Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV
TI-2026-82192 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Priority CRITICAL 94KEV 2026-10-29TI-2026-74174 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-14TI-2026-53490 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Priority CRITICAL 100KEV 2026-09-30TI-2026-53488 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Priority CRITICAL 100KEV 2026-09-16TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-09-14TI-2026-16292 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2026-09-09

Components

Products in the NVD configurations · select one to filter the records
Ios 618 records CRITICAL Ios Xe 562 records CRITICAL Adaptive Security Appliance Software 355 records CRITICAL Secure Firewall Threat Defense 277 records CRITICAL Nx-os 275 records CRITICAL Unified Communications Manager 239 records CRITICAL Ios Xr 200 records CRITICAL Identity Services Engine 198 records CRITICAL

Records

14 records in Vedge 1000 Firmware · all components

TI-2019-01276 CVE-2019-1650 · GHSA-wchj-88hf-ghm5

Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability

Priority MEDIUM 46

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03475 Published 2019-01-24 No fix listed CWE-20
TI-2018-00391 CVE-2018-0432 · GHSA-7jp6-h3hx-67f6

Cisco SD-WAN Solution Privilege Escalation Vulnerability

Priority MEDIUM 45

A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02633 Published 2018-10-05 No fix listed CWE-264
TI-2021-01240 CVE-2021-1513 · GHSA-g2x9-h986-5hj3

Cisco SD-WAN Software vDaemon Denial of Service Vulnerability

Priority MEDIUM 42

A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service (DoS) condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01519 Published 2021-05-06 No fix listed CWE-20
TI-2021-01238 CVE-2021-1511 · GHSA-88h6-hmmq-34qm

Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities

Priority LOW 37

Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01024 Published 2021-05-06 No fix listed CWE-119
TI-2021-01237 CVE-2021-1510 · GHSA-fhmq-3hvh-w6rm

Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities

Priority LOW 37

Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0122 Published 2021-05-06 No fix listed CWE-119
TI-2021-01236 CVE-2021-1509 · GHSA-x977-vgq2-xc7r

Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities

Priority LOW 37

Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01216 Published 2021-05-06 No fix listed CWE-119
TI-2021-01255 CVE-2021-1528 · GHSA-cpmx-5wrq-wv6m

Cisco SD-WAN Software Privilege Escalation Vulnerability

Priority LOW 36

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00248 Published 2021-06-04 No fix listed CWE-250
TI-2019-01274 CVE-2019-1648 · GHSA-2249-5x8x-97jc

Cisco SD-WAN Solution Privilege Escalation Vulnerability

Priority LOW 36

A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00372 Published 2019-01-24 No fix listed CWE-264
TI-2019-01272 CVE-2019-1646 · GHSA-xphx-jp87-55x8

Privilege Escalation Vulnerability in Cisco SD-WAN Solution

Priority LOW 36

A vulnerability in the local CLI of the Cisco SD-WAN Solution could allow an authenticated, local attacker to escalate privileges and modify device configuration files.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00446 Published 2019-01-24 No fix listed CWE-264
TI-2018-00393 CVE-2018-0434 · GHSA-6qq2-f6xc-778x

Cisco SD-WAN Solution Certificate Validation Vulnerability

Priority LOW 36

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate.

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.00832 Published 2018-10-05 No fix listed CWE-295
TI-2018-00392 CVE-2018-0433 · GHSA-r8cw-3qqx-pr24

Cisco SD-WAN Solution Command Injection Vulnerability

Priority LOW 36

A vulnerability in the command-line interface (CLI) in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0045 Published 2018-10-05 No fix listed CWE-77
TI-2021-01241 CVE-2021-1514 · GHSA-rpjx-3g4c-xqfh

Cisco SD-WAN Software Privilege Escalation Vulnerability

Priority LOW 34

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with Administrator privileges on the underlying operating system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00325 Published 2021-05-06 No fix listed CWE-20
TI-2021-01239 CVE-2021-1512 · GHSA-c5wr-523p-2hqc

Cisco SD-WAN Software Arbitrary File Corruption Vulnerability

Priority LOW 26

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00229 Published 2021-05-06 No fix listed CWE-552
TI-2021-01271 CVE-2021-1546 · GHSA-f3w5-f4c4-r3fc

Cisco SD-WAN Software Information Disclosure Vulnerability

Priority LOW 24

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00232 Published 2021-09-23 No fix listed CWE-209
Open these records in search →