Vendor scorecard
CISA lists 103 Cisco vulnerabilities as exploited in the wild, 22 of them added in the last 12 months (up from 7 in the 12 months before). 7 (7%) are known to be used in ransomware campaigns. For entries added in the last two years, the median time from CVE publication to the KEV listing was 5 days. Most affected: IOS and IOS XE Software (14), Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) (6), IOS XR (6).
| Product | KEV entries |
|---|---|
| IOS and IOS XE Software | 14 |
| Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 6 |
| IOS XR | 6 |
| IOS software | 6 |
| Catalyst SD-WAN Manager | 5 |
| Small Business RV160, RV260, RV340, and RV345 Series Routers | 5 |
| IOS and IOS XE | 4 |
| Adaptive Security Appliance (ASA) | 4 |
| IOS Software | 4 |
| Identity Services Engine | 3 |
| IOS Software and Cisco IOS XE Software | 3 |
| Secure Email Gateway | 2 |
| CVE | Vulnerability | Added |
|---|---|---|
| CVE-2026-20320 | Cisco BroadWorks Improper Restriction of XML External Entity Reference VulnerabilityBroadWorks | |
| CVE-2026-76418 | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilitySecure Firewall ASA Software and Cisco Secure FTD Software | |
| CVE-2026-76519 | Cisco Secure Email Gateway Relative Path Traversal VulnerabilitySecure Email Gateway | |
| CVE-2026-76504 | Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCatalyst SD-WAN Manager | |
| CVE-2026-76460 | Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityIdentity Services Engine | |
| CVE-2026-76461 | Cisco Secure Email Gateway SQL Injection VulnerabilitySecure Email Gateway | |
| CVE-2026-20079 | Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilitySecure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | |
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilitySecure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | |
| CVE-2026-20316 | Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityRANSOMWARESecure Firewall Management Center (FMC) | |
| CVE-2008-4128 | Cisco IOS Cross-Site Request Forgery VulnerabilityIOS | |
| CVE-2026-20230 | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityUnified Communications Manager | |
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityCatalyst SD-WAN Manager | |
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityCatalyst SD-WAN Manager | |
| CVE-2026-20182 | Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCatalyst SD-WAN | |
| CVE-2026-20133 | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityCatalyst SD-WAN Manager | |
| CVE-2026-20128 | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityCatalyst SD-WAN Manager | |
| CVE-2026-20122 | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityCatalyst SD-WAN Manger | |
| CVE-2026-20131 | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityRANSOMWARESecure Firewall Management Center (FMC) | |
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityCatalyst SD-WAN Controller and Manager | |
| CVE-2022-20775 | Cisco SD-WAN Path Traversal VulnerabilitySD-WAN | |
| CVE-2026-20045 | Cisco Unified Communications Products Code Injection VulnerabilityUnified Communications Manager | |
| CVE-2025-20393 | Cisco Multiple Products Improper Input Validation VulnerabilityMultiple Products | |
| CVE-2025-20352 | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution VulnerabilityIOS and IOS XE | |
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilitySecure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | |
| CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilitySecure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | |
| CVE-2025-20337 | Cisco Identity Services Engine Injection VulnerabilityIdentity Services Engine | |
| CVE-2025-20281 | Cisco Identity Services Engine Injection VulnerabilityIdentity Services Engine | |
| CVE-2024-20439 | Cisco Smart Licensing Utility Static Credential VulnerabilitySmart Licensing Utility | |
| CVE-2023-20118 | Cisco Small Business RV Series Routers Command Injection VulnerabilitySmall Business RV Series Routers | |
| CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) VulnerabilityAdaptive Security Appliance (ASA) | |
| CVE-2024-20481 | Cisco ASA and FTD Denial-of-Service VulnerabilityAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | |
| CVE-2024-20399 | Cisco NX-OS Command Injection VulnerabilityNX-OS | |
| CVE-2024-20359 | Cisco ASA and FTD Privilege Escalation VulnerabilityAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | |
| CVE-2024-20353 | Cisco ASA and FTD Denial of Service VulnerabilityAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | |
| CVE-2020-3259 | Cisco ASA and FTD Information Disclosure VulnerabilityRANSOMWAREAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | |
| CVE-2023-20273 | Cisco IOS XE Web UI Command Injection VulnerabilityCisco IOS XE Web UI | |
| CVE-2023-20198 | Cisco IOS XE Web UI Privilege Escalation VulnerabilityIOS XE Web UI | |
| CVE-2023-20109 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write VulnerabilityIOS and IOS XE | |
| CVE-2023-20269 | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityRANSOMWAREAdaptive Security Appliance and Firepower Threat Defense | |
| CVE-2016-6415 | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure VulnerabilityIOS, IOS XR, and IOS XE | |
| CVE-2004-1464 | Cisco IOS Denial-of-Service VulnerabilityIOS | |
| CVE-2017-6742 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityIOS and IOS XE Software | |
| CVE-2020-3433 | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityRANSOMWAREAnyConnect Secure | |
| CVE-2020-3153 | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityRANSOMWAREAnyConnect Secure | |
| CVE-2019-15271 | Cisco RV Series Routers Deserialization of Untrusted Data VulnerabilityRV Series Routers | |
| CVE-2016-6367 | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution VulnerabilityAdaptive Security Appliance (ASA) | |
| CVE-2016-6366 | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow VulnerabilityAdaptive Security Appliance (ASA) | |
| CVE-2022-20821 | Cisco IOS XR Open Port VulnerabilityIOS XR | |
| CVE-2018-0147 | Cisco Secure Access Control System Java Deserialization VulnerabilitySecure Access Control System (ACS) | |
| CVE-2018-0125 | Cisco VPN Routers Remote Code Execution VulnerabilityVPN Routers | |
| CVE-2017-3881 | Cisco IOS and IOS XE Remote Code Execution VulnerabilityIOS and IOS XE | |
| CVE-2015-0666 | Cisco Prime Data Center Network Manager (DCNM) Directory Traversal VulnerabilityPrime Data Center Network Manager (DCNM) | |
| CVE-2010-3035 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityIOS XR | |
| CVE-2009-2055 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityIOS XR | |
| CVE-2022-20708 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilitySmall Business RV160, RV260, RV340, and RV345 Series Routers | |
| CVE-2022-20703 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilitySmall Business RV160, RV260, RV340, and RV345 Series Routers | |
| CVE-2022-20701 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilitySmall Business RV160, RV260, RV340, and RV345 Series Routers | |
| CVE-2022-20700 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilitySmall Business RV160, RV260, RV340, and RV345 Series Routers | |
| CVE-2022-20699 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilitySmall Business RV160, RV260, RV340, and RV345 Series Routers | |
| CVE-2019-1652 | Cisco Small Business Routers Improper Input Validation VulnerabilitySmall Business RV320 and RV325 Dual Gigabit WAN VPN Routers | |
| CVE-2018-0180 | Cisco IOS Software Denial-of-Service VulnerabilityIOS Software | |
| CVE-2018-0179 | Cisco IOS Software Denial-of-Service VulnerabilityIOS Software | |
| CVE-2018-0175 | Cisco IOS, XR, and XE Software Buffer Overflow VulnerabilityIOS, XR, and XE Software | |
| CVE-2018-0174 | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation VulnerabilityIOS XE Software | |
| CVE-2018-0173 | Cisco IOS and IOS XE Software Improper Input Validation VulnerabilityIOS and IOS XE Software | |
| CVE-2018-0172 | Cisco IOS and IOS XE Software Improper Input Validation VulnerabilityIOS and IOS XE Software | |
| CVE-2018-0167 | Cisco IOS, XR, and XE Software Buffer Overflow VulnerabilityIOS, XR, and XE Software | |
| CVE-2018-0161 | Cisco IOS Software Resource Management Errors VulnerabilityIOS Software | |
| CVE-2018-0159 | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service VulnerabilityIOS Software and Cisco IOS XE Software | |
| CVE-2018-0158 | Cisco IOS and XE Software Internet Key Exchange Memory Leak VulnerabilityIOS Software and Cisco IOS XE Software | |
| CVE-2018-0156 | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service VulnerabilityIOS Software and Cisco IOS XE Software | |
| CVE-2018-0155 | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service VulnerabilityCatalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | |
| CVE-2018-0154 | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service VulnerabilityIOS Software | |
| CVE-2018-0151 | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution VulnerabilityIOS and IOS XE Software | |
| CVE-2017-6744 | Cisco IOS Software SNMP Remote Code Execution VulnerabilityIOS software | |
| CVE-2017-6743 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityIOS and IOS XE Software | |
| CVE-2017-6740 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityIOS and IOS XE Software | |
| CVE-2017-6739 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityIOS and IOS XE Software | |
| CVE-2017-6738 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityIOS and IOS XE Software | |
| CVE-2017-6737 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityIOS and IOS XE Software | |
| CVE-2017-6736 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityIOS and IOS XE Software | |
| CVE-2017-6663 | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service VulnerabilityIOS and IOS XE Software | |
| CVE-2017-6627 | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service VulnerabilityIOS and IOS XE Software | |
| CVE-2017-12319 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service VulnerabilityIOS XE Software | |
| CVE-2017-12240 | Cisco IOS and IOS XE Software DHCP Remote Code Execution VulnerabilityIOS and IOS XE Software | |
| CVE-2017-12238 | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service VulnerabilityCatalyst 6800 Series Switches | |
| CVE-2017-12237 | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service VulnerabilityIOS and IOS XE Software | |
| CVE-2017-12235 | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service VulnerabilityIOS software | |
| CVE-2017-12234 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityIOS software | |
| CVE-2017-12233 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityIOS software | |
| CVE-2017-12232 | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service VulnerabilityIOS software | |
| CVE-2017-12231 | Cisco IOS Software Network Address Translation Denial-of-Service VulnerabilityIOS software | |
| CVE-2021-1498 | Cisco HyperFlex HX Data Platform Command Injection VulnerabilityHyperFlex HX | |
| CVE-2021-1497 | Cisco HyperFlex HX Installer Virtual Machine Command Injection VulnerabilityHyperFlex HX | |
| CVE-2020-3580 | Cisco ASA and FTD Cross-Site Scripting (XSS) VulnerabilityRANSOMWAREAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | |
| CVE-2020-3569 | Cisco IOS XR Software DVMRP Memory Exhaustion VulnerabilityIOS XR | |
| CVE-2020-3566 | Cisco IOS XR Software DVMRP Memory Exhaustion VulnerabilityIOS XR | |
| CVE-2020-3452 | Cisco ASA and FTD Read-Only Path Traversal VulnerabilityAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | |
| CVE-2020-3161 | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service VulnerabilityCisco IP Phones | |
| CVE-2020-3118 | Cisco IOS XR Software Discovery Protocol Format String VulnerabilityIOS XR | |
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilitySmall Business RV320 and RV325 Routers | |
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) Denial-of-Service VulnerabilityAdaptive Security Appliance (ASA) | |
| CVE-2018-0171 | Cisco IOS and IOS XE Software Smart Install Remote Code Execution VulnerabilityIOS and IOS XE |
Get an email when CISA adds the next Cisco CVE.
How to read this: CISA KEV lists vulnerabilities with reliable evidence of exploitation; a vendor with many entries is often one with a large, internet-facing install base, not necessarily worse engineering. "Publication → KEV" is the median number of days between the CVE's publication and its addition to KEV, for entries added in the last 24 months (29 entries); it is an upper bound on how long defenders had, since exploitation usually starts before the listing. Under NIS2 article 21(2)(d), supplier security is part of your risk management; this page is a starting point for that review. Compare vendors on the scorecard index.
We assess supplier security for NIS2 and DORA, from exploited-CVE history and patch response to contract clauses and evidence packs.
Get in touch →