Cisco vulnerabilities and fixes

CVEs that mention Cisco, ranked by priority. 54 tracked.

Cisco has 54 tracked vulnerabilities, 17 critical and 6 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 36. Most recent: 2026-10-21. Highest priority: CVE-2026-20079 (score 98/100).

• CVE-2026-20079 CRITICAL 10.0 EXPLOITED DOWNGRADE Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2026-76460 CRITICAL 10.0 EXPLOITED DOWNGRADE DOWNGRADE Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
• CVE-2026-76461 CRITICAL 9.8 EXPLOITED UPGRADE Cisco Secure Email Gateway SQL Injection Vulnerability
• CVE-2026-76519 CRITICAL 9.8 EXPLOITED UPGRADE Cisco Secure Email Gateway Relative Path Traversal Vulnerability
• CVE-2026-76504 CRITICAL 9.8 EXPLOITED UPGRADE Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
• CVE-2026-20316 MEDIUM 5.3 EXPLOITED UPGRADE Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
• CVE-2026-20272 CRITICAL 9.8 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-76466 CRITICAL 9.8 A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, rem
• CVE-2026-76473 CRITICAL 9.8 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E
• CVE-2026-76474 CRITICAL 9.8 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E
• CVE-2026-20263 HIGH 8.6 MITIGATE A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow
• CVE-2026-20268 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20269 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20270 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20271 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20273 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20303 CRITICAL 9.9 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng
• CVE-2026-20200 HIGH 8.8 MITIGATE A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attack
• CVE-2026-20267 CRITICAL 9.0 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20304 CRITICAL 9.9 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng
• CVE-2026-20310 CRITICAL 9.1 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng
• CVE-2026-20348 HIGH 7.5 UPGRADE UPGRADE A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cau
• CVE-2026-76302 CRITICAL 9.9 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76531 CRITICAL 9.9 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-20043 CRITICAL 9.0 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source S
• CVE-2026-76299 CRITICAL 9.9 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76477 HIGH 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E
• CVE-2026-20124 HIGH 7.7 MITIGATE A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allo
• CVE-2026-76476 HIGH 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E
• CVE-2026-20312 HIGH 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng
• CVE-2026-20313 HIGH 7.7 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN eng
• CVE-2026-20218 MEDIUM 5.8 A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco prod
• CVE-2026-76530 HIGH 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76390 MEDIUM 5.3 UPGRADE In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could
• CVE-2026-76478 HIGH 8.8 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E
• CVE-2026-76479 HIGH 7.8 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco E
• CVE-2026-20291 HIGH 7.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source S
• CVE-2026-76494 HIGH 7.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series s
• CVE-2026-76495 HIGH 7.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series s
• CVE-2026-20289 MEDIUM 5.7 UPGRADE UPGRADE A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low
• CVE-2026-20311 MEDIUM 6.3 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, r
• CVE-2026-76496 HIGH 7.0 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series s
• CVE-2026-20028 MEDIUM 5.0 A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an authenticated, remot
• CVE-2026-20294 MEDIUM 6.5 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenti
• CVE-2026-20308 MEDIUM 4.3 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, r
• CVE-2026-76462 MEDIUM 5.5 A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco
• CVE-2026-76300 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76301 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76408 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76526 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76529 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76407 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76527 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh
• CVE-2026-76528 HIGH n/a As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh

FAQ

How do I fix Cisco vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Cisco being exploited right now?

Yes: 6 Cisco CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which Cisco CVE should I patch first?

CVE-2026-20079 currently ranks highest (98/100): Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability.

← Back to latest CVEs