Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

26 records in Ios Xe Sd-wan · all components

TI-2025-14647 CVE-2025-20352 · GHSA-c924-mch4-p3p3

Stack-based buffer overflow in Cisco IOS

Priority CRITICAL 93KEV

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a de…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.40575 Published 2025-09-24 No fix listed CWE-121
TI-2021-01110 CVE-2021-1383 · GHSA-34jc-7wcf-7j89

Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities

Priority HIGH 65

Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00592 Published 2021-03-24 No fix listed CWE-20
TI-2020-02926 CVE-2020-3375 · GHSA-76f8-hj3g-qcfw

Cisco SD-WAN Solution Software Buffer Overflow Vulnerability

Priority MEDIUM 55

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03902 Published 2020-07-31 No fix listed CWE-119
TI-2021-13726 CVE-2021-34727 · GHSA-rxw2-fh82-mfcc

Cisco IOS XE SD-WAN Software Buffer Overflow Vulnerability

Priority MEDIUM 54

A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02629 Published 2021-09-23 No fix listed CWE-120
TI-2021-01028 CVE-2021-1301 · GHSA-75jh-gcr9-74rj

Cisco SD-WAN Buffer Overflow Vulnerabilities

Priority MEDIUM 53

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0213 Published 2021-01-20 No fix listed CWE-119
TI-2021-01027 CVE-2021-1300 · GHSA-qcph-crvp-p38c

Cisco SD-WAN Buffer Overflow Vulnerabilities

Priority MEDIUM 53

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02159 Published 2021-01-20 No fix listed CWE-119
TI-2021-01341 CVE-2021-1619 · GHSA-q3g7-fff3-j4mq

Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability

Priority MEDIUM 52

A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass NETCONF or RESTCONF authentication and do either of t…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01758 Published 2021-09-23 No fix listed CWE-824
TI-2021-01005 CVE-2021-1278 · GHSA-pvmq-vhjw-69rw

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 47

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01676 Published 2021-01-20 No fix listed CWE-119
TI-2021-01001 CVE-2021-1274 · GHSA-pch2-664m-xccv

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 47

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01917 Published 2021-01-20 No fix listed CWE-119
TI-2021-01000 CVE-2021-1273 · GHSA-vp27-rfq3-8m9q

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 47

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01901 Published 2021-01-20 No fix listed CWE-119
TI-2021-01006 CVE-2021-1279 · GHSA-x89v-fxm5-mp68

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 46

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01402 Published 2021-01-20 No fix listed CWE-119
TI-2021-00968 CVE-2021-1241 · GHSA-h93f-69cr-g7fq

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 46

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01402 Published 2021-01-20 No fix listed CWE-119
TI-2024-13380 CVE-2024-20455 · GHSA-j9wc-h525-rvc7

A vulnerability in the process that classifies traffic that is going to the Unified…

Priority MEDIUM 44

A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote attacker to cause a de…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00662 Published 2024-09-25 No fix listed CWE-371
TI-2021-01032 CVE-2021-1305 · GHSA-vm7j-vm2j-xwx7

Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Priority MEDIUM 43

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, ga…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01312 Published 2021-01-20 No fix listed CWE-20
TI-2021-01256 CVE-2021-1529 · GHSA-cg99-cxj5-wq75

Cisco IOS XE SD-WAN Software Command Injection Vulnerability

Priority LOW 36

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00307 Published 2021-10-21 No fix listed CWE-78
TI-2023-06744 CVE-2023-20035 · GHSA-mg9g-g88j-w67g

Cisco IOS XE SD-WAN Software Command Injection Vulnerability

Priority LOW 35

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00222 Published 2023-03-23 No fix listed CWE-146
TI-2021-01159 CVE-2021-1432 · GHSA-gcqm-xc9c-9vw6

Cisco IOS XE SD-WAN Software Arbitrary Command Execution Vulnerability

Priority LOW 34

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00353 Published 2021-03-24 No fix listed CWE-20
TI-2021-13728 CVE-2021-34729 · GHSA-qm8p-89vx-j9q3

Cisco IOS XE SD-WAN Software Command Injection Vulnerability

Priority LOW 32

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on an affected device.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00357 Published 2021-09-23 No fix listed CWE-77
TI-2021-13724 CVE-2021-34725 · GHSA-9mw5-w2j2-3f45

Cisco IOS XE SD-WAN Software Command Injection Vulnerability

Priority LOW 32

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00357 Published 2021-09-23 No fix listed CWE-77
TI-2020-02776 CVE-2020-3216 · GHSA-vx84-h8r2-7438

Cisco IOS XE SD-WAN Software Authentication Bypass Vulnerability

Priority LOW 32

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an affected device.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00435 Published 2020-06-03 No fix listed CWE-287
TI-2024-13306 CVE-2024-20373 · GHSA-3xmf-m2fg-h94r

Cisco IOS and Cisco IOS XE SNMP Extended ACL Bypass Vulnerability

Priority LOW 31

A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) IPv4 access control list (ACL) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacke…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.005 Published 2024-11-15 No fix listed CWE-284
TI-2022-05409 CVE-2022-20850 · GHSA-5rf9-q3f5-rc77

Cisco SD-WAN Arbitrary File Deletion Vulnerability

Priority LOW 31

A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0021 Published 2022-09-30 No fix listed CWE-22
TI-2021-01181 CVE-2021-1454 · GHSA-j47p-2qwf-vg8r

Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities

Priority LOW 31

Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0029 Published 2021-03-24 No fix listed CWE-20
TI-2021-01098 CVE-2021-1371 · GHSA-8qm4-vmvc-xrpj

Cisco IOS XE SD-WAN Software Console Privilege Escalation Vulnerability

Priority LOW 31

A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative privileges by using the console port when t…

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00263 Published 2021-03-24 No fix listed CWE-269
TI-2021-13723 CVE-2021-34724 · GHSA-3jmx-8q3h-p8gc

Cisco IOS XE SD-WAN Software Privilege Escalation Vulnerability

Priority LOW 28

A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to elevate privileges and execute arbitrary code on the underlying operating system as the root user.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00266 Published 2021-09-23 No fix listed CWE-284
Load more
Open these records in search →