# Cisco vulnerabilities Source: https://junglewise.ai/threats/vendors/cisco Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/cisco.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 445 vulnerabilities in Cisco: 1 in the last 7 days and 155 in the last 90 days, 182 of them critical and 128 exploited in the wild. The most recent, CVE-2026-20183, was published on 10 November 2026. 39 vulnerabilities in the last four weeks, down 54% on the four before (84). 7 critical against 30, 2 exploited in the wild against 3. 77 technologies have a page of their own. ## Counts - Last 7 days: 1 - Last 30 days: 39 - Last 90 days: 155 - All time: 445 (182 critical, 128 exploited in the wild) ## About Cisco Multinational technology company that develops networking, security, and communications equipment and software. ## Latest Cisco vulnerabilities - [CVE-2026-20183: Cisco Identity Services Engine authorization bypass in management interface](https://junglewise.ai/threats/cve-2026-20183-a-vulnerability-in-the-web-based-management-interface-of-cisco) (medium, CVSS 4.3, published 10 Nov 2026) - [CVE-2026-76506: Cisco UCS Central Software input validation vulnerability](https://junglewise.ai/threats/cve-2026-76506-a-vulnerability-in-the-web-based-management-interface-of-cisco) (high, CVSS 7.6, published 4 Nov 2026) - [CVE-2026-76419: Cisco Unified Communications Manager cross-site scripting in web interface](https://junglewise.ai/threats/cve-2026-76419-a-vulnerability-in-the-web-based-management-interface-of-cisco) (medium, CVSS 6.1, published 4 Nov 2026) - [CVE-2026-20241: Cisco Identity Services Engine authorization bypass in certificate enrollment](https://junglewise.ai/threats/cve-2026-20241-a-vulnerability-in-the-authorization-mechanism-of-cisco-identity) (medium, CVSS 5.3, published 4 Nov 2026) - [CVE-2026-76418: Cisco Secure Firewall ASA and FTD SSL VPN denial of service](https://junglewise.ai/threats/cve-2026-76418-a-vulnerability-in-the-remote-access-ssl-vpn-service-of-cisco) (critical, exploited in the wild, CVSS 8.6, published 28 Oct 2026) - [CVE-2026-76524: Open Source Snort 3 control channel socket arbitrary command execution](https://junglewise.ai/threats/cve-2026-76524-a-vulnerability-in-the-control-channel-socket-implementation-of) (high, CVSS 7.8, published 21 Oct 2026) - [CVE-2026-76505: Cisco IOS XR IPv4 packet processing denial of service](https://junglewise.ai/threats/cve-2026-76505-a-vulnerability-in-the-ipv4-packet-processing-functionality-of) (high, CVSS 7.5, published 21 Oct 2026) - [CVE-2026-76497: Cisco Expressway Series insecure temporary files](https://junglewise.ai/threats/cve-2026-76497-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (medium, CVSS 6.6, published 21 Oct 2026) - [CVE-2026-76496: Cisco Expressway Series improper link resolution](https://junglewise.ai/threats/cve-2026-76496-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (high, CVSS 7, published 21 Oct 2026) - [CVE-2026-76495: Cisco Expressway Series incorrect permission assignment](https://junglewise.ai/threats/cve-2026-76495-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (high, CVSS 7.8, published 21 Oct 2026) - [CVE-2026-76494: Cisco Expressway Series code injection](https://junglewise.ai/threats/cve-2026-76494-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (high, CVSS 7.8, published 21 Oct 2026) - [CVE-2026-76493: Cisco Expressway Series uncaught exceptions denial of service](https://junglewise.ai/threats/cve-2026-76493-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (high, CVSS 7.5, published 21 Oct 2026) - [CVE-2026-76492: Cisco Expressway Series null pointer dereference](https://junglewise.ai/threats/cve-2026-76492-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (high, CVSS 7.5, published 21 Oct 2026) - [CVE-2026-76491: Cisco Expressway Series reachable assertions denial of service](https://junglewise.ai/threats/cve-2026-76491-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (high, CVSS 7.5, published 21 Oct 2026) - [CVE-2026-76490: Cisco Expressway Series out-of-bounds write and code injection flaws](https://junglewise.ai/threats/cve-2026-76490-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (high, CVSS 8.6, published 21 Oct 2026) - [CVE-2026-76489: Cisco Snort 3 memory management denial of service](https://junglewise.ai/threats/cve-2026-76489-multiple-cisco-products-are-affected-by-a-vulnerability-in-the) (medium, CVSS 5.8, published 21 Oct 2026) - [CVE-2026-76487: Cisco Unified Communications Manager access control bypass](https://junglewise.ai/threats/cve-2026-76487-a-vulnerability-in-cisco-unified-communications-manager-unified) (medium, CVSS 5.3, published 21 Oct 2026) - [CVE-2026-76481: Cisco Unified Communications Products improper exception handling](https://junglewise.ai/threats/cve-2026-76481-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (high, CVSS 7.5, published 21 Oct 2026) - [CVE-2026-76479: Cisco Unified Communications Products path traversal in security hardening](https://junglewise.ai/threats/cve-2026-76479-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (high, CVSS 7.8, published 21 Oct 2026) - [CVE-2026-76478: Cisco Unified Communications Products improper access control](https://junglewise.ai/threats/cve-2026-76478-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (high, CVSS 8.8, published 21 Oct 2026) - [CVE-2026-76477: Cisco Unified Communications SQL injection in](https://junglewise.ai/threats/cve-2026-76477-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (high, CVSS 8.8, published 21 Oct 2026) - [CVE-2026-76476: Cisco Unified Communications Products improper input validation](https://junglewise.ai/threats/cve-2026-76476-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (high, CVSS 8.8, published 21 Oct 2026) - [CVE-2026-76475: Cisco Unified Communications Products cross-site scripting in web interface](https://junglewise.ai/threats/cve-2026-76475-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (critical, CVSS 9.3, published 21 Oct 2026) - [CVE-2026-76474: Cisco Unified Communications authentication bypass](https://junglewise.ai/threats/cve-2026-76474-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (critical, CVSS 9.8, published 21 Oct 2026) - [CVE-2026-76473: Cisco Unified Communications products resource lifecycle control](https://junglewise.ai/threats/cve-2026-76473-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and) (critical, CVSS 9.8, published 21 Oct 2026) ## Most severe Cisco vulnerabilities - [CVE-2026-20079: Cisco Secure Firewall Management Center auth bypass in web interface](https://junglewise.ai/threats/cve-2026-20079-cisco-secure-firewall-management-center-auth-bypass-in-web) (critical, exploited in the wild, CVSS 10, published 4 Mar 2026) - [CVE-2026-20182: Cisco Catalyst SD-WAN authentication bypass in peering mechanism](https://junglewise.ai/threats/cve-2026-20182-cisco-catalyst-sd-wan-authentication-bypass-in-peering-mechanism) (critical, exploited in the wild, CVSS 10, published 14 May 2026) - [CVE-2026-20127: Cisco Catalyst SD-WAN auth bypass in peering authentication](https://junglewise.ai/threats/cve-2026-20127-cisco-catalyst-sd-wan-auth-bypass-in-peering-authentication) (critical, exploited in the wild, CVSS 10, published 25 Feb 2026) - [CVE-2025-32433: Erlang Erlang/OTP authentication bypass in SSH Server](https://junglewise.ai/threats/cve-2025-32433-erlang-erlang-otp-authentication-bypass-in-ssh-server) (critical, exploited in the wild, CVSS 10, published 9 Jun 2025) - [CVE-2025-20281: Cisco Identity Services Engine unauthenticated RCE in API](https://junglewise.ai/threats/cve-2025-20281-cisco-identity-services-engine-unauthenticated-rce-in-api) (critical, exploited in the wild, CVSS 10, published 28 Jul 2025) - [CVE-2026-76460: A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to…](https://junglewise.ai/threats/cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use) (critical, exploited in the wild, CVSS 10, published 16 Sep 2026) - [CVE-2025-20393: Cisco Secure Email Gateway command injection in Spam Quarantine](https://junglewise.ai/threats/cve-2025-20393-cisco-secure-email-gateway-command-injection-in-spam-quarantine) (critical, exploited in the wild, CVSS 10, published 17 Dec 2025) - [CVE-2025-43300: Apple iOS, iPadOS, and macOS out-of-bounds write in Image I/O](https://junglewise.ai/threats/cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o) (critical, exploited in the wild, CVSS 10, published 21 Aug 2025) - [CVE-2026-20131: Cisco Secure Firewall Management Center deserialization RCE](https://junglewise.ai/threats/cve-2026-20131-cisco-secure-firewall-management-center-deserialization-rce) (critical, exploited in the wild, CVSS 10, published 19 Mar 2026) - [CVE-2025-20337: Cisco Identity Services Engine injection vulnerability in API](https://junglewise.ai/threats/cve-2025-20337-cisco-identity-services-engine-injection-vulnerability-in-api) (critical, exploited in the wild, CVSS 10, published 28 Jul 2025) ## Vulnerabilities per week 39 vulnerabilities in the last four weeks, down 54% on the four before (84). 7 critical against 30, 2 exploited in the wild against 3. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 19 | 9 | 1 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 11 | 3 | 0 | | 7 Sep 2026 | 1 | 0 | 0 | | 14 Sep 2026 | 83 | 29 | 2 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 1 | 1 | 1 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 1 | 1 | | 19 Oct 2026 | 34 | 5 | 0 | | 26 Oct 2026 | 1 | 1 | 1 | | 2 Nov 2026 | 3 | 0 | 0 | | 9 Nov 2026 | 1 | 0 | 0 | ## Cisco technologies - [Cisco IOS](https://junglewise.ai/threats/technologies/ios): 70 vulnerabilities - [Cisco Identity Services Engine](https://junglewise.ai/threats/technologies/identity-services-engine): 58 vulnerabilities - [Cisco IOS XE](https://junglewise.ai/threats/technologies/ios-xe): 57 vulnerabilities - [Cisco Firepower Threat Defense](https://junglewise.ai/threats/technologies/firepower-threat-defense): 33 vulnerabilities - [Cisco Firepower Threat Defense Software](https://junglewise.ai/threats/technologies/firepower-threat-defense-software): 33 vulnerabilities - [Cisco IOS XR](https://junglewise.ai/threats/technologies/ios-xr): 31 vulnerabilities - [Cisco IOS XE Software](https://junglewise.ai/threats/technologies/ios-xe-software): 28 vulnerabilities - [Cisco Adaptive Security Appliance Software](https://junglewise.ai/threats/technologies/secure-firewall-asa-software): 23 vulnerabilities - [Cisco Snort 3](https://junglewise.ai/threats/technologies/snort-3): 20 vulnerabilities - [Cisco Ios Software](https://junglewise.ai/threats/technologies/ios-software): 19 vulnerabilities - [Cisco ISE Passive Identity Connector](https://junglewise.ai/threats/technologies/ise-passive-identity-connector): 19 vulnerabilities - [Cisco Secure Firewall Management Center](https://junglewise.ai/threats/technologies/secure-firewall-management-center): 16 vulnerabilities - [Cisco Unity Connection](https://junglewise.ai/threats/technologies/unity-connection): 16 vulnerabilities - [Cisco Unified Communications Manager](https://junglewise.ai/threats/technologies/unified-communications-manager): 14 vulnerabilities - [Cisco Catalyst SD-WAN Manager](https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager): 13 vulnerabilities - [Cisco Identity Services Engine Passive Identity Connector](https://junglewise.ai/threats/technologies/identity-services-engine-passive-identity-connector): 12 vulnerabilities - [Cisco Unified Communications Manager Session Management Edition](https://junglewise.ai/threats/technologies/unified-communications-manager-session-management-edition): 12 vulnerabilities - [Cisco Adaptive Security Appliance (ASA)](https://junglewise.ai/threats/technologies/adaptive-security-appliance-asa): 10 vulnerabilities - [Cisco Cyber Vision](https://junglewise.ai/threats/technologies/cyber-vision): 10 vulnerabilities - [Cisco Secure Email Gateway](https://junglewise.ai/threats/technologies/secure-email-gateway): 10 vulnerabilities - [Cisco Firepower Threat Defense (FTD)](https://junglewise.ai/threats/technologies/firepower-threat-defense-ftd): 9 vulnerabilities - [Cisco IOS XR Software](https://junglewise.ai/threats/technologies/ios-xr-software): 9 vulnerabilities - [Cisco Meraki MX Security Appliances](https://junglewise.ai/threats/technologies/meraki-mx-security-appliances): 9 vulnerabilities - [Cisco Nexus Dashboard](https://junglewise.ai/threats/technologies/nexus-dashboard): 9 vulnerabilities - [Cisco RoomOS](https://junglewise.ai/threats/technologies/roomos): 9 vulnerabilities - [Cisco Secure Firewall Adaptive Security Appliance (ASA) Software](https://junglewise.ai/threats/technologies/secure-firewall-adaptive-security-appliance-asa-software): 9 vulnerabilities - [Cisco Secure Firewall Management Center Software](https://junglewise.ai/threats/technologies/secure-firewall-management-center-software): 9 vulnerabilities - [Cisco Secure Firewall Threat Defense (FTD) Software](https://junglewise.ai/threats/technologies/secure-firewall-threat-defense-ftd-software): 9 vulnerabilities - [Cisco Unified Communications Manager IM & Presence Service](https://junglewise.ai/threats/technologies/unified-communications-manager-im-presence-service): 9 vulnerabilities - [Cisco Emergency Responder](https://junglewise.ai/threats/technologies/emergency-responder): 8 vulnerabilities - [Cisco Prime Collaboration Deployment](https://junglewise.ai/threats/technologies/prime-collaboration-deployment): 8 vulnerabilities - [Cisco ClamAV](https://junglewise.ai/threats/technologies/clamav): 7 vulnerabilities - [Cisco Download Manager](https://junglewise.ai/threats/technologies/download-manager): 7 vulnerabilities - [Cisco Expressway-C](https://junglewise.ai/threats/technologies/expressway-c): 7 vulnerabilities - [Cisco Expressway-E](https://junglewise.ai/threats/technologies/expressway-e): 7 vulnerabilities - [Cisco IOS XE Unified Threat Defense](https://junglewise.ai/threats/technologies/ios-xe-unified-threat-defense): 7 vulnerabilities - [Cisco Secure Email and Web Manager](https://junglewise.ai/threats/technologies/secure-email-and-web-manager): 7 vulnerabilities - [Cisco Secure Endpoint Connector for Linux](https://junglewise.ai/threats/technologies/secure-endpoint-connector-for-linux): 7 vulnerabilities - [Cisco Secure Endpoint Connector for Mac](https://junglewise.ai/threats/technologies/secure-endpoint-connector-for-mac): 7 vulnerabilities - [Cisco Secure Endpoint Connector for Windows](https://junglewise.ai/threats/technologies/secure-endpoint-connector-for-windows): 7 vulnerabilities - [Cisco Catalyst 8000V Edge Software](https://junglewise.ai/threats/technologies/catalyst-8000v-edge-software): 6 vulnerabilities - [Cisco Catalyst 8200 Series Edge Platforms](https://junglewise.ai/threats/technologies/catalyst-8200-series-edge-platforms): 6 vulnerabilities - [Cisco Cloud Services Router 1000V](https://junglewise.ai/threats/technologies/cloud-services-router-1000v): 6 vulnerabilities - [Cisco Crosswork Network Controller](https://junglewise.ai/threats/technologies/crosswork-network-controller): 6 vulnerabilities - [Cisco Secure Firewall Adaptive Security Appliance Software](https://junglewise.ai/threats/technologies/secure-firewall-adaptive-security-appliance-software): 6 vulnerabilities - [Cisco Unified Contact Center Express](https://junglewise.ai/threats/technologies/unified-contact-center-express): 6 vulnerabilities - [Cisco Catalyst 8300 Series Edge Platforms](https://junglewise.ai/threats/technologies/catalyst-8300-series-edge-platforms): 5 vulnerabilities - [Cisco RV160](https://junglewise.ai/threats/technologies/rv160): 5 vulnerabilities - [Cisco RV260](https://junglewise.ai/threats/technologies/rv260): 5 vulnerabilities - [Cisco RV340](https://junglewise.ai/threats/technologies/rv340): 5 vulnerabilities - [Cisco RV345 Series Routers](https://junglewise.ai/threats/technologies/rv345-series-routers): 5 vulnerabilities - [Cisco Secure Firewall Management Center (FMC)](https://junglewise.ai/threats/technologies/secure-firewall-management-center-fmc): 5 vulnerabilities - [Cisco Secure Workload](https://junglewise.ai/threats/technologies/secure-workload): 5 vulnerabilities - [Cisco Small Business Rv160](https://junglewise.ai/threats/technologies/small-business-rv160): 5 vulnerabilities - [Cisco Unified Computing System](https://junglewise.ai/threats/technologies/unified-computing-system): 5 vulnerabilities - [Cisco Catalyst 8500L Edge Platforms](https://junglewise.ai/threats/technologies/catalyst-8500l-edge-platforms): 4 vulnerabilities - [Cisco Catalyst Center](https://junglewise.ai/threats/technologies/catalyst-center): 4 vulnerabilities - [Cisco Secure Access](https://junglewise.ai/threats/technologies/cisco-secure-access): 4 vulnerabilities - [Cisco Cloud-delivered Firewall](https://junglewise.ai/threats/technologies/cloud-delivered-firewall): 4 vulnerabilities - [Cisco Crosswork Data Gateway](https://junglewise.ai/threats/technologies/crosswork-data-gateway): 4 vulnerabilities - [Cisco Crosswork Planning](https://junglewise.ai/threats/technologies/crosswork-planning): 4 vulnerabilities - [Cisco Crosswork Workflow Manager](https://junglewise.ai/threats/technologies/crosswork-workflow-manager): 4 vulnerabilities - [Cisco Prime Infrastructure](https://junglewise.ai/threats/technologies/prime-infrastructure): 4 vulnerabilities - [Cisco RV110W Wireless-N VPN Firewall](https://junglewise.ai/threats/technologies/rv110w): 4 vulnerabilities - [Cisco Secure Firewall Adaptive Security Appliance](https://junglewise.ai/threats/technologies/secure-firewall-adaptive-security-appliance): 4 vulnerabilities - [Cisco Unified Computing System E-Series Software](https://junglewise.ai/threats/technologies/unified-computing-system-e-series-software): 4 vulnerabilities - [Cisco Webex Meetings Server](https://junglewise.ai/threats/technologies/webex-meetings-server): 4 vulnerabilities - [Cisco Catalyst 8300 Series Edge uCPE](https://junglewise.ai/threats/technologies/catalyst-8300-series-edge-ucpe): 3 vulnerabilities - [Cisco Enterprise Nfv Infrastructure Software](https://junglewise.ai/threats/technologies/enterprise-nfv-infrastructure-software): 3 vulnerabilities - [Cisco Evolved Programmable Network Manager](https://junglewise.ai/threats/technologies/evolved-programmable-network-manager): 3 vulnerabilities - [Cisco Expressway Core](https://junglewise.ai/threats/technologies/expressway-core): 3 vulnerabilities - [Cisco Expressway Edge](https://junglewise.ai/threats/technologies/expressway-edge): 3 vulnerabilities - [Cisco IoT Field Network Director](https://junglewise.ai/threats/technologies/iot-field-network-director): 3 vulnerabilities - [Cisco Meraki MX Series](https://junglewise.ai/threats/technologies/meraki-mx-series): 3 vulnerabilities - [Cisco SD-WAN](https://junglewise.ai/threats/technologies/sd-wan): 3 vulnerabilities - [Cisco Secure Firewall Adaptive Security Appliance (Asa)](https://junglewise.ai/threats/technologies/secure-firewall-adaptive-security-appliance-asa): 3 vulnerabilities - [Cisco UCS S-Series Storage Servers](https://junglewise.ai/threats/technologies/ucs-s-series-storage-servers): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Cisco vulnerabilities", https://junglewise.ai/threats/vendors/cisco, 13 November 2026.