Vendor
Cisco vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 445 vulnerabilities in Cisco: 1 in the last 7 days and 155 in the last 90 days, 182 of them critical and 128 exploited in the wild. The most recent, CVE-2026-20183, was published on 10 November 2026. 39 vulnerabilities in the last four weeks, down 54% on the four before (84). 7 critical against 30, 2 exploited in the wild against 3. 77 technologies have a page of their own.
- Last 7 days
- 1
- Last 90 days
- 155
- Critical, all time
- 182
- Exploited in the wild
- 128
About Cisco
Multinational technology company that develops networking, security, and communications equipment and software.
Cisco technologies
- Cisco IOS70
- Cisco Identity Services Engine58
- Cisco IOS XE57
- Cisco Firepower Threat Defense33
- Cisco Firepower Threat Defense Software33
- Cisco IOS XR31
- Cisco IOS XE Software28
- Cisco Adaptive Security Appliance Software23
- Cisco Snort 320
- Cisco Ios Software19
- Cisco ISE Passive Identity Connector19
- Cisco Secure Firewall Management Center16
- Cisco Unity Connection16
- Cisco Unified Communications Manager14
- Cisco Catalyst SD-WAN Manager13
- Cisco Identity Services Engine Passive Identity Connector12
- Cisco Unified Communications Manager Session Management Edition12
- Cisco Adaptive Security Appliance (ASA)10
- Cisco Cyber Vision10
- Cisco Secure Email Gateway10
- Cisco Firepower Threat Defense (FTD)9
- Cisco IOS XR Software9
- Cisco Meraki MX Security Appliances9
- Cisco Nexus Dashboard9
- Cisco RoomOS9
- Cisco Secure Firewall Adaptive Security Appliance (ASA) Software9
- Cisco Secure Firewall Management Center Software9
- Cisco Secure Firewall Threat Defense (FTD) Software9
- Cisco Unified Communications Manager IM & Presence Service9
- Cisco Emergency Responder8
- Cisco Prime Collaboration Deployment8
- Cisco ClamAV7
- Cisco Download Manager7
- Cisco Expressway-C7
- Cisco Expressway-E7
- Cisco IOS XE Unified Threat Defense7
- Cisco Secure Email and Web Manager7
- Cisco Secure Endpoint Connector for Linux7
- Cisco Secure Endpoint Connector for Mac7
- Cisco Secure Endpoint Connector for Windows7
- Cisco Catalyst 8000V Edge Software6
- Cisco Catalyst 8200 Series Edge Platforms6
- Cisco Cloud Services Router 1000V6
- Cisco Crosswork Network Controller6
- Cisco Secure Firewall Adaptive Security Appliance Software6
- Cisco Unified Contact Center Express6
- Cisco Catalyst 8300 Series Edge Platforms5
- Cisco RV1605
- Cisco RV2605
- Cisco RV3405
- Cisco RV345 Series Routers5
- Cisco Secure Firewall Management Center (FMC)5
- Cisco Secure Workload5
- Cisco Small Business Rv1605
- Cisco Unified Computing System5
- Cisco Catalyst 8500L Edge Platforms4
- Cisco Catalyst Center4
- Cisco Secure Access4
- Cisco Cloud-delivered Firewall4
- Cisco Crosswork Data Gateway4
- Cisco Crosswork Planning4
- Cisco Crosswork Workflow Manager4
- Cisco Prime Infrastructure4
- Cisco RV110W Wireless-N VPN Firewall4
- Cisco Secure Firewall Adaptive Security Appliance4
- Cisco Unified Computing System E-Series Software4
- Cisco Webex Meetings Server4
- Cisco Catalyst 8300 Series Edge uCPE3
- Cisco Enterprise Nfv Infrastructure Software3
- Cisco Evolved Programmable Network Manager3
- Cisco Expressway Core3
- Cisco Expressway Edge3
- Cisco IoT Field Network Director3
- Cisco Meraki MX Series3
- Cisco SD-WAN3
- Cisco Secure Firewall Adaptive Security Appliance (Asa)3
- Cisco UCS S-Series Storage Servers3
Latest Cisco vulnerabilities
- CVE-2026-20183: Cisco Identity Services Engine authorization bypass in management interfacemediumCVSS 4.3
- CVE-2026-76506: Cisco UCS Central Software input validation vulnerabilityhighCVSS 7.6
- CVE-2026-76419: Cisco Unified Communications Manager cross-site scripting in web interfacemediumCVSS 6.1
- CVE-2026-20241: Cisco Identity Services Engine authorization bypass in certificate enrollmentmediumCVSS 5.3
- CVE-2026-76418: Cisco Secure Firewall ASA and FTD SSL VPN denial of servicecriticalexploited in the wildCVSS 8.6EPSS 0.6%
- CVE-2026-76524: Open Source Snort 3 control channel socket arbitrary command executionhighCVSS 7.8
- CVE-2026-76505: Cisco IOS XR IPv4 packet processing denial of servicehighCVSS 7.5
- CVE-2026-76497: Cisco Expressway Series insecure temporary filesmediumCVSS 6.6
- CVE-2026-76496: Cisco Expressway Series improper link resolutionhighCVSS 7
- CVE-2026-76495: Cisco Expressway Series incorrect permission assignmenthighCVSS 7.8
- CVE-2026-76494: Cisco Expressway Series code injectionhighCVSS 7.8
- CVE-2026-76493: Cisco Expressway Series uncaught exceptions denial of servicehighCVSS 7.5
- CVE-2026-76492: Cisco Expressway Series null pointer dereferencehighCVSS 7.5
- CVE-2026-76491: Cisco Expressway Series reachable assertions denial of servicehighCVSS 7.5
- CVE-2026-76490: Cisco Expressway Series out-of-bounds write and code injection flawshighCVSS 8.6
- CVE-2026-76489: Cisco Snort 3 memory management denial of servicemediumCVSS 5.8
- CVE-2026-76487: Cisco Unified Communications Manager access control bypassmediumCVSS 5.3
- CVE-2026-76481: Cisco Unified Communications Products improper exception handlinghighCVSS 7.5
- CVE-2026-76479: Cisco Unified Communications Products path traversal in security hardeninghighCVSS 7.8
- CVE-2026-76478: Cisco Unified Communications Products improper access controlhighCVSS 8.8
- CVE-2026-76477: Cisco Unified Communications SQL injection inhighCVSS 8.8
- CVE-2026-76476: Cisco Unified Communications Products improper input validationhighCVSS 8.8
- CVE-2026-76475: Cisco Unified Communications Products cross-site scripting in web interfacecriticalCVSS 9.3
- CVE-2026-76474: Cisco Unified Communications authentication bypasscriticalCVSS 9.8
- CVE-2026-76473: Cisco Unified Communications products resource lifecycle controlcriticalCVSS 9.8
Most severe Cisco vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-20079: Cisco Secure Firewall Management Center auth bypass in web interfacecriticalexploited in the wildCVSS 10EPSS 88.2%
- CVE-2026-20182: Cisco Catalyst SD-WAN authentication bypass in peering mechanismcriticalexploited in the wildCVSS 10EPSS 77.9%
- CVE-2026-20127: Cisco Catalyst SD-WAN auth bypass in peering authenticationcriticalexploited in the wildCVSS 10EPSS 48.2%
- CVE-2025-32433: Erlang Erlang/OTP authentication bypass in SSH Servercriticalexploited in the wildCVSS 10EPSS 47.1%
- CVE-2025-20281: Cisco Identity Services Engine unauthenticated RCE in APIcriticalexploited in the wildCVSS 10EPSS 36.0%
- CVE-2026-76460: A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to…criticalexploited in the wildCVSS 10EPSS 14.0%
- CVE-2025-20393: Cisco Secure Email Gateway command injection in Spam Quarantinecriticalexploited in the wildCVSS 10EPSS 5.0%
- CVE-2025-43300: Apple iOS, iPadOS, and macOS out-of-bounds write in Image I/Ocriticalexploited in the wildCVSS 10EPSS 4.5%
- CVE-2026-20131: Cisco Secure Firewall Management Center deserialization RCEcriticalexploited in the wildCVSS 10EPSS 1.7%
- CVE-2025-20337: Cisco Identity Services Engine injection vulnerability in APIcriticalexploited in the wildCVSS 10EPSS 1.4%
Vulnerabilities per week
39 vulnerabilities in the last four weeks, down 54% on the four before (84). 7 critical against 30, 2 exploited in the wild against 3. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 19 | 9 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 11 | 3 | |
| 7 Sep 2026 | 1 | 0 | |
| 14 Sep 2026 | 83 | 29 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 1 | 1 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 1 | 1 | |
| 19 Oct 2026 | 34 | 5 | |
| 26 Oct 2026 | 1 | 1 | |
| 2 Nov 2026 | 3 | 0 | |
| 9 Nov 2026 | 1 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Cisco vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/cisco)<a href="https://junglewise.ai/threats/vendors/cisco"><img src="https://junglewise.ai/threats/vendors/cisco/badge.svg" alt="Cisco vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/cisco.json, and this page as text at https://junglewise.ai/threats/vendors/cisco.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Cisco vulnerabilities", https://junglewise.ai/threats/vendors/cisco, 13 November 2026.