Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

9 records in Ip Phone 8800 Firmware · all components

TI-2019-01342 CVE-2019-1716 · GHSA-9798-53mw-wrx7

Cisco IP Phone 7800 Series and 8800 Series Remote Code Execution Vulnerability

Priority MEDIUM 54

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause a…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0311 Published 2019-03-22 Fixed in 10.3(1)SR5, 11.0(4)SR3 +1 CWE-20
TI-2018-00284 CVE-2018-0325 · GHSA-hpxq-c7m9-w2gj

Improper input validation in Cisco IP Phone 7800 Series and 8800 Series

Priority MEDIUM 45

A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote attacker to cause a d…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03209 Published 2018-05-17 No fix listed CWE-20
TI-2019-01388 CVE-2019-1763 · GHSA-p8vp-w9wf-97hp

Cisco IP Phone 8800 Series Authorization Bypass Vulnerability

Priority MEDIUM 43

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to bypass authorization, access critical…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01939 Published 2019-03-22 Fixed in 11.0(5), 12.5(1)SR1 CWE-284
TI-2019-01391 CVE-2019-1766 · GHSA-29px-fxx4-vhvc

Cisco IP Phone 8800 Series File Upload Denial of Service Vulnerability

Priority MEDIUM 42

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause high disk utilization, resulting…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01527 Published 2019-03-22 Fixed in 12.5(1)SR1 CWE-20
TI-2019-01389 CVE-2019-1764 · GHSA-5rh5-cr8c-qg7h

Cisco IP Phone 8800 Series Cross-Site Request Forgery Vulnerability

Priority LOW 39

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00698 Published 2019-03-22 Fixed in 11.0(5), 12.5(1)SR1 CWE-352
TI-2023-06727 CVE-2023-20018 · GHSA-jc6w-v2gh-gqx3

Authentication bypass in Cisco Session Initiation Protocol Software

Priority LOW 38

A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0063 Published 2023-01-19 No fix listed CWE-288
TI-2019-01390 CVE-2019-1765 · GHSA-2473-cf85-p25m

Cisco IP Phone 8800 Series Path Traversal Vulnerability

Priority LOW 38

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an authenticated, remote attacker to write arbitrary files to the filesystem.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01366 Published 2019-03-22 Fixed in 11.0(5), 12.5(1)SR1 CWE-22
TI-2019-01310 CVE-2019-1684 · GHSA-325p-cm4c-j6f9

Resource management flaw in Cisco IP Phone 8800 Series Software

Priority LOW 30

A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol (LLDP) implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected ph…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0064 Published 2019-02-21 Fixed in 12.6(1)MN80 CWE-399
Open these records in search →