Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

11 records in Asr 5000 Software · all components

TI-2016-05537 CVE-2016-6455 · GHSA-c5xh-8h52-w9w3

Resource management flaw in Cisco StarOS 18.x through 21.x

Priority LOW 36

A vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing Card 2 (DPC2) could allow an unauthenticated, remote attacker to cause a subset of the subscriber sessions to be disconnect…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01747 Published 2016-11-03 No fix listed CWE-399
TI-2017-04527 CVE-2017-6773 · GHSA-ppp2-xhm6-jw52

Improper input validation in Cisco StarOS for ASR 5000 Series Aggregated Services Routers

Priority LOW 30

A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, local attacker to bypass the CLI restrictions and execute commands o…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00421 Published 2017-08-17 No fix listed CWE-20
TI-2015-05335 CVE-2015-6351 · GHSA-q7xh-8hj5-54x4

Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices with software…

Priority LOW 26

Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices with software 19.1.0.61559 and 19.2.0 allow remote attackers to cause a denial of service (BGP process restart) via a crafted header in a BGP packet, aka…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01744 Published 2015-10-30 No fix listed CWE-20
TI-2017-04446 CVE-2017-6690 · GHSA-39wf-75mq-q4p3

Improper input validation in Cisco StarOS

Priority LOW 25

A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify arbitrary fi…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.0128 Published 2017-06-13 No fix listed CWE-20
Open these records in search →