Cisco vulnerabilities
We track 810 vulnerabilities in Cisco products across 60+ products. 790 are rated high or critical, and 106 have been exploited in real attacks. The most recent was published on November 4, 2026.
Latest Cisco vulnerabilities
- 8.6 High severity
Cisco Firepower Threat Defense Software: Missing Reference to Active Allocated Resource
A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. Thi
- 7.2 High severity
Cisco Identity Services Engine Software: Unrestricted Upload of File with Dangerous Type
Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilitie
- 8.6 High severity
Cisco Adaptive Security Appliance (ASA) Software: Uncaught Exception
A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due t
- 7.2 High severity
Cisco IOS XE Web UI Command Injection Exploited
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabilit
- 10.0 Critical severity
Cisco IOS XE Web UI Privilege Escalation Exploited
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors e
- 7.5 High severity
Cisco Emergency Responder: Uncontrolled Resource Consumption
A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call proce
- 8.8 High severity
Cisco IOS XE Software: Improper Privilege Management
A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user. Th
- 9.8 Critical severity
Cisco Emergency Responder: Use of Hard-coded Credentials
A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that cannot be changed or deleted. This vulnerability is due to the prese
- 7.5 High severity
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an…
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to fu
- 8.8 High severity
Cisco SD-WAN vManage: Incorrect Permission Assignment for Critical Resource
A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, remote attacker to access another tenant that is being managed by the same Cisco Catalyst SD-WAN Manager instance. This vul
- 9.8 Critical severity
Cisco SD-WAN vManage: Improper Authentication
A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remote attacker to gain unauthorized access to the application as an arbitrary user. This vulnerability is due to im
- 8.8 High severity
A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote…
A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabi
- 7.5 High severity
A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software…
A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of cert
- 7.5 High severity
Cisco IOS XE Software: Missing Initialization of a Variable
A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) c
- 8.2 High severity
Cisco Digital Network Architecture Center (DNA…: Improper Access Control
A vulnerability in Cisco DNA Center could allow an unauthenticated, remote attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control enforcement on API r
- 7.5 High severity
Cisco IOS XE Software: Use of Out-of-range Pointer Offset
A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a deni
- 9.1 Critical severity
IOS: Improper Authorization
A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to bypass command authorization and copy files to or from the file system of an aff
- 8.6 High severity
Cisco Aironet Access Point Software: Uncontrolled Resource Consumption
A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service. This vulnerability is due to overuse of AP resources. An attacker could exploit this vul
- 6.6 Medium severity
Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Exploited
A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitr
- 7.5 High severity
Cisco SD-WAN vManage: Use of Hard-coded Credentials
Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access the Elasticsearch configuration database of an affected device with the privileges of the elasticsearch user. The
- 8.6 High severity
Cisco IOS XE Software: Allocation of Resources Without Limits or Throttling
A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulner
- 7.8 High severity
Cisco IOS XR Software: Insufficient Verification of Data Authenticity
A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device. This vulnerability is due to insufficient image verification. An attacker could explo
- 7.5 High severity
Cisco IOS XR Software: Incorrect Authorization
A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incomplete support for thi
- 7.0 High severity
Cisco IOS XR Software: Time-of-check Time-of-use (TOCTOU) Race Condition
A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execute arbitrary code on the underlying operating system. This vulnerability is due to a time-of-check, time-of-use (TOCTOU) race condition when
- 9.1 Critical severity
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Exploited
A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify val
- 8.6 High severity
Cisco Identity Services Engine Software: Improper Handling of Exceptional Conditions
A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to stop processing RADIUS packets. This vulnerability is due to improper handling of c
- 9.8 Critical severity
Cisco BroadWorks: Improper Authentication
A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to forge the credentials required to access an affected
- 7.2 High severity
Cisco Small Business RV Series Router Firmware: Out-of-bounds Write
A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validat
- 7.2 High severity
Cisco Emergency Responder: Improper Privilege Management
A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an authenticated, remote attacker to eleva
- 7.4 High severity
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco…
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker
- 7.5 High severity
Cisco Secure Endpoint: Expired Pointer Dereference
A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An att
- 7.1 High severity
Cisco Duo Device Health Application: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the CryptoService function of Cisco Duo Device Health Application for Windows could allow an authenticated, local attacker with low privileges to conduct directory traversal attacks and overwrite arbitrary files on an affected system. This v
- 7.8 High severity
Cisco ThousandEyes Recorder Application: Improper Neutralization of Argument Delimiters in a Command
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to insufficient input validation
- 8.8 High severity
Cisco Unified Communications Manager: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to conduct SQL injecti
- 7.5 High severity
Cisco Secure Endpoint: Loop with Unreachable Exit Condition
A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect chec
- 9.1 Critical severity
Cisco Intersight Virtual Appliance: Improper Neutralization of Special Elements used in a Command
Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to execute arbitrary commands using root-level privileges. The attacker would need to have Administrator privileges on the affected device to e
- 9.1 Critical severity
Cisco Intersight Virtual Appliance: Improper Neutralization of Special Elements used in a Command
Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to execute arbitrary commands using root-level privileges. The attacker would need to have Administrator privileges on the affected device to e
- 7.2 High severity
Cisco TelePresence Video Communication Server…: Improper Neutralization of Special Elements used in a Command
A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection
- 7.8 High severity
Cisco BroadWorks: Incorrect Permission Assignment for Critical Resource
A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an affected system. This vulnerability is due to incorrect implementation of user role
- 9.1 Critical severity
Cisco SD-WAN vManage: Improper Authentication
A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to gain read permissions or limited write permissions to the configuration of an affected Cisco SD-WAN vM