Cisco vulnerabilities
We track 810 vulnerabilities in Cisco products across 60+ products. 790 are rated high or critical, and 106 have been exploited in real attacks. The most recent was published on November 4, 2026.
Latest Cisco vulnerabilities
- 9.8 Critical severity
Cisco Identity Services Engine Software: Use of Hard-coded Password
A vulnerability in Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI) cloud deployments of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to access sensitive data, execute limited administrat
- 7.2 High severity
Cisco Unified Contact Center Express: Deserialization of Untrusted Data
A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.&nb
- 7.8 High severity
Cisco Unified Contact Center Express: Deserialization of Untrusted Data
A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device. This vulnerability is due to insecure deserialization of Jav
- 8.8 High severity
Cisco Unified Computing System (Managed): Improper Restriction of Communication Channel to Intended Endpoints
A vulnerability in the SSH connection handling of Cisco Integrated Management Controller (IMC) for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Series Servers could allow an authenticated, remote attacker to access internal services with elevated
- 8.7 High severity
Cisco Data Center Network Manager: Key Exchange without Entity Authentication
A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices. This vulnerability is due to insufficient SSH host key validation. An attacke
- 7.2 High severity
Cisco Identity Services Engine Software: Unrestricted Upload of File with Dangerous Type
A vulnerability in the API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due
- 7.2 High severity
Cisco Secure Network Analytics: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands
- 9.1 Critical severity
Cisco Unified Contact Center Enterprise: Improper Access Control
A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE) could allow an unauthenticated, remote attacker to read and modify data on an affected device. This vulnerability is due to a lack of proper authentication controls
- 8.6 High severity
Cisco Identity Services Engine Software: Out-of-bounds Read
A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling
- 7.1 High severity
Cisco Unified Contact Center Express: Client-Side Enforcement of Server-Side Security
A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affected system. This vulnerability is due to insufficient server-side validation of
- 9.1 Critical severity
Cisco IOS XE Software: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters. This vulnerability is due to improper traffic filtering conditions on an affected de
- 7.3 High severity
Cisco Digital Network Architecture Center (DNA…: Missing Authentication for Critical Functionality
A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings. This vulnerability is due to the lack of authentication in
- 7.4 High severity
Cisco IOS XE Software: Buffer Access with Incorrect Length Value
A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of access point (AP) C
- 8.2 High severity
Cisco IOS XE Software: Improper Check for Unusual or Exceptional Conditions
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input val
- 8.2 High severity
Cisco IOS XE Software: Improper Check for Unusual or Exceptional Conditions
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input val
- 8.2 High severity
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local…
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input val
- 7.7 High severity
Cisco IOS XE Software: Improper Handling of Undefined Values
A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit thi
- 7.4 High severity
Cisco NX-OS Software: Buffer Access with Incorrect Length Value
A vulnerability in the Switch Integrated Security Features (SISF) of Cisco IOS Software, Cisco IOS XE Software, Cisco NX-OS Software, and Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of
- 7.4 High severity
Cisco IOS XE Software: Mismatched Memory Management Routines
A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) c
- 10.0 Critical severity
Cisco IOS XE Software: Use of Hard-coded Credentials
A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to upload
- 8.8 High severity
Cisco IOS XE Software: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authenticated, remote attacker with a lobby ambassador user account to perform a command injection attack against an affected d
- 8.6 High severity
Cisco Adaptive Security Appliance (ASA) Software: Out-of-bounds Write
A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated,
- 8.3 High severity
IOS: Missing Authorization
A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges. This vulnerability is due to insufficient validation of authorizations for authenticated user
- 8.6 High severity
Cisco IOS XE Software: Uncontrolled Resource Consumption
A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service (DoS) condition. This vulnerability is due to improp
- 8.6 High severity
A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS…
A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) con
- 7.4 High severity
Cisco IOS XE Software: Memory Allocation with Excessive Size Value
A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent wireless attacker to cause a denial of service (DoS) condition. This vulnerability is due to imp
- 7.8 High severity
Cisco Catalyst SD-WAN Manager: Channel Accessible by Non-Endpoint
A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on the underlying operating system. This vulnerability is due to insufficient input val
- 10.0 Critical severity
Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Exploited
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protoco
- 8.8 High severity
Cisco Webex Teams: Inclusion of Functionality from Untrusted Control Sphere
A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user. This vuln
- 7.2 High severity
Cisco Secure Network Analytics: Improper Verification of Cryptographic Signature
A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as root on the underlying operating system. This vulnerabi
- 7.7 High severity
Cisco Meraki MX Firmware: Use of Uninitialized Variable
A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series devices could allow an authenticated, remote attacker to cause a denial of service (DoS) condition in the Cisco AnyConnect service on an affected device. To exploit
- 7.5 High severity
Cisco Enterprise Chat and Email: Incorrect Regular Expression
A vulnerability in chat messaging features of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied input to chat en
- 7.5 High severity
Cisco IOS XR Software: Allocation of Resources Without Limits or Throttling
A vulnerability in the Internet Key Exchange version 2 (IKEv2) function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an affected device from processing any control plane UDP packets. This vulnerability is due to imp
- 8.6 High severity
A vulnerability in the Layer 3 multicast feature of Cisco IOS XR Software for Cisco ASR 9000…
A vulnerability in the Layer 3 multicast feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an unauthenticated, remote at
- 8.6 High severity
A vulnerability in the IPv4 access control list (ACL) feature and quality of service (QoS)…
A vulnerability in the IPv4 access control list (ACL) feature and quality of service (QoS) policy feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Perf
- 7.4 High severity
Cisco IOS XR Software: Allocation of Resources Without Limits or Throttling
A vulnerability in the handling of specific packets that are punted from a line card to a route processor in Cisco IOS XR Software Release 7.9.2 could allow an unauthenticated, adjacent attacker to cause control plane traffic to stop working on multiple Cisco
- 8.8 High severity
Cisco IOS XR Software: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user argume
- 8.6 High severity
Cisco IOS XR Software: Buffer Copy without Checking Size of Input
A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to a memory corruption t
- 7.8 High severity
Cisco Secure Client: Improper Verification of Cryptographic Signature
A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the Secure Firewall Posture Engine, formerly HostScan, is
- 7.4 High severity
Cisco NX-OS Software: Insufficient Granularity of Access Control
A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a