Cisco vulnerabilities
We track 810 vulnerabilities in Cisco products across 60+ products. 790 are rated high or critical, and 106 have been exploited in real attacks. The most recent was published on November 4, 2026.
Latest Cisco vulnerabilities
- 7.5 High severity
cjose: Use of a Broken or Risky Cryptographic Algorithm
OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). The AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the JWE. The spec says that a fixed length of 16 octets
- 7.4 High severity
Cisco NX-OS System Software in ACI Mode: Inadequate Encryption Strength
A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic. This vulnerability is due to an issue
- 7.7 High severity
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication…
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker with Administrator-level read-only credentials to elevate their privileges to Administrator with read-write creden
- 7.8 High severity
Cisco Secure Client: Incorrect Default Permissions
A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated, local attacker to elevate privileges to those of SYSTEM. The
- 7.5 High severity
Cisco Unified Communications Manager IM and…: Allocation of Resources Without Limits or Throttling
A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to cause a temporary service outage for all Cisco Unified CM IM&P
- 7.5 High severity
Cisco Adaptive Security Appliance (ASA) Software: Incorrect Conversion between Numeric Types
A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Appliances could allow an unauthenticated, remote att
- 9.8 Critical severity
Cisco Small Business Smart and Managed Switches: Buffer Copy without Checking Size of Input
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected
- 8.8 High severity
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated…
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user
- 7.2 High severity
Cisco Identity Services Engine Software: Improper Neutralization of Special Elements used in an OS Command
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must ha
- 7.2 High severity
Cisco Identity Services Engine Software: Improper Neutralization of Special Elements used in an OS Command
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must ha
- 9.8 Critical severity
Cisco Small Business Smart and Managed Switches: Buffer Copy without Checking Size of Input
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected
- 9.8 Critical severity
Cisco Small Business Smart and Managed Switches: Buffer Copy without Checking Size of Input
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected
- 9.8 Critical severity
Cisco Small Business Smart and Managed Switches: Buffer Copy without Checking Size of Input
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected
- 9.8 Critical severity
Cisco Small Business Smart and Managed Switches: Buffer Copy without Checking Size of Input
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected
- 9.8 Critical severity
Cisco Small Business Smart and Managed Switches: Buffer Copy without Checking Size of Input
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected
- 9.8 Critical severity
Cisco Small Business Smart and Managed Switches: Buffer Copy without Checking Size of Input
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected
- 9.8 Critical severity
Cisco Small Business Smart and Managed Switches: Buffer Copy without Checking Size of Input
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected
- 7.5 High severity
Cisco Small Business Smart and Managed Switches: Buffer Copy without Checking Size of Input
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected
- 8.8 High severity
Cisco Business Wireless Access Point Software: Missing Authentication for Critical Functionality
A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (APs) could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with
- 8.8 High severity
Cisco ASR 5000 Series Software: Insufficiently Protected Credentials
A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied credentials. A
- 9.8 Critical severity
Cisco Small Business IP Phones: Missing Authentication for Critical Functionality
A vulnerability in the web-based management interface of Cisco SPA112 2-Port Phone Adapters could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to a missing authentication process within th
- 7.2 High severity
Cisco Small Business RV Series Routers Command Injection Exploited
A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is
- 7.8 High severity
Cisco Identity Services Engine Software: Improper Neutralization of Special Elements used in an OS Command
Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain roo
- 7.2 High severity
Cisco Small Business RV Series Router Firmware: Improper Neutralization of Special Elements used in an OS Command
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an
- 7.2 High severity
A vulnerability in Cisco Secure Network Analytics could allow an authenticated, remote…
A vulnerability in Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code as a root user on an affected device. This vulnerability is due to insufficient validation of user input to the web interface. An attacker
- 8.8 High severity
Cisco Secure Network Analytics: Deserialization of Untrusted Data
A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system. This vulnerability is due to insufficient sanitization of user-p
- 7.2 High severity
Cisco Small Business RV Series Router Firmware: Improper Neutralization of Special Elements used in an OS Command
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an
- 7.2 High severity
Cisco Small Business RV Series Router Firmware: Improper Neutralization of Special Elements used in a Command
A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to
- 7.5 High severity
Cisco ASR 5000 Series Software: Uncontrolled Resource Consumption
A vulnerability in the Vector Packet Processor (VPP) of Cisco Packet Data Network Gateway (PGW) could allow an unauthenticated, remote attacker to stop ICMP traffic from being processed over an IPsec connection. This vulnerability is due to the VPP improperly
- 9.8 Critical severity
Cisco Small Business RV Series Router Firmware: Unrestricted Upload of File with Dangerous Type
A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insuffici
- 8.1 High severity
Cisco SD-WAN vManage: Cross-Site Request Forgery
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF p
- 7.5 High severity
Cisco Adaptive Security Appliance (ASA) Software: Insufficient Entropy
A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco ASA 5506-X, ASA 5508-X, and AS
- 7.5 High severity
Cisco IOS: Improper Validation of Array Index
A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to insufficient validation
- 8.6 High severity
A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE…
A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability i
- 7.8 High severity
Cisco IOS XE Software: Improper Access Control
A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to insufficient restrictions on the hosted appli
- 8.8 High severity
Cisco Digital Network Architecture Center (DNA…: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privileges in the context of the web-based management interface on an affected device. This vulnerability is due to the unintended exposure of se
- 7.8 High severity
Cisco IOS XE Software: Improper Neutralization of Expression/Command Delimiters
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges. This vulnerability is due to insufficient input validation by the system CLI. An attacker with privi
- 7.8 High severity
Cisco IOS XE Software: Heap-based Buffer Overflow
A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding fea
- 8.6 High severity
Cisco IOS XE Software: Use After Free
A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is
- 7.8 High severity
Cisco Enterprise NFV Infrastructure Software: Improper Verification of Cryptographic Signature
A vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, local attacker to provide an unauthentic upgrade file for upload. This vulnerability is due to insufficient cryptograp