Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

15 records in Vbond Orchestrator · all components

TI-2018-00308 CVE-2018-0349 · GHSA-2qxj-6c76-45f9

Improper input validation in Cisco SD-WAN Solution unknown

Priority MEDIUM 54

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03007 Published 2018-07-18 No fix listed CWE-20
TI-2019-01276 CVE-2019-1650 · GHSA-wchj-88hf-ghm5

Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability

Priority MEDIUM 46

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03475 Published 2019-01-24 No fix listed CWE-20
TI-2018-00309 CVE-2018-0350 · GHSA-2hp5-x58m-vhpj

Command injection in Cisco SD-WAN Solution unknown

Priority MEDIUM 46

A vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03015 Published 2018-07-18 No fix listed CWE-77
TI-2018-00304 CVE-2018-0345 · GHSA-6x3g-4r88-c5qh

Improper input validation in Cisco SD-WAN Solution unknown

Priority MEDIUM 45

A vulnerability in the configuration and management database of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to execute arbitrary commands with the privileges of the vmanage user in the configu…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02961 Published 2018-07-18 No fix listed CWE-20
TI-2018-00302 CVE-2018-0343 · GHSA-3vvq-2whw-xv59

Improper access control in Cisco SD-WAN Solution unknown

Priority MEDIUM 44

A vulnerability in the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to execute arbitrary code with vmanage user privileges or cause a denial of service (…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01939 Published 2018-07-18 No fix listed CWE-284
TI-2018-00305 CVE-2018-0346 · GHSA-mgv5-gwhp-72c8

Memory corruption in Cisco SD-WAN Solution unknown

Priority MEDIUM 43

A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01987 Published 2018-07-18 No fix listed CWE-119
TI-2018-00307 CVE-2018-0348 · GHSA-cxf4-j4xp-frg7

Command injection in Cisco SD-WAN Solution unknown

Priority LOW 39

A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02859 Published 2018-07-18 No fix listed CWE-77
TI-2018-00303 CVE-2018-0344 · GHSA-96g6-9542-jj7h

Command injection in Cisco SD-WAN Solution unknown

Priority LOW 38

A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02021 Published 2018-07-18 No fix listed CWE-77
TI-2019-01274 CVE-2019-1648 · GHSA-2249-5x8x-97jc

Cisco SD-WAN Solution Privilege Escalation Vulnerability

Priority LOW 36

A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00372 Published 2019-01-24 No fix listed CWE-264
TI-2019-01272 CVE-2019-1646 · GHSA-xphx-jp87-55x8

Privilege Escalation Vulnerability in Cisco SD-WAN Solution

Priority LOW 36

A vulnerability in the local CLI of the Cisco SD-WAN Solution could allow an authenticated, local attacker to escalate privileges and modify device configuration files.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00446 Published 2019-01-24 No fix listed CWE-264
TI-2018-00392 CVE-2018-0433 · GHSA-r8cw-3qqx-pr24

Cisco SD-WAN Solution Command Injection Vulnerability

Priority LOW 36

A vulnerability in the command-line interface (CLI) in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0045 Published 2018-10-05 No fix listed CWE-77
TI-2018-00310 CVE-2018-0351 · GHSA-wgjw-6mrh-6344

Command injection in Cisco SD-WAN Solution unknown

Priority LOW 36

A vulnerability in the command-line tcpdump utility in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00471 Published 2018-07-18 No fix listed CWE-77
TI-2018-00306 CVE-2018-0347 · GHSA-qx27-h95h-m8mh

Command injection in Cisco SD-WAN Solution unknown

Priority LOW 36

A vulnerability in the Zero Touch Provisioning (ZTP) subsystem of the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00471 Published 2018-07-18 No fix listed CWE-77
TI-2020-02930 CVE-2020-3379 · GHSA-7rxf-2gc2-527c

Cisco SD-WAN Solution Software Privilege Escalation Vulnerability

Priority LOW 34

A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to Administrator on the underlying operating system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00351 Published 2020-07-16 No fix listed CWE-264
TI-2018-00301 CVE-2018-0342 · GHSA-ggx4-p7x5-97cc

Memory corruption in Cisco SD-WAN Solution unknown

Priority LOW 32

A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, local attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) cond…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00452 Published 2018-07-18 No fix listed CWE-119
Open these records in search →