CVEs published by Cisco Systems, Inc.

CVEs published by Cisco Systems, Inc. (CVE Numbering Authority). 84 tracked.

• CVE-2026-76311 CRITICAL 9.4 UPGRADE In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an emb
• CVE-2026-76404 CRITICAL 9.1 UPGRADE In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrar
• CVE-2026-76259 HIGH 8.8 UPGRADE In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with
• CVE-2026-76390 MEDIUM 5.3 UPGRADE In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could
• CVE-2026-76376 MEDIUM 4.3 In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run act
• CVE-2026-76383 MEDIUM 4.3 In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a user who holds a role
• CVE-2026-76384 MEDIUM 4.3 In versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR, a user who holds a role with
• CVE-2026-20272 CRITICAL 9.8 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20263 HIGH 8.6 MITIGATE A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow
• CVE-2026-20268 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20269 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20270 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20271 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20273 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20303 CRITICAL 9.9 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng
• CVE-2026-20200 HIGH 8.8 MITIGATE A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attack
• CVE-2026-20267 CRITICAL 9.0 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20304 CRITICAL 9.9 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng
• CVE-2026-20310 CRITICAL 9.1 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng
• CVE-2026-20124 HIGH 7.7 MITIGATE A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allo
• CVE-2026-20312 HIGH 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng
• CVE-2026-20313 HIGH 7.7 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng
• CVE-2026-20289 MEDIUM 5.7 UPGRADE UPGRADE A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low
• CVE-2026-20311 MEDIUM 6.3 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, r
• CVE-2026-20028 MEDIUM 5.0 A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an authenticated, remot
• CVE-2026-20294 MEDIUM 6.5 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenti
• CVE-2026-20308 MEDIUM 4.3 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, r
• CVE-2026-20348 HIGH 7.5 UPGRADE UPGRADE A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cau
• CVE-2026-20337 HIGH 7.5 A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a
• CVE-2026-20338 HIGH 7.5 A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a
• CVE-2026-20339 HIGH 7.5 A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to
• CVE-2026-20345 HIGH 7.5 A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cau
• CVE-2026-20346 HIGH 7.5 A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cau
• CVE-2026-20347 HIGH 7.5 A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to
• CVE-2026-76307 HIGH 7.2 In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could u
• CVE-2026-76303 MEDIUM 5.7 In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store att
• CVE-2026-76287 MEDIUM 5.4 In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline
• CVE-2026-76291 HIGH 8.8 In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the sch
• CVE-2026-76298 HIGH 8.8 In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk
• CVE-2026-76293 HIGH 7.2 In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edi
• CVE-2026-76496 HIGH 7.0 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series s
• CVE-2026-76495 HIGH 7.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series s
• CVE-2026-76494 HIGH 7.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series s
• CVE-2026-76479 HIGH 7.8 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E
• CVE-2026-76478 HIGH 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E
• CVE-2026-76477 HIGH 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E
• CVE-2026-76476 HIGH 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E
• CVE-2026-76474 CRITICAL 9.8 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E
• CVE-2026-76473 CRITICAL 9.8 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E
• CVE-2026-76466 CRITICAL 9.8 A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, rem
• CVE-2026-76462 MEDIUM 5.5 A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco
• CVE-2026-20291 HIGH 7.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source S
• CVE-2026-20043 CRITICAL 9.0 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source S
• CVE-2026-20218 MEDIUM 5.8 A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco prod
• CVE-2026-76302 CRITICAL 9.9 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76531 CRITICAL 9.9 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76290 HIGH 7.5 In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated r
• CVE-2026-76288 HIGH 7.5 In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a
• CVE-2026-76299 CRITICAL 9.9 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76530 HIGH 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76406 MEDIUM 5.9 In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an
• CVE-2026-76306 HIGH 7.5 In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the Repres
• CVE-2026-76289 MEDIUM 6.5 In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin"
• CVE-2026-76292 MEDIUM 6.5 In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions be
• CVE-2026-76305 MEDIUM 6.5 In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view ap
• CVE-2026-76308 MEDIUM 6.5 In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition throug
• CVE-2026-76294 MEDIUM 4.3 In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin"
• CVE-2026-76296 MEDIUM 4.3 In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin"
• CVE-2026-76295 MEDIUM 4.3 In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions be
• CVE-2026-76304 MEDIUM 4.3 In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Au
• CVE-2026-76297 MEDIUM 4.2 In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a
• CVE-2026-76300 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76301 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76408 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76526 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76529 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76407 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76527 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76528 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76519 CRITICAL 9.8 EXPLOITED UPGRADE Cisco Secure Email Gateway Relative Path Traversal Vulnerability
• CVE-2026-76460 CRITICAL 10.0 EXPLOITED DOWNGRADE DOWNGRADE Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
• CVE-2026-76504 CRITICAL 9.8 EXPLOITED UPGRADE Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
• CVE-2026-20079 CRITICAL 10.0 EXPLOITED DOWNGRADE Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2026-76461 CRITICAL 9.8 EXPLOITED UPGRADE Cisco Secure Email Gateway SQL Injection Vulnerability

← Back to latest CVEs