Cisco vulnerabilities
87 advisories tracked, 39 actively exploited. Last update: October 30, 2026.
By product: ASA / Firepower Threat Defense (28) · Contact Center (UCCX, Finesse, CUIC) (2) · Catalyst SD-WAN (11) · Identity Services Engine (ISE) (5) · Unified CM / Expressway / Webex (9) · UCS / CIMC / Intersight (2) · IOS XR (2) · Secure Client (AnyConnect) (1) · Meraki (1) · Secure Email (ESA) / AsyncOS (6) · NX-OS (Nexus) (9) · Smart Licensing / SSM On-Prem (3) · APIC / ACI (4) · IOS e IOS XE (3) · Secure Firewall Management Center (4) · Router e switch Small Business (RV, CBS) (1)
Running Cisco devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Cisco alerts
Turn on Cisco alerts
- Vulnerabilities in Node.js Affecting Cisco Products: October 2026
- Vulnerabilities in PHP Affecting Cisco Products: October 2026
- Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
- Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
- Cisco Finesse Server-Side Request Forgery Vulnerability
- Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
- Cisco Advance Notification for Publication of November 4, 2026, Security Advisories
- Cisco Unified Communications Products Security Hardening Release: October 2026
- Cisco Expressway Series Security Hardening Release: October 2026
- Multiple Cisco Products Snort 3 Security Hardening Release: October 2026
- Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
- Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities
- Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability
- Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability
- Multiple Cisco Products Snort 3 Denial of Service Vulnerability
- Cisco Expressway Series Remote Code Execution Vulnerability
- Cisco Advance Notification for Publication of October 21, 2026, Security Advisories
- Cisco: Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability
- Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability
- Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability
- Cisco Expressway Series Information Disclosure Vulnerability
- Cisco Unified Communications Manager Improper Access Control Vulnerability
- Cisco Unified Intelligence Center SQL Injection Vulnerability
- Cisco Meraki Security Hardening Release: October 2026
- Cisco Secure Email Gateway Relative Path Traversal Vulnerability
- Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
- Cisco Secure Email Gateway Arbitrary File Write Vulnerability
- Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability
- Cisco NX-OS Software NX-API Remote Code Execution Vulnerability
- Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026
- Cisco Advance Notification for Publication of October 7, 2026, Security Advisories
- Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability
- Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities
- Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026
- Cisco NX-OS Software Security Hardening Release: October 2026
- Cisco License (Smart Software Manager) On-Prem Vulnerabilities
- Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability
- Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability
- Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass Vulnerability
- Cisco NX-OS Software Control Plane Denial of Service Vulnerability
- Cisco NX-OS Software Python Sandbox Escape Vulnerability
- Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability
- Cisco IOS XE Software Security Hardening Release: August 2026
- Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
- Cisco Identity Services Engine Authentication Bypass Vulnerabilities
- Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026
- Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Object Group Access Control List Bypass Vulnerabilities
- Cisco IOS XR Software Security Hardening Release: September 2026
- Cisco Secure Email Gateway SQL Injection Vulnerability
- Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
- Cisco Secure Email Gateway SQL Injection Vulnerability
- Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
- Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
- Cisco IOS Cross-Site Request Forgery Vulnerability
- Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
- Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
- Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
- Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
- Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
- Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
- Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
- Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
- Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
- Cisco SD-WAN Path Traversal Vulnerability
- Cisco Unified Communications Products Code Injection Vulnerability
- Cisco Multiple Products Improper Input Validation Vulnerability
- Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
- Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
- Cisco Identity Services Engine Injection Vulnerability
- Cisco Identity Services Engine Injection Vulnerability
- Cisco Smart Licensing Utility Static Credential Vulnerability
- Cisco Small Business RV Series Routers Command Injection Vulnerability
- Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
- Cisco ASA and FTD Denial-of-Service Vulnerability
- Cisco NX-OS Command Injection Vulnerability
- Cisco ASA and FTD Denial of Service Vulnerability
- Cisco ASA and FTD Privilege Escalation Vulnerability
- Cisco ASA and FTD Information Disclosure Vulnerability