Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

9 records in Meraki Mx100 Firmware · all components

TI-2022-05492 CVE-2022-20933 · GHSA-9vrx-xfr3-hfjj

Cisco Meraki MX and Z3 Teleworker Gateway VPN Denial of Service Vulnerability

Priority MEDIUM 46

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affe…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01142 Published 2022-10-26 No fix listed CWE-234
TI-2024-13425 CVE-2024-20501 · GHSA-56gq-526p-7vqp

Out-of-bounds write in Cisco Meraki MX Firmware

Priority MEDIUM 44

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConne…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00505 Published 2024-10-02 No fix listed CWE-787
TI-2024-13423 CVE-2024-20499 · GHSA-2287-j5fq-5mhv

Out-of-bounds write in Cisco Meraki MX Firmware

Priority MEDIUM 44

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConne…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00505 Published 2024-10-02 No fix listed CWE-787
TI-2024-13422 CVE-2024-20498 · GHSA-qwwc-f936-v8h7

Double free in Cisco Meraki MX Firmware

Priority MEDIUM 44

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConne…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00505 Published 2024-10-02 No fix listed CWE-415
TI-2024-13424 CVE-2024-20500 · GHSA-7pgw-6p7m-45vf

Uncontrolled resource consumption in Cisco Meraki MX Firmware

Priority MEDIUM 40

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect servic…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00553 Published 2024-10-02 No fix listed CWE-400
TI-2024-13426 CVE-2024-20502 · GHSA-2r9m-635c-rmwj

Uncontrolled resource consumption in Cisco Meraki MX Firmware

Priority LOW 39

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2024-10-02 No fix listed CWE-400
TI-2021-00951 CVE-2021-1224 · GHSA-p854-c355-26cj

Multiple Cisco Products Snort TCP Fast Open File Policy Bypass Vulnerability

Priority LOW 36

Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file p…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.02046 Published 2021-01-13 No fix listed CWE-693
TI-2024-13433 CVE-2024-20509 · GHSA-frxm-f6qg-2mch

Race condition in Cisco Meraki MX Firmware

Priority LOW 27

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to hijack an AnyConnect VPN session or cause a de…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00386 Published 2024-10-02 No fix listed CWE-362
TI-2024-13437 CVE-2024-20513 · GHSA-45f4-7wmp-8679

Authorization bypass in Cisco Meraki MX Firmware

Priority LOW 26

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition for targeted users of th…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00452 Published 2024-10-02 No fix listed CWE-639
Open these records in search →