Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

41 records in Sd-wan Firmware · all components

TI-2019-12050 CVE-2019-16012 · GHSA-2c85-mrfp-x4x7

Cisco SD-WAN Solution vManage SQL Injection Vulnerability

Priority HIGH 68

A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.54249 Published 2020-03-19 No fix listed CWE-77
TI-2020-02938 CVE-2020-3387 · GHSA-858r-5xm4-gf36

Cisco SD-WAN vManage Software Remote Code Execution Vulnerability

Priority MEDIUM 55

A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to execute code with root privileges on an affected system.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.1302 Published 2020-07-16 No fix listed CWE-20
TI-2021-01028 CVE-2021-1301 · GHSA-75jh-gcr9-74rj

Cisco SD-WAN Buffer Overflow Vulnerabilities

Priority MEDIUM 53

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0213 Published 2021-01-20 No fix listed CWE-119
TI-2021-01027 CVE-2021-1300 · GHSA-qcph-crvp-p38c

Cisco SD-WAN Buffer Overflow Vulnerabilities

Priority MEDIUM 53

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02159 Published 2021-01-20 No fix listed CWE-119
TI-2021-01005 CVE-2021-1278 · GHSA-pvmq-vhjw-69rw

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 47

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01676 Published 2021-01-20 No fix listed CWE-119
TI-2021-01001 CVE-2021-1274 · GHSA-pch2-664m-xccv

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 47

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01917 Published 2021-01-20 No fix listed CWE-119
TI-2021-01000 CVE-2021-1273 · GHSA-vp27-rfq3-8m9q

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 47

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01901 Published 2021-01-20 No fix listed CWE-119
TI-2021-01006 CVE-2021-1279 · GHSA-x89v-fxm5-mp68

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 46

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01402 Published 2021-01-20 No fix listed CWE-119
TI-2021-00968 CVE-2021-1241 · GHSA-h93f-69cr-g7fq

Cisco SD-WAN Denial of Service Vulnerabilities

Priority MEDIUM 46

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01402 Published 2021-01-20 No fix listed CWE-119
TI-2020-02903 CVE-2020-3351 · GHSA-6j89-cjff-693q

Cisco SD-WAN Solution Software Denial of Service Vulnerability

Priority MEDIUM 46

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01374 Published 2020-07-16 No fix listed CWE-399
TI-2020-02932 CVE-2020-3381 · GHSA-xrg6-2px8-pv79

Cisco SD-WAN vManage Software Directory Traversal Vulnerability

Priority MEDIUM 45

A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal attacks and obtain read and write access to sensitive files on…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02644 Published 2020-07-16 No fix listed CWE-22
TI-2021-01026 CVE-2021-1299 · GHSA-5r3w-7gjv-66pg

Cisco SD-WAN Command Injection Vulnerabilities

Priority MEDIUM 44

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02169 Published 2021-01-20 No fix listed CWE-20
TI-2021-01025 CVE-2021-1298 · GHSA-j33v-c25v-6f4r

Cisco SD-WAN Command Injection Vulnerabilities

Priority MEDIUM 44

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02169 Published 2021-01-20 No fix listed CWE-20
TI-2019-01253 CVE-2019-1626 · GHSA-x9m6-g325-mjr9

Cisco SD-WAN Solution Privilege Escalation Vulnerability

Priority MEDIUM 44

A vulnerability in the vManage web-based UI (Web UI) of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01855 Published 2019-06-20 Fixed in 18.4.0 CWE-264
TI-2021-01032 CVE-2021-1305 · GHSA-vm7j-vm2j-xwx7

Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Priority MEDIUM 43

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, ga…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01312 Published 2021-01-20 No fix listed CWE-20
TI-2020-02920 CVE-2020-3369 · GHSA-f3ch-8xx9-vh6w

Cisco SD-WAN vEdge Routers Denial of Service Vulnerability

Priority MEDIUM 42

A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01415 Published 2020-07-16 No fix listed CWE-118
TI-2020-02677 CVE-2020-3115 · GHSA-jccc-2hj6-5h7m

Cisco SD-WAN Solution Local Privilege Escalation Vulnerability

Priority MEDIUM 40

A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-level privileges on the underlying operating system.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00333 Published 2020-01-26 No fix listed CWE-264
TI-2021-00990 CVE-2021-1263 · GHSA-qq6m-6mqj-xgv4

Cisco SD-WAN Command Injection Vulnerabilities

Priority LOW 39

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01459 Published 2021-01-20 No fix listed CWE-20
TI-2021-00988 CVE-2021-1261 · GHSA-fchc-r69w-44gq

Cisco SD-WAN Command Injection Vulnerabilities

Priority LOW 39

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01446 Published 2021-01-20 No fix listed CWE-20
TI-2021-00987 CVE-2021-1260 · GHSA-vfx8-ww4j-q638

Cisco SD-WAN Command Injection Vulnerabilities

Priority LOW 39

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01446 Published 2021-01-20 No fix listed CWE-20
TI-2021-00989 CVE-2021-1262 · GHSA-48w5-c2rf-fc9x

Cisco SD-WAN Command Injection Vulnerabilities

Priority LOW 37

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root pr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01364 Published 2021-01-20 No fix listed CWE-20
TI-2020-02826 CVE-2020-3266 · GHSA-rm3p-cf5q-3f22

Cisco SD-WAN Solution Command Injection Vulnerability

Priority LOW 37

A vulnerability in the CLI of Cisco SD-WAN Solution software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00557 Published 2020-03-19 No fix listed CWE-77
TI-2020-02939 CVE-2020-3388 · GHSA-g323-fq43-wfq6

Cisco SD-WAN vManage Software Command Injection Vulnerability

Priority LOW 36

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00377 Published 2020-07-16 No fix listed CWE-287
TI-2020-02825 CVE-2020-3265 · GHSA-pp5x-j8jw-xrw4

Cisco SD-WAN Solution Privilege Escalation Vulnerability

Priority LOW 36

A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00383 Published 2020-03-19 No fix listed CWE-264
TI-2019-09429 CVE-2019-12629 · GHSA-r7cm-r8x5-rq3w

Cisco SD-WAN vManage Command Injection Vulnerability

Priority LOW 36

A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02453 Published 2020-01-26 No fix listed CWE-77
Load more
Open these records in search →