# Cisco IOS vulnerabilities Source: https://junglewise.ai/threats/technologies/ios Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/ios.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 70 vulnerabilities in Cisco IOS: 0 in the last 7 days and 1 in the last 90 days, 60 of them critical and 60 exploited in the wild. The most recent, CVE-2026-112665, was published on 26 October 2026. 1 vulnerability in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 1 - All time: 70 (60 critical, 60 exploited in the wild) ## About Cisco IOS Routing and switching operating system for Cisco network devices. ## Latest Cisco IOS vulnerabilities - [CVE-2026-112665: Apple iOS kernel memory disclosure via state management](https://junglewise.ai/threats/cve-2026-112665-an-information-disclosure-issue-was-addressed-with-improved) (info, published 26 Oct 2026) - [CVE-2008-4128: Cisco IOS CSRF in HTTP Administration component](https://junglewise.ai/threats/cve-2008-4128-cisco-ios-csrf-in-http-administration-component) (critical, exploited in the wild, CVSS 9.3, published 13 Jul 2026) - [CVE-2023-41974: Apple iOS and iPadOS use-after-free in kernel](https://junglewise.ai/threats/cve-2023-41974-apple-ios-and-ipados-use-after-free-in-kernel) (critical, exploited in the wild, CVSS 7.8, published 5 Mar 2026) - [CVE-2025-20352: Cisco IOS and IOS XE stack overflow in SNMP subsystem](https://junglewise.ai/threats/cve-2025-20352-cisco-ios-and-ios-xe-stack-overflow-in-snmp-subsystem) (critical, exploited in the wild, CVSS 7.7, published 29 Sep 2025) - [CVE-2025-43300: Apple iOS, iPadOS, and macOS out-of-bounds write in Image I/O](https://junglewise.ai/threats/cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o) (critical, exploited in the wild, CVSS 10, published 21 Aug 2025) - [CVE-2025-24200: Apple iOS and iPadOS Incorrect Authorization Vulnerability](https://junglewise.ai/threats/cve-2025-24200-apple-ios-and-ipados-incorrect-authorization-vulnerability) (critical, exploited in the wild, CVSS 6.1, published 12 Feb 2025) - [CVE-2023-20109: Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2023-20109-cisco-ios-and-ios-xe-group-encrypted-transport-vpn-out-of-bounds) (critical, exploited in the wild, CVSS 6.6, published 10 Oct 2023) - [CVE-2023-42824: Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2023-42824-apple-ios-and-ipados-kernel-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 5 Oct 2023) - [CVE-2023-41061: Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability](https://junglewise.ai/threats/cve-2023-41061-apple-ios-ipados-and-watchos-wallet-code-execution-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 11 Sep 2023) - [CVE-2023-41064: Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-41064-apple-ios-ipados-and-macos-imageio-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 11 Sep 2023) - [CVE-2016-6415: Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2016-6415-cisco-ios-ios-xr-and-ios-xe-ikev1-information-disclosure) (critical, exploited in the wild, CVSS 7.5, published 19 May 2023) - [CVE-2004-1464: Cisco IOS Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2004-1464-cisco-ios-denial-of-service-vulnerability) (critical, exploited in the wild, CVSS 5.9, published 19 May 2023) - [CVE-2017-6742: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-6742-cisco-ios-and-ios-xe-software-snmp-remote-code-execution) (critical, exploited in the wild, CVSS 8.8, published 19 Apr 2023) - [CVE-2023-28206: Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2023-28206-apple-ios-ipados-and-macos-iosurfaceaccelerator-out-of-bounds) (critical, exploited in the wild, CVSS 8.6, published 10 Apr 2023) - [CVE-2021-30900: Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2021-30900-apple-ios-ipados-and-macos-out-of-bounds-write-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 30 Mar 2023) - [CVE-2022-42856: Apple iOS Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2022-42856-apple-ios-type-confusion-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 14 Dec 2022) - [CVE-2022-42827: Apple iOS and iPadOS Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2022-42827-apple-ios-and-ipados-out-of-bounds-write-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 25 Oct 2022) - [CVE-2022-32917: Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-32917-apple-ios-ipados-and-macos-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 14 Sep 2022) - [CVE-2020-9934: Apple iOS, iPadOS, and macOS Input Validation Vulnerability](https://junglewise.ai/threats/cve-2020-9934-apple-ios-ipados-and-macos-input-validation-vulnerability) (critical, exploited in the wild, CVSS 5.5, published 8 Sep 2022) - [CVE-2021-31010: Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability](https://junglewise.ai/threats/cve-2021-31010-apple-ios-macos-watchos-sandbox-bypass-vulnerability) (critical, exploited in the wild, CVSS 7.5, published 25 Aug 2022) - [CVE-2022-32894: Apple iOS and macOS Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2022-32894-apple-ios-and-macos-out-of-bounds-write-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 18 Aug 2022) - [CVE-2022-32893: Apple iOS and macOS Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2022-32893-apple-ios-and-macos-out-of-bounds-write-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 18 Aug 2022) - [CVE-2021-30983: Apple iOS and iPadOS Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-30983-apple-ios-and-ipados-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 27 Jun 2022) - [CVE-2016-4656: Apple iOS Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2016-4656-apple-ios-memory-corruption-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 24 May 2022) - [CVE-2016-4657: Apple iOS Webkit Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2016-4657-apple-ios-webkit-memory-corruption-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 24 May 2022) ## Most severe Cisco IOS vulnerabilities - [CVE-2025-43300: Apple iOS, iPadOS, and macOS out-of-bounds write in Image I/O](https://junglewise.ai/threats/cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o) (critical, exploited in the wild, CVSS 10, published 21 Aug 2025) - [CVE-2017-3881: Cisco IOS and IOS XE Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-3881-cisco-ios-and-ios-xe-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 25 Mar 2022) - [CVE-2018-0151: Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2018-0151-cisco-ios-software-and-cisco-ios-xe-software-quality-of-service) (critical, exploited in the wild, CVSS 9.8, published 3 Mar 2022) - [CVE-2017-12240: Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-12240-cisco-ios-and-ios-xe-software-dhcp-remote-code-execution) (critical, exploited in the wild, CVSS 9.8, published 3 Mar 2022) - [CVE-2022-22587: Apple Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2022-22587-apple-memory-corruption-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 28 Jan 2022) - [CVE-2018-0171: Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2018-0171-cisco-ios-and-ios-xe-software-smart-install-remote-code-execution) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) - [CVE-2008-4128: Cisco IOS CSRF in HTTP Administration component](https://junglewise.ai/threats/cve-2008-4128-cisco-ios-csrf-in-http-administration-component) (critical, exploited in the wild, CVSS 9.3, published 13 Jul 2026) - [CVE-2017-6742: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-6742-cisco-ios-and-ios-xe-software-snmp-remote-code-execution) (critical, exploited in the wild, CVSS 8.8, published 19 Apr 2023) - [CVE-2022-42856: Apple iOS Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2022-42856-apple-ios-type-confusion-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 14 Dec 2022) - [CVE-2022-32893: Apple iOS and macOS Out-of-Bounds Write Vulnerability](https://junglewise.ai/threats/cve-2022-32893-apple-ios-and-macos-out-of-bounds-write-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 18 Aug 2022) ## Vulnerabilities per week 1 vulnerability in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 1 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Cisco technologies - [Cisco Identity Services Engine](https://junglewise.ai/threats/technologies/identity-services-engine): 58 vulnerabilities - [Cisco IOS XE](https://junglewise.ai/threats/technologies/ios-xe): 57 vulnerabilities - [Cisco Firepower Threat Defense](https://junglewise.ai/threats/technologies/firepower-threat-defense): 33 vulnerabilities - [Cisco Firepower Threat Defense Software](https://junglewise.ai/threats/technologies/firepower-threat-defense-software): 33 vulnerabilities - [Cisco IOS XR](https://junglewise.ai/threats/technologies/ios-xr): 31 vulnerabilities - [Cisco IOS XE Software](https://junglewise.ai/threats/technologies/ios-xe-software): 28 vulnerabilities - [Cisco Adaptive Security Appliance Software](https://junglewise.ai/threats/technologies/secure-firewall-asa-software): 23 vulnerabilities - [Cisco Snort 3](https://junglewise.ai/threats/technologies/snort-3): 20 vulnerabilities - [Cisco Ios Software](https://junglewise.ai/threats/technologies/ios-software): 19 vulnerabilities - [Cisco ISE Passive Identity Connector](https://junglewise.ai/threats/technologies/ise-passive-identity-connector): 19 vulnerabilities - [Cisco Secure Firewall Management Center](https://junglewise.ai/threats/technologies/secure-firewall-management-center): 16 vulnerabilities - [Cisco Unity Connection](https://junglewise.ai/threats/technologies/unity-connection): 16 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Cisco IOS vulnerabilities", https://junglewise.ai/threats/technologies/ios, 11 November 2026.