Cisco vulnerabilities
We track 810 vulnerabilities in Cisco products across 60+ products. 790 are rated high or critical, and 106 have been exploited in real attacks. The most recent was published on November 4, 2026.
Latest Cisco vulnerabilities
- 8.1 High severity
Cisco IP Phone 7800 Series with Multiplatform…: Cross-Site Request Forgery
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-base
- 8.8 High severity
Cisco Webex Meetings: Deserialization of Untrusted Data
A vulnerability in the login authorization components of Cisco Webex Meetings could allow an authenticated, remote attacker to inject arbitrary Java code. This vulnerability is due to improper deserialization of Java code within login requests. An attacker cou
- 7.8 High severity
Cisco Ultra Cloud Core - Subscriber…: Improper Access Control
A vulnerability in the Common Execution Environment (CEE) ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure (SMI) software could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability
- 7.5 High severity
A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an…
A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to stop processing RADIUS packets. This vulnerability is due to improper handling of certain RADIUS reque
- 7.2 High severity
Cisco TelePresence Video Communication Server…: Relative Path Traversal
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read/write privileges to the application to write file
- 7.2 High severity
Cisco TelePresence Video Communication Server…: Relative Path Traversal
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read/write privileges to the application to write file
- 9.8 Critical severity
Spring Framework JDK 9+ Remote Code Execution Exploited
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot
- 8.8 High severity
Cisco NX-OS Software: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation of user supplied data that is sent to the
- 7.5 High severity
A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software…
A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validati
- 7.5 High severity
A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of…
A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic to be dropped on an affected device. This
- 7.5 High severity
A vulnerability in the checkpoint manager implementation of Cisco Redundancy Configuration…
A vulnerability in the checkpoint manager implementation of Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS Software could allow an unauthenticated, remote attacker to cause the checkpoint manager process to restart upon receipt of malformed TCP
- 7.5 High severity
A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification…
A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) conditio
- 9.8 Critical severity
Cisco Small Business RV Series Router Firmware: Out-of-bounds Write
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot
- 9.8 Critical severity
Cisco Umbrella Insights Virtual Appliance: Protection Mechanism Failure
A vulnerability in the Cisco Umbrella Secure Web Gateway service could allow an unauthenticated, remote attacker to bypass the file inspection feature. This vulnerability is due to insufficient restrictions in the file inspection feature. An attacker could exp
- 9.8 Critical severity
Cisco Small Business RV Series Router Firmware: Out-of-bounds Write
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot
- 9.8 Critical severity
Cisco Small Business RV Series Router Firmware: Out-of-bounds Write
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot
- 7.5 High severity
Cisco Small Business RV Series Router Firmware: Out-of-bounds Write
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot
- 8.0 High severity
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Exploited
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot
- 7.3 High severity
Cisco Small Business RV Series Router Firmware: Out-of-bounds Write
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot
- 8.1 High severity
Cisco Small Business RV Series Router Firmware: Out-of-bounds Write
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot
- 9.8 Critical severity
Cisco Small Business RV Series Router Firmware: Out-of-bounds Write
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot
- 8.0 High severity
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Exploited
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot
- 7.2 High severity
Cisco Small Business RV Series Router Firmware: Out-of-bounds Write
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot
- 7.8 High severity
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Exploited
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot
- 9.8 Critical severity
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Exploited
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot
- 9.8 Critical severity
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Exploited
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot
- 7.5 High severity
ClamAV: Out-of-bounds Read
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnera
- 9.6 Critical severity
Cisco Unified Contact Center Domain Manager: Incorrect Resource Transfer Between Spheres
A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) and Cisco Unified Contact Center Domain Manager (Unified CCDM) could allow an authenticated, remote attacker to elevate their privileges to A
- 9.8 Critical severity
Cisco HyperFlex HX Data Platform Command Injection Exploited
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Deta
- 9.8 Critical severity
Cisco HyperFlex HX Installer Virtual Machine Command Injection Exploited
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Deta
- 6.1 Medium severity
Cisco ASA and FTD Cross-Site Scripting (XSS) Exploited
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a
- 8.6 High severity
Cisco IOS XR Software DVMRP Memory Exhaustion Exploited
Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group Management Protocol (IGMP) process or make it con
- 8.6 High severity
Cisco IOS XR Software DVMRP Memory Exhaustion Exploited
A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue managemen
- 7.8 High severity
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Exploited
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to hav
- 7.5 High severity
Cisco ASA and FTD Read-Only Path Traversal Exploited
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files
- 7.5 High severity
Cisco ASA and FTD Information Disclosure Exploited
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve memory contents on an affected device, which could l
- 9.8 Critical severity
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Exploited
A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to
- 6.5 Medium severity
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Exploited
A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the
- 8.8 High severity
Cisco IOS XR Software Discovery Protocol Format String Exploited
A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of str
- 8.8 High severity
Cisco RV Series Routers Deserialization of Untrusted Data Exploited
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an act