Cisco vulnerabilities
We track 810 vulnerabilities in Cisco products across 60+ products. 790 are rated high or critical, and 106 have been exploited in real attacks. The most recent was published on November 4, 2026.
Latest Cisco vulnerabilities
- 7.5 High severity
Cisco Firepower Threat Defense Software: Access of Memory Location After End of Buffer
A vulnerability in the Snort 2 and Snort 3 TCP and UDP detection engine of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Appliances could allow an unauthenticated, remote attacker to cause memory corruption, which could cause th
- 9.9 Critical severity
Cisco Adaptive Security Appliance (ASA) Software: Improper Neutralization of Expression/Command Delimiters
A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute operating system commands as root. This vulnerability is due to insufficient validation of user input. An attacker
- 7.7 High severity
Cisco Adaptive Security Appliance (ASA) Software: Improper Handling of Extra Values
A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause an unexpected reload of the de
- 8.6 High severity
Cisco Secure Firewall Adaptive Security…: Memory Allocation with Excessive Size Value
Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv) models. However, it was later found that this vulnerability af
- 7.1 High severity
Cisco Analog Telephone Adaptor (ATA) Software: Authentication Bypass by Primary Weakness
A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to modify the configuration or reboot an affected device. This vulnerability is due to the HTTP serv
- 7.2 High severity
Cisco Analog Telephone Adaptor (ATA) Software: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web-based management interface of Cisco ATA 190 Multiplatform Series Analog Telephone Adapter firmware could allow an authenticated, remote attacker with high privileges to execute arbitrary commands as the root user on the underlying op
- 8.2 High severity
Cisco Analog Telephone Adaptor (ATA) Software: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to view or delete the configuration or change the firmware on an affected device. This vulnerability
- 8.8 High severity
Cisco Analog Telephone Adaptor (ATA) Software: Execution with Unnecessary Privileges
A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, remote attacker with low privileges to run commands as an Admin user. This vulnerability is due to incorrect authoriza
- 7.5 High severity
Cisco Meraki MX Firmware: Uncontrolled Resource Consumption
A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to insufficient
- 7.5 High severity
Cisco Meraki MX Firmware: Out-of-bounds Write
Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These
- 7.5 High severity
Cisco Meraki MX Firmware: Uncontrolled Resource Consumption
A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. This vulnerabil
- 7.5 High severity
Cisco Meraki MX Firmware: Out-of-bounds Write
Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These
- 7.5 High severity
Cisco Meraki MX Firmware: Double Free
Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These
- 9.1 Critical severity
Cisco Small Business RV Series Router Firmware: Out-of-bounds Write
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability,
- 9.1 Critical severity
Cisco Small Business RV Series Router Firmware: Out-of-bounds Write
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability,
- 9.1 Critical severity
Cisco Small Business RV Series Router Firmware: Out-of-bounds Write
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability,
- 9.1 Critical severity
Cisco Small Business RV Series Router Firmware: Out-of-bounds Write
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability,
- 8.6 High severity
Cisco Nexus Dashboard Insights: Insertion of Sensitive Information into Log File
A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive information. This vulnerability exists because remote controller credentials are recorded in an internal log th
- 8.6 High severity
Cisco Data Center Network Manager: Insertion of Sensitive Information into Log File
A vulnerability in a logging function of Cisco Nexus Dashboard Fabric Controller (NDFC) and Cisco Nexus Dashboard Orchestrator (NDO) could allow an attacker with access to a tech support file to view sensitive information. This vulnerability exists because HTT
- 7.2 High severity
Cisco Small Business RV Series Router Firmware: Improper Neutralization of Expression/Command Delimiters
A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. In order to exploit this
- 8.8 High severity
Cisco Data Center Network Manager: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with low privileges to execute arbitrary code on an affected device. This vulnerability is due to improper path validation. An attacker could exploi
- 8.6 High severity
Cisco Data Center Network Manager: Cleartext Storage of Sensitive Information
A vulnerability in the Cisco Nexus Dashboard Fabric Controller (NDFC) software, formerly Cisco Data Center Network Manager (DCNM), could allow an attacker with access to a backup file to view sensitive information. This vulnerability is due to the improper sto
- 8.8 High severity
Cisco Data Center Network Manager: Improper Neutralization of Special Elements used in a Command
A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a command injection attack against an affected device. This vulnerability is due to imp
- 8.8 High severity
Cisco Small Business RV Series Router Firmware: Improper Authorization
A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability exists bec
- 7.2 High severity
Cisco Unified Computing System (Managed): Improper Neutralization of Special Elements used in a Command
A vulnerability in the Redfish API of Cisco UCS B-Series, Cisco UCS Managed C-Series, and Cisco UCS X-Series Servers could allow an authenticated, remote attacker with administrative privileges to perform command injection attacks on an affected system and ele
- 9.3 Critical severity
Cisco IOS XE Software: Incorrect Authorization
A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the pre-authentication access control list (ACL), which could allow access to network
- 8.6 High severity
Cisco IOS XE Software: Always-Incorrect Control Flow Implementation
A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device, resulting in a denial of service
- 8.6 High severity
A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS…
A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper m
- 8.6 High severity
A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software…
A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validatio
- 8.6 High severity
A vulnerability in the process that classifies traffic that is going to the Unified Threat…
A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an af
- 8.8 High severity
Cisco IOS XE Software: Cross-Site Request Forgery
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a cross-site request forgery (CSRF) attack and execute commands on the CLI of an affected device. This vulnerability is du
- 7.5 High severity
Cisco IOS XE Software: NULL Pointer Dereference
A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a
- 7.5 High severity
IOS: Out-of-bounds Write
A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condi
- 8.1 High severity
Cisco Digital Network Architecture Center (DNA…: Use of Hard-coded Cryptographic Key
A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An atta
- 7.3 High severity
Cisco Meraki Systems Manager Agent: Uncontrolled Search Path Element
A vulnerability in Cisco Meraki Systems Manager (SM) Agent for Windows could allow an authenticated, local attacker to execute arbitrary code with elevated privileges. This vulnerability is due to incorrect handling of directory search paths at runtime.
- 7.2 High severity
Cisco IOS XR Software: Improper Neutralization of Special Elements used in an OS Command
Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Software, could allow an authenticated, remote attacker with Administrator-level privileges on the PON Manager or d
- 7.4 High severity
A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate…
A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. Th
- 7.8 High severity
Cisco IOS XR Software: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write file system access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user argu
- 8.8 High severity
Cisco IOS XR Software: Improper Authorization
A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is used by the web-based management interfaces of Cisco Optical Site Manager and Cisco RV340 Dual WAN Gigabit VPN Routers could allow an authentic
- 7.4 High severity
Cisco IOS XR Software: Incorrect Provision of Specified Functionality
A vulnerability in the handling of specific Ethernet frames by Cisco IOS XR Software for various Cisco Network Convergence System (NCS) platforms could allow an unauthenticated, adjacent attacker to cause critical priority packets to be dropped, resulting in a