Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

11 records in Ip Phone 8800 Series Firmware · all components

TI-2018-00420 CVE-2018-0461 · GHSA-2frm-cvwv-gjwx

Cisco IP Phone 8800 Series Arbitrary Script Injection Vulnerability

Priority MEDIUM 47

A vulnerability in the Cisco IP Phone 8800 Series Software could allow an unauthenticated, remote attacker to conduct an arbitrary script injection attack on an affected device.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01501 Published 2019-01-10 No fix listed CWE-94
TI-2016-01310 CVE-2016-1421 · GHSA-25qv-8m5r-8645

Memory corruption in Cisco IP Phones

Priority MEDIUM 40

A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04117 Published 2016-06-10 No fix listed CWE-119
TI-2017-09081 CVE-2017-12305 · GHSA-59mj-2qff-f42p

Command injection in Cisco IP Phone 8800 Series

Priority LOW 31

A vulnerability in the debug interface of Cisco IP Phone 8800 series could allow an authenticated, local attacker to execute arbitrary commands, aka Debug Shell Command Injection.

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00839 Published 2017-11-16 No fix listed CWE-77
TI-2017-09100 CVE-2017-12328 · GHSA-9wxx-q8qf-rxcw

Improper input validation in Cisco IP Phone 8800 Series

Priority LOW 30

A vulnerability in Session Initiation Protocol (SIP) call handling in Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the SIP proces…

CVSS 3.0MEDIUM 5.8 Network No auth No interaction EPSS 0.02133 Published 2017-11-30 No fix listed CWE-20
TI-2017-04389 CVE-2017-6630 · GHSA-mjvw-x9c4-59fp

Resource management flaw in Cisco IP Phone 8851

Priority LOW 29

A vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone 8851 11.0(0.1) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02373 Published 2017-05-22 No fix listed CWE-399
Open these records in search →