Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

92 records in Catalyst Sd-wan Manager · all components

TI-2026-53490 CVE-2026-76504 · GHSA-xqjc-v467-8fvf

Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability

Priority CRITICAL 100KEV

A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.38928 Published 2026-09-30 No fix listed CWE-177
TI-2026-16388 CVE-2026-20182 · GHSA-p83j-mxpw-gqpj

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Priority CRITICAL 100KEV

May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.91817 Published 2026-05-14 No fix listed CWE-287
TI-2026-16340 CVE-2026-20127 · GHSA-p4cq-46q3-jr7w

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Priority CRITICAL 100KEV

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBon…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.8762 Published 2026-02-25 No fix listed CWE-287
TI-2026-16436 CVE-2026-20245 · GHSA-h4c6-cm2m-h5f6

Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability

Priority CRITICAL 93KEV

A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an a…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.25323 Published 2026-06-04 No fix listed CWE-116
TI-2022-05334 CVE-2022-20775 · GHSA-x65r-rvgh-v43v

Cisco SD-WAN Software Privilege Escalation Vulnerability

Priority CRITICAL 93KEV

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.11984 Published 2022-09-30 No fix listed CWE-25
TI-2026-16341 CVE-2026-20128 · GHSA-mp6j-7g85-8pg2

Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

Priority CRITICAL 92KEV

A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.08349 Published 2026-02-25 No fix listed CWE-257
TI-2026-16346 CVE-2026-20133 · GHSA-cf88-f64q-c626

Information disclosure in Cisco Catalyst SD-WAN Manager

Priority CRITICAL 90KEV

A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.3529 Published 2026-02-25 No fix listed CWE-200
TI-2026-16452 CVE-2026-20262 · GHSA-p45r-gcc9-fr7f

Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

Priority CRITICAL 86KEV

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.29116 Published 2026-06-15 No fix listed CWE-22
TI-2026-16335 CVE-2026-20122 · GHSA-9qpv-49q8-9chx

Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

Priority HIGH 84KEV

A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.25801 Published 2026-02-25 No fix listed CWE-648
TI-2021-01195 CVE-2021-1468 · GHSA-77ww-5vqp-x7vx

Cisco SD-WAN vManage Software Vulnerabilities

Priority MEDIUM 53

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to ga…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02018 Published 2021-05-06 No fix listed CWE-20
TI-2021-01028 CVE-2021-1301 · GHSA-75jh-gcr9-74rj

Cisco SD-WAN Buffer Overflow Vulnerabilities

Priority MEDIUM 53

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0213 Published 2021-01-20 No fix listed CWE-119
TI-2021-01027 CVE-2021-1300 · GHSA-qcph-crvp-p38c

Cisco SD-WAN Buffer Overflow Vulnerabilities

Priority MEDIUM 53

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02159 Published 2021-01-20 No fix listed CWE-119
TI-2021-01002 CVE-2021-1275 · GHSA-7pj7-c4cj-93h7

Cisco SD-WAN vManage Software Vulnerabilities

Priority MEDIUM 53

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to ga…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02065 Published 2021-05-06 No fix listed CWE-20
TI-2020-15925 CVE-2020-26073 · GHSA-593h-gxfm-rj8p

Cisco SD-WAN vManage Directory Traversal Vulnerability

Priority MEDIUM 53

A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to gain access to sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.12583 Published 2024-11-18 No fix listed CWE-35
TI-2021-01235 CVE-2021-1508 · GHSA-52g8-5ch7-w2hq

Cisco SD-WAN vManage Software Vulnerabilities

Priority MEDIUM 52

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to ga…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0163 Published 2021-05-06 No fix listed CWE-20
TI-2021-01233 CVE-2021-1506 · GHSA-mrxg-g8cm-vpc9

Cisco SD-WAN vManage Software Vulnerabilities

Priority MEDIUM 52

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to ga…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01798 Published 2021-05-06 No fix listed CWE-20
TI-2021-01232 CVE-2021-1505 · GHSA-82q6-c2h2-c2g4

Cisco SD-WAN vManage Software Vulnerabilities

Priority MEDIUM 52

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to ga…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0163 Published 2021-05-06 No fix listed CWE-20
TI-2023-06956 CVE-2023-20252 · GHSA-rjvr-rwwj-qxq2

Missing authorization in Cisco SD-WAN vManage

Priority MEDIUM 51

A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remote attacker to gain unauthorized access to the application as an arbitra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01087 Published 2023-09-27 No fix listed CWE-862
TI-2026-16342 CVE-2026-20129 · GHSA-5h54-2f2f-5x5c

Cisco Catayst SD-WAN Authentication Bypass Vulnerability

Priority MEDIUM 50

A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain access to an affected system as a user who has the netadmin role.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00807 Published 2026-02-25 No fix listed CWE-287
TI-2021-01206 CVE-2021-1479 · GHSA-v6q9-8hrp-frq5

Cisco SD-WAN vManage Software Vulnerabilities

Priority MEDIUM 47

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected sy…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02143 Published 2021-04-08 No fix listed CWE-119
TI-2021-01005 CVE-2021-1278 · GHSA-pvmq-vhjw-69rw

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 47

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01676 Published 2021-01-20 No fix listed CWE-119
TI-2021-01001 CVE-2021-1274 · GHSA-pch2-664m-xccv

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 47

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01917 Published 2021-01-20 No fix listed CWE-119
TI-2021-01000 CVE-2021-1273 · GHSA-vp27-rfq3-8m9q

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 47

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01901 Published 2021-01-20 No fix listed CWE-119
TI-2021-01006 CVE-2021-1279 · GHSA-x89v-fxm5-mp68

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 46

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01402 Published 2021-01-20 No fix listed CWE-119
TI-2021-00968 CVE-2021-1241 · GHSA-h93f-69cr-g7fq

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 46

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01402 Published 2021-01-20 No fix listed CWE-119
Load more
Open these records in search →