Vendor dossier / #2
Cisco vulnerabilities in CISA KEV
Answer CISA's KEV catalog lists 99 Cisco vulnerabilities as of catalog 2026.09.23, 5.8% of all 1,721 entries and rank 2 of 283 vendors. The first was added on 2021-11-03 and the most recent on 2026-09-16; 7 are flagged as used in ransomware campaigns.
- KEV entries
- 995.8% of catalog
- Last 90 days
- +6added
- Ransomware: known
- 77.1%
- Products
- 43distinct
- First added
- 2021-11-03
- Latest added
- 2026-09-16
- Median days to due
- 21
- Open deadlines
- 0federal
TAdditions per quarter
Table view (by year)
| Year | Added |
|---|---|
| 2021 | 11 |
| 2022 | 50 |
| 2023 | 7 |
| 2024 | 6 |
| 2025 | 8 |
| 2026 | 17 |
QCommon questions
How many Cisco vulnerabilities are in CISA KEV?
99, as of KEV catalog 2026.09.23 (released 2026-09-23). That is 5.8% of the catalog.
Which Cisco product has the most KEV entries?
IOS and IOS XE Software, with 14 entries. 43 products appear in total.
How many Cisco KEV vulnerabilities are linked to ransomware?
7 of 99 (7.1%) are flagged by CISA as known to be used in ransomware campaigns.
When was the latest Cisco vulnerability added to KEV?
2026-09-16 (CVE-2026-76460).
What is the most common weakness in Cisco KEV entries?
CWE-20 (Improper input validation), listed on 21 entries.
PProducts
| Product | Entries | Share of vendor |
|---|---|---|
| IOS and IOS XE Software | 14 | 14.1% |
| Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 6 | 6.1% |
| IOS XR | 6 | 6.1% |
| IOS software | 6 | 6.1% |
| Small Business RV160, RV260, RV340, and RV345 Series Routers | 5 | 5.1% |
| Catalyst SD-WAN Manager | 4 | 4% |
| IOS and IOS XE | 4 | 4% |
| Adaptive Security Appliance (ASA) | 4 | 4% |
| IOS Software | 4 | 4% |
| Identity Services Engine | 3 | 3% |
| IOS Software and Cisco IOS XE Software | 3 | 3% |
| Secure Firewall Management Center (FMC) | 2 | 2% |
| IOS | 2 | 2% |
| Unified Communications Manager | 2 | 2% |
| Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2 | 2% |
| AnyConnect Secure | 2 | 2% |
| IOS, XR, and XE Software | 2 | 2% |
| IOS XE Software | 2 | 2% |
| HyperFlex HX | 2 | 2% |
| Secure Email Gateway | 1 | 1% |
| Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 1 | 1% |
| Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 1 | 1% |
| Catalyst SD-WAN | 1 | 1% |
| Catalyst SD-WAN Manger | 1 | 1% |
| Catalyst SD-WAN Controller and Manager | 1 | 1% |
| SD-WAN | 1 | 1% |
| Multiple Products | 1 | 1% |
| Smart Licensing Utility | 1 | 1% |
| Small Business RV Series Routers | 1 | 1% |
| NX-OS | 1 | 1% |
| Cisco IOS XE Web UI | 1 | 1% |
| IOS XE Web UI | 1 | 1% |
| Adaptive Security Appliance and Firepower Threat Defense | 1 | 1% |
| IOS, IOS XR, and IOS XE | 1 | 1% |
| RV Series Routers | 1 | 1% |
| Secure Access Control System (ACS) | 1 | 1% |
| VPN Routers | 1 | 1% |
| Prime Data Center Network Manager (DCNM) | 1 | 1% |
| Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | 1 | 1% |
| Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | 1 | 1% |
| Catalyst 6800 Series Switches | 1 | 1% |
| Cisco IP Phones | 1 | 1% |
| Small Business RV320 and RV325 Routers | 1 | 1% |
WWeaknesses
| CWE | Entries | Share of vendor |
|---|---|---|
| CWE-20 Improper input validation | 21 | 21.2% |
| CWE-119 Memory buffer bounds error | 12 | 12.1% |
| CWE-399 Resource management errors (category) | 10 | 10.1% |
| CWE-121 Stack-based buffer overflow | 4 | 4% |
| CWE-78 OS command injection | 4 | 4% |
| CWE-200 Information exposure | 3 | 3% |
| CWE-648 | 2 | 2% |
| CWE-288 Authentication bypass via alternate path | 2 | 2% |
| CWE-22 Path traversal | 2 | 2% |
| CWE-287 Improper authentication | 2 | 2% |
| CWE-502 Unsafe deserialization | 2 | 2% |
| CWE-94 Code injection | 2 | 2% |
| No CWE listed | 2 | 2% |
EAll 99 entries
| CVE | Product | Vulnerability | Added | Due | Ransomware | CWE |
|---|---|---|---|---|---|---|
| CVE-2026-76460 | Identity Services Engine | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | Unknown | CWE-648 | ||
| CVE-2026-76461 | Secure Email Gateway | Cisco Secure Email Gateway SQL Injection Vulnerability | Unknown | CWE-89 | ||
| CVE-2026-20079 | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | Unknown | CWE-288 | ||
| CVE-2026-20349 | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | Unknown | CWE-244 | ||
| CVE-2026-20316 | Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | Known | CWE-259 | ||
| CVE-2008-4128 | IOS | Cisco IOS Cross-Site Request Forgery Vulnerability | Unknown | CWE-352 | ||
| CVE-2026-20230 | Unified Communications Manager | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | Unknown | CWE-918 | ||
| CVE-2026-20262 | Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | Unknown | CWE-22 | ||
| CVE-2026-20245 | Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | Unknown | CWE-116 | ||
| CVE-2026-20182 | Catalyst SD-WAN | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | Unknown | CWE-287 | ||
| CVE-2026-20133 | Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | Unknown | CWE-200 | ||
| CVE-2026-20128 | Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | Unknown | CWE-257 | ||
| CVE-2026-20122 | Catalyst SD-WAN Manger | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | Unknown | CWE-648 | ||
| CVE-2026-20131 | Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability | Known | CWE-502 | ||
| CVE-2026-20127 | Catalyst SD-WAN Controller and Manager | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | Unknown | CWE-287 | ||
| CVE-2022-20775 | SD-WAN | Cisco SD-WAN Path Traversal Vulnerability | Unknown | CWE-25, CWE-282 | ||
| CVE-2026-20045 | Unified Communications Manager | Cisco Unified Communications Products Code Injection Vulnerability | Unknown | CWE-94 | ||
| CVE-2025-20393 | Multiple Products | Cisco Multiple Products Improper Input Validation Vulnerability | Unknown | CWE-20 | ||
| CVE-2025-20352 | IOS and IOS XE | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | Unknown | CWE-121 | ||
| CVE-2025-20362 | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | Unknown | CWE-862 | ||
| CVE-2025-20333 | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | Unknown | CWE-120 | ||
| CVE-2025-20337 | Identity Services Engine | Cisco Identity Services Engine Injection Vulnerability | Unknown | CWE-74 | ||
| CVE-2025-20281 | Identity Services Engine | Cisco Identity Services Engine Injection Vulnerability | Unknown | CWE-74 | ||
| CVE-2024-20439 | Smart Licensing Utility | Cisco Smart Licensing Utility Static Credential Vulnerability | Unknown | CWE-912 | ||
| CVE-2023-20118 | Small Business RV Series Routers | Cisco Small Business RV Series Routers Command Injection Vulnerability | Unknown | CWE-77 | ||
| CVE-2014-2120 | Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability | Unknown | CWE-79 | ||
| CVE-2024-20481 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Denial-of-Service Vulnerability | Unknown | CWE-772 | ||
| CVE-2024-20399 | NX-OS | Cisco NX-OS Command Injection Vulnerability | Unknown | CWE-78 | ||
| CVE-2024-20359 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Privilege Escalation Vulnerability | Unknown | CWE-94 | ||
| CVE-2024-20353 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Denial of Service Vulnerability | Unknown | CWE-835 | ||
| CVE-2020-3259 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Information Disclosure Vulnerability | Known | CWE-200 | ||
| CVE-2023-20273 | Cisco IOS XE Web UI | Cisco IOS XE Web UI Command Injection Vulnerability | Unknown | CWE-78 | ||
| CVE-2023-20198 | IOS XE Web UI | Cisco IOS XE Web UI Privilege Escalation Vulnerability | Unknown | CWE-420 | ||
| CVE-2023-20109 | IOS and IOS XE | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | Unknown | CWE-787 | ||
| CVE-2023-20269 | Adaptive Security Appliance and Firepower Threat Defense | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability | Known | CWE-288 | ||
| CVE-2016-6415 | IOS, IOS XR, and IOS XE | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability | Unknown | CWE-200 | ||
| CVE-2004-1464 | IOS | Cisco IOS Denial-of-Service Vulnerability | Unknown | none listed | ||
| CVE-2017-6742 | IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Unknown | CWE-119 | ||
| CVE-2020-3433 | AnyConnect Secure | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | Known | CWE-427 | ||
| CVE-2020-3153 | AnyConnect Secure | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | Known | CWE-427 | ||
| CVE-2019-15271 | RV Series Routers | Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability | Unknown | CWE-502 | ||
| CVE-2016-6367 | Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability | Unknown | CWE-77 | ||
| CVE-2016-6366 | Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability | Unknown | CWE-119 | ||
| CVE-2022-20821 | IOS XR | Cisco IOS XR Open Port Vulnerability | Unknown | CWE-923 | ||
| CVE-2018-0147 | Secure Access Control System (ACS) | Cisco Secure Access Control System Java Deserialization Vulnerability | Unknown | CWE-20 | ||
| CVE-2018-0125 | VPN Routers | Cisco VPN Routers Remote Code Execution Vulnerability | Unknown | CWE-20 | ||
| CVE-2017-3881 | IOS and IOS XE | Cisco IOS and IOS XE Remote Code Execution Vulnerability | Unknown | CWE-20 | ||
| CVE-2015-0666 | Prime Data Center Network Manager (DCNM) | Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability | Unknown | CWE-22 | ||
| CVE-2010-3035 | IOS XR | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | Unknown | CWE-20 | ||
| CVE-2009-2055 | IOS XR | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | Unknown | CWE-20 | ||
| CVE-2022-20708 | Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Unknown | CWE-121 | ||
| CVE-2022-20703 | Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Unknown | CWE-347 | ||
| CVE-2022-20701 | Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Unknown | CWE-121 | ||
| CVE-2022-20700 | Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Unknown | CWE-121 | ||
| CVE-2022-20699 | Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Unknown | CWE-785 | ||
| CVE-2019-1652 | Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | Cisco Small Business Routers Improper Input Validation Vulnerability | Unknown | CWE-20 | ||
| CVE-2018-0180 | IOS Software | Cisco IOS Software Denial-of-Service Vulnerability | Unknown | CWE-399 | ||
| CVE-2018-0179 | IOS Software | Cisco IOS Software Denial-of-Service Vulnerability | Unknown | CWE-399 | ||
| CVE-2018-0175 | IOS, XR, and XE Software | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | Unknown | CWE-119 | ||
| CVE-2018-0174 | IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability | Unknown | CWE-20 | ||
| CVE-2018-0173 | IOS and IOS XE Software | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | Unknown | CWE-20 | ||
| CVE-2018-0172 | IOS and IOS XE Software | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | Unknown | CWE-20 | ||
| CVE-2018-0167 | IOS, XR, and XE Software | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | Unknown | CWE-119 | ||
| CVE-2018-0161 | IOS Software | Cisco IOS Software Resource Management Errors Vulnerability | Unknown | CWE-399 | ||
| CVE-2018-0159 | IOS Software and Cisco IOS XE Software | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability | Unknown | CWE-20 | ||
| CVE-2018-0158 | IOS Software and Cisco IOS XE Software | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability | Unknown | CWE-20 | ||
| CVE-2018-0156 | IOS Software and Cisco IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability | Unknown | CWE-399 | ||
| CVE-2018-0155 | Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability | Unknown | CWE-388 | ||
| CVE-2018-0154 | IOS Software | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability | Unknown | CWE-399 | ||
| CVE-2018-0151 | IOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability | Unknown | CWE-119 | ||
| CVE-2017-6744 | IOS software | Cisco IOS Software SNMP Remote Code Execution Vulnerability | Unknown | CWE-119 | ||
| CVE-2017-6743 | IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Unknown | CWE-119 | ||
| CVE-2017-6740 | IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Unknown | CWE-119 | ||
| CVE-2017-6739 | IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Unknown | CWE-119 | ||
| CVE-2017-6738 | IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Unknown | CWE-119 | ||
| CVE-2017-6737 | IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Unknown | CWE-119 | ||
| CVE-2017-6736 | IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Unknown | CWE-119 | ||
| CVE-2017-6663 | IOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability | Unknown | none listed | ||
| CVE-2017-6627 | IOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability | Unknown | CWE-399 | ||
| CVE-2017-12319 | IOS XE Software | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability | Unknown | CWE-20 | ||
| CVE-2017-12240 | IOS and IOS XE Software | Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability | Unknown | CWE-20 | ||
| CVE-2017-12238 | Catalyst 6800 Series Switches | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability | Unknown | CWE-399 | ||
| CVE-2017-12237 | IOS and IOS XE Software | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability | Unknown | CWE-399 | ||
| CVE-2017-12235 | IOS software | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability | Unknown | CWE-20 | ||
| CVE-2017-12234 | IOS software | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | Unknown | CWE-20 | ||
| CVE-2017-12233 | IOS software | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | Unknown | CWE-20 | ||
| CVE-2017-12232 | IOS software | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability | Unknown | CWE-399 | ||
| CVE-2017-12231 | IOS software | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability | Unknown | CWE-399 | ||
| CVE-2021-1498 | HyperFlex HX | Cisco HyperFlex HX Data Platform Command Injection Vulnerability | Unknown | CWE-78 | ||
| CVE-2021-1497 | HyperFlex HX | Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | Unknown | CWE-78 | ||
| CVE-2020-3580 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | Known | CWE-79 | ||
| CVE-2020-3569 | IOS XR | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | Unknown | CWE-400 | ||
| CVE-2020-3566 | IOS XR | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | Unknown | CWE-400 | ||
| CVE-2020-3452 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Read-Only Path Traversal Vulnerability | Unknown | CWE-20 | ||
| CVE-2020-3161 | Cisco IP Phones | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | Unknown | CWE-20 | ||
| CVE-2020-3118 | IOS XR | Cisco IOS XR Software Discovery Protocol Format String Vulnerability | Unknown | CWE-134 | ||
| CVE-2019-1653 | Small Business RV320 and RV325 Routers | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | Unknown | CWE-284 | ||
| CVE-2018-0296 | Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | Unknown | CWE-20 | ||
| CVE-2018-0171 | IOS and IOS XE | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | Unknown | CWE-20 |
Cite this
CISA's Known Exploited Vulnerabilities catalog lists 99 Cisco vulnerabilities (5.8% of all entries). Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/vendors/cisco/
Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23. Vendor names are CISA's vendorProject strings; Telemetry states no facts about Cisco beyond this data.