Cisco vulnerabilities93 known to be exploited.
Cisco has 6,360 published vulnerabilities across 6,582 products in our catalogue. 93 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is IOS, with 598. If you run Cisco software, patch the exploited flaws first.
The most recent Cisco flaw added to the known-exploited list is CVE-2026-76504, on 30 September 2026. We keep watching the known-exploited list.
Which Cisco products have the most vulnerabilities?
IOS leads with 598 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Cisco vulnerabilities are being exploited?
93 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI...
- 10.0Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain...
- 5.3Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an...
- 8.1Cisco IOS Cross-Site Request Forgery Vulnerability
Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain...
- 8.6Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an...
- 7.8Cisco SD-WAN Path Traversal Vulnerability
Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application CLI.
- 7.7Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution.
- 9.9Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution.
Which Cisco flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 96%CVE-1999-0016Medium
Land IP denial of service.
- 83%CVE-2005-0356Medium
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with...
- 80%CVE-2002-1359Critical
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as...
- 73%CVE-2000-0945Critical
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.
- 70%CVE-2011-2039High
The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.exe) without...
- 68%CVE-2001-0537Critical
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
- 65%CVE-2008-3558Critical
Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the...
- 57%CVE-2008-0532Critical
Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to execute...
All Cisco products we track.
253 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- IOSios598 vulnerabilities8,443 versions
- IOS XEios_xe506 vulnerabilities1,101 versions
- Adaptive Security Appliance Softwareadaptive_security_appliance_software324 vulnerabilities1,062 versions
- NX-OSnx-os275 vulnerabilities1,098 versions
- Unified Communications Managerunified_communications_manager233 vulnerabilities306 versions
- Firepower Threat Defensefirepower_threat_defense220 vulnerabilities380 versions
- IOS XRios_xr188 vulnerabilities320 versions
- Identity Services Engineidentity_services_engine149 vulnerabilities111 versions
- Webex Meetings Serverwebex_meetings_server136 vulnerabilities63 versions
- Firepower Management Centerfirepower_management_center130 vulnerabilities207 versions
- Rv110w Firmwarerv110w_firmware128 vulnerabilities42 versions
- Rv130w Firmwarerv130w_firmware127 vulnerabilities42 versions
- Unified Computing Systemunified_computing_system109 vulnerabilities326 versions
- Wireless LAN Controller Softwarewireless_lan_controller_software88 vulnerabilities219 versions
- Prime Infrastructureprime_infrastructure81 vulnerabilities149 versions
- Application Extension Platformapplication_extension_platform79 vulnerabilities2 versions
- Catalyst SD-WAN Managercatalyst_sd-wan_manager74 vulnerabilities305 versions
- Web Security Applianceweb_security_appliance73 vulnerabilities125 versions
- ASA 5580asa_558072 vulnerabilities1 version
- Rv215w Firmwarerv215w_firmware71 vulnerabilities42 versions
- Anyconnect Secure Mobility Clientanyconnect_secure_mobility_client68 vulnerabilities160 versions
- Data Center Network Managerdata_center_network_manager68 vulnerabilities20 versions
- Rv215w Wireless-N VPN Router Firmwarerv215w_wireless-n_vpn_router_firmware68 vulnerabilities7 versions
- Adaptive Security Applianceadaptive_security_appliance65 vulnerabilities355 versions
This directory lists the 253 Cisco products with at least one tracked version, of 6,582 in our catalogue.
Running Cisco? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.
- Matched to
- Catalyst SD-WAN Manager on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 6,360 published vulnerabilities across 6,582 products and 34,538 versions from Cisco. The most recent Cisco flaw added to the known-exploited list is CVE-2026-76504, on 30 September 2026.
93 Cisco vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2026-76504, CVE-2026-76460 and CVE-2026-20316. The full list is on this page.
IOS, with 598 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a EdgeProtect account and track the Cisco products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.