Cisco vendor intelligence
Cisco Known Exploited Vulnerabilities
Track evidence-backed exploitation affecting Cisco products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.
- Total KEVs
- 107
- Known exploited vulnerabilities affecting Cisco products
- In CISA KEV
- 96
- Records also listed in the official catalog
- Beyond CISA KEV
- 11
- Additional exploited vulnerabilities absent from CISA KEV
- Sensor Observed
- 7
- Cisco KEVs with sensor-observed exploitation activity
The catalog gap matters for Cisco exposure
Eleven of the 107 exploited Cisco vulnerabilities tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss 10% of this vendor portfolio.
- 90%
- Covered by CISA
- 10%
- Beyond CISA
- 43
- Product families
Attested Cisco vulnerabilities
107 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.
How exploitation is verified| CVE / description | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2026-20079
Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability |
Cisco Secure Firewall Management Center (FMC) | Confirmed | In CISA | 09 Sep 2026 |
|
CVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability |
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software | Confirmed | In CISA | 11 Aug 2026 |
|
CVE-2025-20282
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability |
Cisco Identity Services Engine Software | Confirmed | Beyond CISA | 07 Aug 2026 |
|
CVE-2021-1472
Cisco Small Business RV Series Routers Vulnerabilities |
Cisco Small Business RV Series Router Firmware | Confirmed | Beyond CISA | 30 Jul 2026 |
|
CVE-2026-20316
Cisco Secure Firewall Management Center Software Static Credential Vulnerability |
Cisco Secure Firewall Management Center (FMC) | Confirmed | In CISA | 29 Jul 2026 |
|
CVE-2008-4128
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services... |
IOS | Confirmed | In CISA | 13 Jul 2026 |
|
CVE-2026-20230
Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability |
Cisco Unified Communications Manager | Confirmed | In CISA | 23 Jun 2026 |
|
CVE-2026-20262
Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability |
Cisco Catalyst SD-WAN Manager | Confirmed | In CISA | 15 Jun 2026 |
|
CVE-2026-20245
Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability |
Cisco Catalyst SD-WAN Controller, Cisco Catalyst SD-WAN Manager | Confirmed | In CISA | 05 Jun 2026 |
|
CVE-2024-20404
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on... |
Cisco Unified Contact Center Enterprise, Cisco Unified Contact Center Express, Cisco Finesse, Cisco Packaged Contact Center Enterprise | High | Beyond CISA | 01 Apr 2026 |
|
CVE-2020-16139
A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through... |
Unified IP Conference Station 7937G | High | Beyond CISA | 10 Feb 2026 |
|
CVE-2024-20440
A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This... |
Cisco Smart License Utility | High | Beyond CISA | 25 Jan 2026 |
|
CVE-2013-2678
Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive... |
Linksys E4200 | High | Beyond CISA | 23 Nov 2025 |
|
CVE-2023-20073
Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability |
Cisco Small Business RV Series Router Firmware | High | Beyond CISA | 09 Nov 2025 |
|
CVE-2020-26073
Cisco SD-WAN vManage Directory Traversal Vulnerability |
Cisco Catalyst SD-WAN Manager | High | Beyond CISA | 24 Jul 2025 |
|
CVE-2018-0127
A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an... |
RV132W ADSL2+ Wireless-N VPN Router, RV134W VDSL2 Wireless-AC VPN Router | High | Beyond CISA | 21 Jun 2025 |
|
CVE-2001-0537
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being... |
IOS | Confirmed | Beyond CISA | 21 Jun 2025 |
|
CVE-2019-1821
Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities |
Cisco Prime Infrastructure | High | Beyond CISA | 08 Jun 2025 |
|
CVE-2026-20133
A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected... |
Cisco Catalyst SD-WAN Manager | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2026-20128
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability |
Cisco Catalyst SD-WAN Manager | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2026-20122
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability |
Cisco Catalyst SD-WAN Manager | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2026-20131
Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability |
Cisco Secure Firewall Management Center (FMC) | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2026-20127
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability |
Cisco Catalyst SD-WAN Manager | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2022-20775
Cisco SD-WAN Software Privilege Escalation Vulnerability |
Cisco Catalyst SD-WAN, Cisco Catalyst SD-WAN Manager, Cisco SD-WAN vContainer, Cisco SD-WAN vEdge Cloud, Cisco SD-WAN vEdge Router | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2026-20045
Cisco Unified Communications Products Remote Code Execution Vulnerability |
Cisco Unified Communications Manager, Cisco Unified Communications Manager IM and Presence Service, Cisco Unity Connection | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-20393
Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability |
Cisco Secure Email, Cisco Secure Email and Web Manager | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-20352
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the... |
IOS, Cisco IOS XE Software, Cisco IOS XE Catalyst SD-WAN | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-20362
Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD... |
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-20333
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense... |
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-20337
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability |
Cisco Identity Services Engine Software, Cisco ISE Passive Identity Connector | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-20281
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability |
Cisco Identity Services Engine Software | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2026-20182
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability |
Cisco Catalyst SD-WAN Controller, Cisco Catalyst SD-WAN Manager | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2018-0296
A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an... |
Cisco Adaptive Security Appliance unknown | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2019-1653
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability |
Cisco Small Business RV Series Router Firmware | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-3161
Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability |
Cisco IP phone | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-3569
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities |
Cisco IOS XR Software | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-3566
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability |
Cisco IOS XR Software | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-3118
Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability |
Cisco IOS XR Software | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2018-0171
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to... |
Cisco IOS and IOS XE | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-1498
Cisco HyperFlex HX Command Injection Vulnerabilities |
Cisco HyperFlex HX Data Platform | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-1497
Cisco HyperFlex HX Command Injection Vulnerabilities |
Cisco HyperFlex HX Data Platform | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-3580
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities |
Cisco Adaptive Security Appliance (ASA) Software | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-3452
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability |
Cisco Adaptive Security Appliance (ASA) Software | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2017-12231
A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an... |
Cisco IOS | Confirmed | In CISA | 03 Mar 2022 |
|
CVE-2017-12232
A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0... |
Cisco IOS | Confirmed | In CISA | 03 Mar 2022 |
|
CVE-2017-12233
Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an... |
Cisco IOS | Confirmed | In CISA | 03 Mar 2022 |
|
CVE-2017-12234
Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an... |
Cisco IOS | Confirmed | In CISA | 03 Mar 2022 |
|
CVE-2017-12235
A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an... |
Cisco IOS | Confirmed | In CISA | 03 Mar 2022 |
|
CVE-2017-12237
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow... |
Cisco IOS and IOS XE | Confirmed | In CISA | 03 Mar 2022 |
|
CVE-2017-12238
A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow... |
Cisco IOS | Confirmed | In CISA | 03 Mar 2022 |
No Cisco vulnerabilities match this search or filter.
Showing 50 of 50 on this page (107 Cisco known exploited vulnerabilities).
Recurring weakness patterns
Input validation, restriction, and resource management errors account for 42 mapped occurrences across this Cisco KEV portfolio.
CWE-20
Improper Input Validation
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-399
Resource Management Errors
CWE-121
Stack-based Buffer Overflow
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-287
Improper Authentication