Cisco Known Exploited Vulnerabilities
Evidence-backed KEV intelligence for Cisco products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.
Total KEVs
103
In CISA KEV
94
Beyond CISA KEV
9
Sensor Observed
3
Virtual Patch Available
1
KEVs Added by Year
103 Cisco KEVs added all time (primary attestation date).
Common Vulnerability Classes (CWE)
- CWE-20 — Improper Input Validation 21
- CWE-399 — Resource Management Errors 10
- CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer 10
- CWE-121 — Stack-based Buffer Overflow 6
- CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor 5
- CWE-22 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 4
- CWE-78 — Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 4
- CWE-287 — Improper Authentication 3
Mitigation and Virtual Patches
1 of these CVEs currently have a virtual patch available (ModSecurity, Cloudflare, and/or AWS WAF artifacts for Enterprise customers). Availability is shown on each CVE page; rule content requires an Enterprise account. Prioritise remediation using confidence, CISA status, and sensor-observed exploitation.
Attested CVEs
Filter full feed by Cisco| CVE | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2026-20316
Cisco Secure Firewall Management Center Software Static Credential Vulnerability |
Cisco Secure Firewall Management Center (FMC) | Confirmed | In CISA | 29 Jul 2026 |
|
CVE-2008-4128
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services... |
IOS | Confirmed | In CISA | 13 Jul 2026 |
|
CVE-2026-20230
Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability |
Cisco Unified Communications Manager | Confirmed | In CISA | 23 Jun 2026 |
|
CVE-2026-20262
Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability |
Cisco Catalyst SD-WAN Manager | Confirmed | In CISA | 15 Jun 2026 |
|
CVE-2026-20245
Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability |
Cisco Catalyst SD-WAN Controller, Cisco Catalyst SD-WAN Manager | Confirmed | In CISA | 05 Jun 2026 |
|
CVE-2024-20404
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on... |
Cisco Unified Contact Center Enterprise, Cisco Unified Contact Center Express, Cisco Finesse, Cisco Packaged Contact Center Enterprise | High | Not in CISA | 01 Apr 2026 |
|
CVE-2020-16139
A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through... |
Unified IP Conference Station 7937G | High | Not in CISA | 10 Feb 2026 |
|
CVE-2024-20440
A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This... |
Cisco Smart License Utility | High | Not in CISA | 25 Jan 2026 |
|
CVE-2013-2678
Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive... |
Linksys E4200 | High | Not in CISA | 23 Nov 2025 |
|
CVE-2023-20073
Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability |
Cisco Small Business RV Series Router Firmware | High | Not in CISA | 09 Nov 2025 |
|
CVE-2020-26073
Cisco SD-WAN vManage Directory Traversal Vulnerability |
Cisco Catalyst SD-WAN Manager | High | Not in CISA | 24 Jul 2025 |
|
CVE-2018-0127
A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an... |
RV132W ADSL2+ Wireless-N VPN Router, RV134W VDSL2 Wireless-AC VPN Router | High | Not in CISA | 21 Jun 2025 |
|
CVE-2001-0537
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being... |
IOS | High | Not in CISA | 21 Jun 2025 |
|
CVE-2019-1821
Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities |
Cisco Prime Infrastructure | High | Not in CISA | 08 Jun 2025 |
|
CVE-2026-20133
A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected... |
Cisco Catalyst SD-WAN Manager | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2026-20128
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability |
Cisco Catalyst SD-WAN Manager | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2026-20122
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability |
Cisco Catalyst SD-WAN Manager | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2026-20131
Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability |
Cisco Secure Firewall Management Center (FMC) | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2026-20127
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability |
Cisco Catalyst SD-WAN Manager | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2022-20775
Cisco SD-WAN Software Privilege Escalation Vulnerability |
Cisco Catalyst SD-WAN, Cisco Catalyst SD-WAN Manager, Cisco SD-WAN vContainer, Cisco SD-WAN vEdge Cloud, Cisco SD-WAN vEdge Router | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2026-20045
Cisco Unified Communications Products Remote Code Execution Vulnerability |
Cisco Unified Communications Manager, Cisco Unified Communications Manager IM and Presence Service, Cisco Unity Connection | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-20393
Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability |
Cisco Secure Email, Cisco Secure Email and Web Manager | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-20352
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the... |
IOS, Cisco IOS XE Software, Cisco IOS XE Catalyst SD-WAN | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-20362
Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD... |
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-20333
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense... |
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software | Confirmed | In CISA | 01 Jun 2026 |
Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology