Cisco vulnerabilities
We track 810 vulnerabilities in Cisco products across 60+ products. 790 are rated high or critical, and 106 have been exploited in real attacks. The most recent was published on November 4, 2026.
Latest Cisco vulnerabilities
- 7.4 High severity
Cisco IOS XE Software: Missing Reference to Active Allocated Resource
A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device. This vulnerability is due to improper management of memory resources during TLS connection setu
- 7.4 High severity
Cisco IOS XR Software: Improper Validation of Specified Type of Input
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to
- 8.8 High severity
A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software…
A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges and gain full administrative control of an affected device. This vulnerability is due to incorrect m
- 8.8 High severity
Cisco IOS XR Software: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user argume
- 10.0 Critical severity
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Exploited
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. This vulnerability is due to inse
- 7.7 High severity
Cisco Secure Firewall Adaptive Security…: Missing Release of Memory after Effective Lifetime
A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker with a valid VPN connection to exhaus
- 8.6 High severity
Cisco Secure Firewall Adaptive Security…: Allocation of Resources Without Limits or Throttling
A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaust device memory resulting
- 8.6 High severity
Cisco Secure Firewall Adaptive Security…: Use of Insufficiently Random Values
A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerabil
- 7.7 High severity
Cisco Secure Firewall Adaptive Security…: Buffer Copy without Checking Size of Input
A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker with a valid VPN con
- 8.6 High severity
Cisco Secure Firewall Adaptive Security…: Missing Release of Resource after Effective Lifetime
A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause incoming TCP SYN packets to be dropped incorrectly. This vulnerabili
- 10.0 Critical severity
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Exploited
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying opera
- 7.2 High severity
Cisco Secure Firewall Adaptive Security…: Incorrect Execution-Assigned Permissions
A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software in multiple context mode could allow an authenticated, local attacker with administrative privileges in one context to copy files to or from another context, includi
- 7.7 High severity
Cisco Secure Firewall Adaptive Security…: Incorrect Calculation of Buffer Size
A vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange version 2 (IKEv2) IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could all
- 8.6 High severity
Cisco Secure Firewall Adaptive Security…: Improper Clearing of Heap Memory Before Release
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an
- 7.7 High severity
Cisco Secure Firewall Adaptive Security…: Missing Release of Memory after Effective Lifetime
A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN user credentials to cause a DoS condition on an affected device that may also impact the avail
- 8.1 High severity
Cisco Secure Firewall Management Center (FMC): Improper Neutralization of Special Elements used in an SQL Command
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input.
- 7.5 High severity
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Exploited
A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin p
- 9.8 Critical severity
Cisco Catalyst SD-WAN Manager: Improper Authentication
A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain access to an affected system as a user who has the netadmin role. The vulnerability is due to improper authentication f
- 7.5 High severity
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Exploited
A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for th
- 10.0 Critical severity
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Exploited
A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remot
- 7.8 High severity
Cisco Catalyst SD-WAN Manager: Incorrect Use of Privileged APIs
A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gain root privileges on the underlying operating system. This vulnerability is due to an insufficient user authentication mechanism in the REST
- 5.4 Medium severity
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Exploited
A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access o
- 7.4 High severity
Cisco NX-OS Software: Use of Uninitialized Variable
A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches and Cisco Nexus 9500-R Series Switching Platforms could allow an unauthenticated, adjacent attacker to trigger a Layer 2 traffic loop. This vul
- 7.7 High severity
Cisco NX-OS System Software in ACI Mode: Memory Allocation with Excessive Size Value
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerabili
- 7.4 High severity
Cisco NX-OS System Software in ACI Mode: Buffer Access with Incorrect Length Value
A vulnerability in Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation when processing sp
- 7.4 High severity
Cisco NX-OS Software: Buffer Access with Incorrect Length Value
A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the LLDP process to restart, which could cause an affected device to reload unexpectedly. This vulnerability
- 7.5 High severity
Cisco RoomOS Software: Improper Validation of Specified Type of Input
A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulner
- 8.8 High severity
Cisco Meeting Management: Unrestricted Upload of File with Dangerous Type
A vulnerability in the Certificate Management feature of Cisco Meeting Management could allow an authenticated, remote attacker to upload arbitrary files, execute arbitrary commands, and elevate privileges to root on an affected system. This vulnerability is d
- 9.8 Critical severity
Cisco Unified Communications Products Code Injection Exploited
A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection
- 10.0 Critical severity
Cisco Multiple Products Improper Input Validation Exploited
A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root
- 8.8 High severity
Cisco Digital Network Architecture Center (DNA…: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user. This vulnerability is due to insufficient validation of user-supplied input in REST
- 8.8 High severity
Cisco Digital Network Architecture Center (DNA…: Improper Access Control
A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul
- 7.2 High severity
Cisco Unified Contact Center Express: Unrestricted Upload of File with Dangerous Type
A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulnerability is due to an insufficient input validation associated to file upload mechanisms. An attacker could exploi
- 7.2 High severity
Cisco Unified Contact Center Express: Unrestricted Upload of File with Dangerous Type
A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulnerability is due to an insufficient input validation associated to specific UI features. An attacker could exploit
- 9.8 Critical severity
Cisco Unified Contact Center Express: Missing Authentication for Critical Functionality
A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissions pertaining to script creation and execution. This vulnera
- 9.8 Critical severity
Cisco Unified Contact Center Express: Unrestricted Upload of File with Dangerous Type
A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrary commands with root permissions on an affected system. This vulnerability is
- 7.5 High severity
Cisco Identity Services Engine Software: Incorrect Comparison
A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause Cisco ISE to restart unexpectedly. This vulnerability is due to a
- 9.1 Critical severity
Cisco Cyber Vision: Buffer Under-read
Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder that could allow an unauthenticated, remote attacker to cause the disclosure of possible sensitive data or cause the Snort 3 Detection Engine to crash. This vulnerability is du
- 7.5 High severity
Cisco Session Initiation Protocol (SIP) Software: Stack-based Buffer Overflow
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulne
- 9.0 Critical severity
IOS: Heap-based Buffer Overflow
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, r