Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

13 records in 2000 Wireless Lan Controller · all components

TI-2013-00955 CVE-2013-1105 · GHSA-4gfq-6cg6-xc56

Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and…

Priority MEDIUM 44

Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or m…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03094 Published 2013-01-24 No fix listed CWE-264
TI-2012-00344 CVE-2012-0371 · GHSA-4r5f-fphv-p9p2

Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before…

Priority MEDIUM 43

Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01618 Published 2012-03-01 No fix listed CWE-264
TI-2013-00952 CVE-2013-1102 · GHSA-3jcc-5246-q6gv

The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN…

Priority LOW 38

The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0 allows remote attackers…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01819 Published 2013-01-24 No fix listed
TI-2012-04990 CVE-2012-5992 · GHSA-44pq-x8pr-ff7r

Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN…

Priority LOW 34

Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that (1…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01784 Published 2012-12-19 No fix listed CWE-352
TI-2007-01960 CVE-2007-2038 · GHSA-7vw2-4wvp-q8jh

The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before…

Priority LOW 29

The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.193.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attackers on a local wireless network to cause a denial of service (loss of p…

CVSS 2.0MEDIUM 6.1 Adjacent network No auth Interaction — EPSS 0.00982 Published 2007-04-16 No fix listed
TI-2013-01077 CVE-2013-1235 · GHSA-ffwh-46r8-rg8g

Cisco Wireless LAN Controller (WLC) devices do not properly address the resource…

Priority LOW 25

Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service (TELNET outage) by making many TELNET…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01232 Published 2013-05-04 No fix listed
Open these records in search →