By year
99
00
01
02
03
04
05
06
07
08
09
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Exploited Cisco flaws
These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.
- CVE-2026-76519 Cisco Secure Email Gateway Relative Path TraversalExploited since Oct 14, 2026 · CVSS 9.8
- CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex EncodingExploited since Sep 30, 2026 · CVSS 9.8
- CVE-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIsExploited since Sep 16, 2026 · CVSS 10
- CVE-2026-76461 Cisco Secure Email Gateway SQL InjectionExploited since Sep 14, 2026 · CVSS 9.8
- CVE-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or ChannelExploited since Sep 9, 2026 · CVSS 10
- CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap InspectionExploited since Aug 11, 2026 · CVSS 8.6
- CVE-2026-20316 Cisco Secure Firewall Management Center Use of Hard-coded PasswordExploited since Jul 29, 2026 · ransomware · CVSS 5.3
- CVE-2008-4128 Cisco IOS Cross-Site Request ForgeryExploited since Jul 13, 2026 · CVSS 8.1
- CVE-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF)Exploited since Jun 25, 2026 · CVSS 8.6
- CVE-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path TraversalExploited since Jun 15, 2026 · CVSS 6.5
- CVE-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of OutputExploited since Jun 9, 2026 · CVSS 7.8
- CVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication BypassExploited since May 14, 2026 · CVSS 10
- CVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable FormatExploited since Apr 20, 2026 · CVSS 7.5
- CVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized ActorExploited since Apr 20, 2026 · CVSS 6.5
- CVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIsExploited since Apr 20, 2026 · CVSS 5.4
- CVE-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted DataExploited since Mar 19, 2026 · ransomware · CVSS 10
- CVE-2022-20775 Cisco SD-WAN Path TraversalExploited since Feb 25, 2026 · CVSS 7.8
- CVE-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication BypassExploited since Feb 25, 2026 · CVSS 10
- CVE-2026-20045 Cisco Unified Communications Products Code InjectionExploited since Jan 21, 2026 · CVSS 8.2
- CVE-2025-20393 Cisco Multiple Products Improper Input ValidationExploited since Dec 17, 2025 · CVSS 10
- CVE-2025-20352 Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code ExecutionExploited since Sep 29, 2025 · CVSS 7.7
- CVE-2025-20362 Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing AuthorizationExploited since Sep 25, 2025 · CVSS 6.5
- CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer OverflowExploited since Sep 25, 2025 · CVSS 9.9
- CVE-2025-20337 Cisco Identity Services Engine InjectionExploited since Jul 28, 2025 · CVSS 10
- CVE-2025-20281 Cisco Identity Services Engine InjectionExploited since Jul 28, 2025 · CVSS 10
- CVE-2024-20439 Cisco Smart Licensing Utility Static CredentialExploited since Mar 31, 2025 · CVSS 9.8
- CVE-2023-20118 Cisco Small Business RV Series Routers Command InjectionExploited since Mar 3, 2025 · CVSS 6.5
- CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS)Exploited since Nov 12, 2024 · CVSS 6.1
- CVE-2024-20481 Cisco ASA and FTD Denial-of-ServiceExploited since Oct 24, 2024 · CVSS 5.8
- CVE-2024-20399 Cisco NX-OS Command InjectionExploited since Jul 2, 2024 · CVSS 6
- CVE-2024-20353 Cisco ASA and FTD Denial of ServiceExploited since Apr 24, 2024 · CVSS 8.6
- CVE-2024-20359 Cisco ASA and FTD Privilege EscalationExploited since Apr 24, 2024 · CVSS 6
- CVE-2020-3259 Cisco ASA and FTD Information DisclosureExploited since Feb 15, 2024 · ransomware · CVSS 7.5
- CVE-2023-20273 Cisco IOS XE Web UI Command InjectionExploited since Oct 23, 2023 · CVSS 7.2
- CVE-2023-20198 Cisco IOS XE Web UI Privilege EscalationExploited since Oct 16, 2023 · CVSS 10
- CVE-2023-20109 Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds WriteExploited since Oct 10, 2023 · CVSS 6.6
- CVE-2023-20269 Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized AccessExploited since Sep 13, 2023 · ransomware · CVSS 5
- CVE-2016-6415 Cisco IOS, IOS XR, and IOS XE IKEv1 Information DisclosureExploited since May 19, 2023 · CVSS 7.5
- CVE-2004-1464 Cisco IOS Denial-of-ServiceExploited since May 19, 2023 · CVSS 5.9
- CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code ExecutionExploited since Apr 19, 2023 · CVSS 8.8
- CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search PathExploited since Oct 24, 2022 · ransomware · CVSS 6.5
- CVE-2020-3433 Cisco AnyConnect Secure Mobility Client for Windows DLL HijackingExploited since Oct 24, 2022 · ransomware · CVSS 7.8
- CVE-2019-15271 Cisco RV Series Routers Deserialization of Untrusted DataExploited since Jun 8, 2022 · CVSS 8.8
- CVE-2016-6366 Cisco Adaptive Security Appliance (ASA) SNMP Buffer OverflowExploited since May 24, 2022 · CVSS 8.8
- CVE-2016-6367 Cisco Adaptive Security Appliance (ASA) CLI Remote Code ExecutionExploited since May 24, 2022 · CVSS 7.8
- CVE-2022-20821 Cisco IOS XR Open PortExploited since May 23, 2022 · CVSS 6.5
- CVE-2015-0666 Cisco Prime Data Center Network Manager (DCNM) Directory TraversalExploited since Mar 25, 2022 · CVSS 7.5
- CVE-2010-3035 Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-ServiceExploited since Mar 25, 2022 · CVSS 7.5
- CVE-2018-0125 Cisco VPN Routers Remote Code ExecutionExploited since Mar 25, 2022 · CVSS 9.8
- CVE-2018-0147 Cisco Secure Access Control System Java DeserializationExploited since Mar 25, 2022 · CVSS 9.8
- CVE-2017-3881 Cisco IOS and IOS XE Remote Code ExecutionExploited since Mar 25, 2022 · CVSS 9.8
- CVE-2009-2055 Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-ServiceExploited since Mar 25, 2022 · CVSS 5.9
- CVE-2017-6738 Cisco IOS and IOS XE Software SNMP Remote Code ExecutionExploited since Mar 3, 2022 · CVSS 8.8
- CVE-2022-20708 Cisco Small Business RV Series Routers Stack-based Buffer OverflowExploited since Mar 3, 2022 · CVSS 10
- CVE-2022-20703 Cisco Small Business RV Series Routers Stack-based Buffer OverflowExploited since Mar 3, 2022 · CVSS 10
- CVE-2022-20701 Cisco Small Business RV Series Routers Stack-based Buffer OverflowExploited since Mar 3, 2022 · CVSS 10
- CVE-2022-20700 Cisco Small Business RV Series Routers Stack-based Buffer OverflowExploited since Mar 3, 2022 · CVSS 10
- CVE-2022-20699 Cisco Small Business RV Series Routers Stack-based Buffer OverflowExploited since Mar 3, 2022 · CVSS 10
- CVE-2019-1652 Cisco Small Business Routers Improper Input ValidationExploited since Mar 3, 2022 · CVSS 7.2
- CVE-2018-0180 Cisco IOS Software Denial-of-ServiceExploited since Mar 3, 2022 · CVSS 5.9
Latest high and critical flaws
- CVE-2026-76418 A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat DefensHigh 8.6 · Oct 28, 2026
- CVE-2026-76524 A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to exeHigh 7.8 · Oct 21, 2026
- CVE-2026-76505 A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers asHigh 7.5 · Oct 21, 2026
- CVE-2026-76496 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehenHigh 7 · Oct 21, 2026
- CVE-2026-76495 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehenHigh 7.8 · Oct 21, 2026
- CVE-2026-76494 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehenHigh 7.8 · Oct 21, 2026
- CVE-2026-76493 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehenHigh 7.5 · Oct 21, 2026
- CVE-2026-76492 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehenHigh 7.5 · Oct 21, 2026
- CVE-2026-76491 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehenHigh 7.5 · Oct 21, 2026
- CVE-2026-76490 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehenHigh 8.6 · Oct 21, 2026
- CVE-2026-76481 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration DeplHigh 7.5 · Oct 21, 2026
- CVE-2026-76479 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration DeplHigh 7.8 · Oct 21, 2026
- CVE-2026-76478 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration DeplHigh 8.8 · Oct 21, 2026
- CVE-2026-76477 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration DeplHigh 8.8 · Oct 21, 2026
- CVE-2026-76476 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration DeplHigh 8.8 · Oct 21, 2026
- CVE-2026-76475 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration DeplCritical 9.3 · Oct 21, 2026
- CVE-2026-76474 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration DeplCritical 9.8 · Oct 21, 2026
- CVE-2026-76473 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration DeplCritical 9.8 · Oct 21, 2026
- CVE-2026-76466 A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco ExpresCritical 9.8 · Oct 21, 2026
- CVE-2026-20356 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a cHigh 7.5 · Oct 21, 2026
- CVE-2026-20291 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a cHigh 7.8 · Oct 21, 2026
- CVE-2026-20236 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a cHigh 7.5 · Oct 21, 2026
- CVE-2026-20043 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a cCritical 9 · Oct 21, 2026
- CVE-2026-76519 Cisco Secure Email Gateway Relative Path TraversalExploited · Critical 9.8 · Oct 14, 2026
- CVE-2026-76501 A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could Critical 9.8 · Oct 7, 2026
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.