Cisco: every exploited CVE on CISA KEV
All 102 Cisco bugs attackers are confirmed to be using, with attack scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
102
Cisco bugs on CISA’s exploited list
20 added in 2026.
7
are linked to ransomware
Every Cisco vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-10-29 | CVE-2026-76418 | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability | 0.01 | 0.74 | None yet | No |
| 2026-10-14 | CVE-2026-76519 | Cisco Secure Email Gateway | Cisco Secure Email Gateway Relative Path Traversal Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-09-30 | CVE-2026-76504 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | 0.39 | 0.98 | Nuclei · Suricata | No |
| 2026-09-16 | CVE-2026-76460 | Cisco Identity Services Engine | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | 0.76 | 0.98 | None yet | No |
| 2026-09-14 | CVE-2026-76461 | Cisco Secure Email Gateway | Cisco Secure Email Gateway SQL Injection Vulnerability | 0.30 | 0.98 | None yet | No |
| 2026-09-09 | CVE-2026-20079 | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | 0.89 | 0.98 | Nuclei · Suricata | No |
| 2026-08-11 | CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-07-29 | CVE-2026-20316 | Cisco Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | 0.35 | 0.98 | None yet | Yes |
| 2026-07-13 | CVE-2008-4128 | Cisco IOS | Cisco IOS Cross-Site Request Forgery Vulnerability | 0.34 | 0.98 | None yet | No |
| 2026-06-25 | CVE-2026-20230 | Cisco Unified Communications Manager | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | 0.89 | 0.72 | None yet | No |
| 2026-06-15 | CVE-2026-20262 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | 0.29 | 0.58 | None yet | No |
| 2026-06-09 | CVE-2026-20245 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | 0.25 | 0.57 | Out of scope (local) | No |
| 2026-05-14 | CVE-2026-20182 | Cisco Catalyst SD-WAN | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 0.92 | 0.98 | None yet | No |
| 2026-04-20 | CVE-2026-20133 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 0.31 | 0.58 | None yet | No |
| 2026-04-20 | CVE-2026-20128 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | 0.07 | 0.53 | Out of scope (local) | No |
| 2026-04-20 | CVE-2026-20122 | Cisco Catalyst SD-WAN Manger | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | 0.26 | 0.57 | None yet | No |
| 2026-03-19 | CVE-2026-20131 | Cisco Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability | 0.44 | 0.98 | Suricata | Yes |
| 2026-02-25 | CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | 0.89 | 0.98 | None yet | No |
| 2026-02-25 | CVE-2022-20775 | Cisco SD-WAN | Cisco SD-WAN Path Traversal Vulnerability | 0.12 | 0.54 | Out of scope (local) | No |
| 2026-01-21 | CVE-2026-20045 | Cisco Unified Communications Manager | Cisco Unified Communications Products Code Injection Vulnerability | 0.05 | 0.97 | None yet | No |
| 2025-12-17 | CVE-2025-20393 | Cisco Multiple Products | Cisco Multiple Products Improper Input Validation Vulnerability | 0.32 | 0.97 | None yet | No |
| 2025-09-29 | CVE-2025-20352 | Cisco IOS and IOS XE | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | 0.42 | 0.79 | None yet | No |
| 2025-09-25 | CVE-2025-20362 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | 0.87 | 0.98 | Nuclei · Suricata | No |
| 2025-09-25 | CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | 0.71 | 0.98 | None yet | No |
| 2025-07-28 | CVE-2025-20337 | Cisco Identity Services Engine | Cisco Identity Services Engine Injection Vulnerability | 0.74 | 0.98 | Nuclei · Suricata | No |
| 2025-07-28 | CVE-2025-20281 | Cisco Identity Services Engine | Cisco Identity Services Engine Injection Vulnerability | 0.98 | 0.98 | Nuclei · Suricata | No |
| 2025-03-31 | CVE-2024-20439 | Cisco Smart Licensing Utility | Cisco Smart Licensing Utility Static Credential Vulnerability | 0.97 | 0.99 | Nuclei · Suricata | No |
| 2025-03-03 | CVE-2023-20118 | Cisco Small Business RV Series Routers | Cisco Small Business RV Series Routers Command Injection Vulnerability | 0.54 | 0.97 | None yet | No |
| 2024-11-12 | CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability | 0.23 | 0.77 | None yet | No |
| 2024-10-24 | CVE-2024-20481 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Denial-of-Service Vulnerability | 0.16 | 0.71 | None yet | No |
| 2024-07-02 | CVE-2024-20399 | Cisco NX-OS | Cisco NX-OS Command Injection Vulnerability | 0.04 | 0.70 | Out of scope (local) | No |
| 2024-04-24 | CVE-2024-20359 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Privilege Escalation Vulnerability | 0.19 | 0.72 | Out of scope (local) | No |
| 2024-04-24 | CVE-2024-20353 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Denial of Service Vulnerability | 0.70 | 0.79 | None yet | No |
| 2024-02-15 | CVE-2020-3259 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Information Disclosure Vulnerability | 0.71 | 0.98 | None yet | Yes |
| 2023-10-23 | CVE-2023-20273 | Cisco Cisco IOS XE Web UI | Cisco IOS XE Web UI Command Injection Vulnerability | 0.93 | 0.98 | None yet | No |
| 2023-10-16 | CVE-2023-20198 | Cisco IOS XE Web UI | Cisco IOS XE Web UI Privilege Escalation Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | No |
| 2023-10-10 | CVE-2023-20109 | Cisco IOS and IOS XE | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | 0.03 | 0.69 | None yet | No |
| 2023-09-13 | CVE-2023-20269 | Cisco Adaptive Security Appliance and Firepower Threat Defense | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability | 0.27 | 0.73 | None yet | Yes |
| 2023-05-19 | CVE-2016-6415 | Cisco IOS, IOS XR, and IOS XE | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability | 0.88 | 0.98 | None yet | No |
| 2023-05-19 | CVE-2004-1464 | Cisco IOS | Cisco IOS Denial-of-Service Vulnerability | 0.05 | 0.98 | None yet | No |
| 2023-04-19 | CVE-2017-6742 | Cisco IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 0.21 | 0.72 | None yet | No |
| 2022-10-24 | CVE-2020-3433 | Cisco AnyConnect Secure | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | 0.10 | 0.98 | Out of scope (local) | Yes |
| 2022-10-24 | CVE-2020-3153 | Cisco AnyConnect Secure | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | 0.29 | 0.98 | Out of scope (local) | Yes |
| 2022-06-08 | CVE-2019-15271 | Cisco RV Series Routers | Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability | 0.05 | 0.52 | None yet | No |
| 2022-05-24 | CVE-2016-6367 | Cisco Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability | 0.23 | 0.98 | Out of scope (local) | No |
| 2022-05-24 | CVE-2016-6366 | Cisco Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability | 0.88 | 0.98 | None yet | No |
| 2022-05-23 | CVE-2022-20821 | Cisco IOS XR | Cisco IOS XR Open Port Vulnerability | 0.11 | 0.54 | None yet | No |
| 2022-03-25 | CVE-2018-0147 | Cisco Secure Access Control System (ACS) | Cisco Secure Access Control System Java Deserialization Vulnerability | 0.18 | 0.55 | None yet | No |
| 2022-03-25 | CVE-2018-0125 | Cisco VPN Routers | Cisco VPN Routers Remote Code Execution Vulnerability | 0.55 | 0.87 | None yet | No |
| 2022-03-25 | CVE-2017-3881 | Cisco IOS and IOS XE | Cisco IOS and IOS XE Remote Code Execution Vulnerability | 0.99 | 0.99 | Nuclei · Suricata | No |
| 2022-03-25 | CVE-2015-0666 | Cisco Prime Data Center Network Manager (DCNM) | Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability | 0.40 | 0.98 | Nuclei · Suricata | No |
| 2022-03-25 | CVE-2010-3035 | Cisco IOS XR | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | 0.06 | 0.52 | None yet | No |
| 2022-03-25 | CVE-2009-2055 | Cisco IOS XR | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | 0.03 | 0.84 | None yet | No |
| 2022-03-03 | CVE-2022-20708 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 0.15 | 0.99 | Nuclei · Suricata | No |
| 2022-03-03 | CVE-2022-20703 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 0.09 | 0.98 | Nuclei · Suricata | No |
| 2022-03-03 | CVE-2022-20701 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 0.10 | 0.98 | None yet | No |
| 2022-03-03 | CVE-2022-20700 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 0.06 | 0.53 | None yet | No |
| 2022-03-03 | CVE-2022-20699 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 0.72 | 0.99 | Nuclei · Suricata | No |
| 2022-03-03 | CVE-2019-1652 | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | Cisco Small Business Routers Improper Input Validation Vulnerability | 0.96 | 0.99 | None yet | No |
| 2022-03-03 | CVE-2018-0180 | Cisco IOS Software | Cisco IOS Software Denial-of-Service Vulnerability | 0.05 | 0.52 | None yet | No |
| 2022-03-03 | CVE-2018-0179 | Cisco IOS Software | Cisco IOS Software Denial-of-Service Vulnerability | 0.05 | 0.52 | None yet | No |
| 2022-03-03 | CVE-2018-0175 | Cisco IOS, XR, and XE Software | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | 0.03 | 0.96 | None yet | No |
| 2022-03-03 | CVE-2018-0174 | Cisco IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability | 0.08 | 0.94 | None yet | No |
| 2022-03-03 | CVE-2018-0173 | Cisco IOS and IOS XE Software | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | 0.08 | 0.94 | None yet | No |
| 2022-03-03 | CVE-2018-0172 | Cisco IOS and IOS XE Software | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | 0.08 | 0.94 | None yet | No |
| 2022-03-03 | CVE-2018-0167 | Cisco IOS, XR, and XE Software | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | 0.03 | 0.97 | None yet | No |
| 2022-03-03 | CVE-2018-0161 | Cisco IOS Software | Cisco IOS Software Resource Management Errors Vulnerability | 0.04 | 0.52 | None yet | No |
| 2022-03-03 | CVE-2018-0159 | Cisco IOS Software and Cisco IOS XE Software | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability | 0.07 | 0.53 | None yet | No |
| 2022-03-03 | CVE-2018-0158 | Cisco IOS Software and Cisco IOS XE Software | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability | 0.07 | 0.94 | None yet | No |
| 2022-03-03 | CVE-2018-0156 | Cisco IOS Software and Cisco IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability | 0.09 | 0.93 | None yet | No |
| 2022-03-03 | CVE-2018-0155 | Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability | 0.08 | 0.84 | None yet | No |
| 2022-03-03 | CVE-2018-0154 | Cisco IOS Software | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability | 0.07 | 0.52 | None yet | No |
| 2022-03-03 | CVE-2018-0151 | Cisco IOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability | 0.14 | 0.97 | None yet | No |
| 2022-03-03 | CVE-2017-6744 | Cisco IOS software | Cisco IOS Software SNMP Remote Code Execution Vulnerability | 0.07 | 0.52 | None yet | No |
| 2022-03-03 | CVE-2017-6743 | Cisco IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 0.11 | 0.53 | None yet | No |
| 2022-03-03 | CVE-2017-6740 | Cisco IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 0.11 | 0.53 | None yet | No |
| 2022-03-03 | CVE-2017-6739 | Cisco IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 0.11 | 0.54 | None yet | No |
| 2022-03-03 | CVE-2017-6738 | Cisco IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 0.11 | 0.76 | None yet | No |
| 2022-03-03 | CVE-2017-6737 | Cisco IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 0.45 | 0.79 | None yet | No |
| 2022-03-03 | CVE-2017-6736 | Cisco IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 0.70 | 0.98 | None yet | No |
| 2022-03-03 | CVE-2017-6663 | Cisco IOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability | 0.02 | 0.51 | None yet | No |
| 2022-03-03 | CVE-2017-6627 | Cisco IOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability | 0.06 | 0.53 | None yet | No |
| 2022-03-03 | CVE-2017-12319 | Cisco IOS XE Software | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability | 0.05 | 0.53 | None yet | No |
| 2022-03-03 | CVE-2017-12240 | Cisco IOS and IOS XE Software | Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability | 0.14 | 0.54 | None yet | No |
| 2022-03-03 | CVE-2017-12238 | Cisco Catalyst 6800 Series Switches | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability | 0.02 | 0.51 | None yet | No |
| 2022-03-03 | CVE-2017-12237 | Cisco IOS and IOS XE Software | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability | 0.07 | 0.52 | None yet | No |
| 2022-03-03 | CVE-2017-12235 | Cisco IOS software | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability | 0.07 | 0.53 | None yet | No |
| 2022-03-03 | CVE-2017-12234 | Cisco IOS software | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | 0.07 | 0.52 | None yet | No |
| 2022-03-03 | CVE-2017-12233 | Cisco IOS software | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | 0.07 | 0.53 | None yet | No |
| 2022-03-03 | CVE-2017-12232 | Cisco IOS software | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability | 0.02 | 0.51 | None yet | No |
| 2022-03-03 | CVE-2017-12231 | Cisco IOS software | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability | 0.07 | 0.53 | None yet | No |
| 2021-11-03 | CVE-2021-1498 | Cisco HyperFlex HX | Cisco HyperFlex HX Data Platform Command Injection Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2021-1497 | Cisco HyperFlex HX | Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2020-3580 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | 0.86 | 0.98 | Nuclei · Suricata | Yes |
| 2021-11-03 | CVE-2020-3569 | Cisco IOS XR | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 0.03 | 0.52 | None yet | No |
| 2021-11-03 | CVE-2020-3566 | Cisco IOS XR | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 0.04 | 0.52 | None yet | No |
| 2021-11-03 | CVE-2020-3452 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Read-Only Path Traversal Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2020-3161 | Cisco Cisco IP Phones | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | 0.84 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2020-3118 | Cisco IOS XR | Cisco IOS XR Software Discovery Protocol Format String Vulnerability | 0.12 | 0.79 | None yet | No |
| 2021-11-03 | CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2018-0171 | Cisco IOS and IOS XE | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | 0.99 | 0.99 | None yet | No |
Industry partners
