVE-2020-3259](https://erroneo.us/security/cve/CVE-2020-3259/index.md) Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD): Cisco ASA and FTD Information Disclosure Vulnerability (due 2024-03-07; ransomware: Known) - 2023-10-23 [CVE-2023-20273](https://erroneo.us/security/cve/CVE-2023-20273/index.md) Cisco Cisco IOS XE Web UI: Cisco IOS XE Web UI Command Injection Vulnerability (due 2023-10-27; ransomware: Unknown) - 2023-10-16 [CVE-2023-20198](https://erroneo.us/security/cve/CVE-2023-20198/index.md) Cisco IOS XE Web UI: Cisco IOS XE Web UI Privilege Escalation Vulnerability (due 2023-10-20; ransomware: Unknown) - 2023-10-10 [CVE-2023-20109](https://erroneo.us/security/cve/CVE-2023-20109/index.md) Cisco IOS and IOS XE: Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability (due 2023-10-31; ransomware: Unknown) --- Source page: https://erroneo.us/security/vendor/cisco/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt