Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

618 records

Priority MEDIUM 44

A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cau…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00573 Published 2026-08-05 No fix listed CWE-606
TI-2026-16230 CVE-2026-20012 · GHSA-5cpj-j8xh-5rgh

Memory leak in Cisco IOS

Priority MEDIUM 43

A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Defe…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0036 Published 2026-03-25 No fix listed CWE-401
TI-2025-14658 CVE-2025-20363 · GHSA-8wv4-73v4-qxp2

Heap-based buffer overflow in Cisco IOS

Priority MEDIUM 51

A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR So…

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.0716 Published 2025-09-25 No fix listed CWE-122
TI-2025-14449 CVE-2025-20149 · GHSA-833m-h6fc-hmvx

Buffer overflow in Cisco IOS

Priority LOW 28

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.0024 Published 2025-09-24 No fix listed CWE-120
TI-2025-14647 CVE-2025-20352 · GHSA-c924-mch4-p3p3

Stack-based buffer overflow in Cisco IOS

Priority CRITICAL 93KEV

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a de…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.40575 Published 2025-09-24 No fix listed CWE-121
TI-2025-14460 CVE-2025-20160 · GHSA-g4wr-69xr-36p6

Improper authentication in Cisco IOS

Priority LOW 38

A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00448 Published 2025-09-24 No fix listed CWE-287
TI-2025-14481 CVE-2025-20181 · GHSA-95h6-vgwg-qcqc

Improper signature verification in Cisco IOS

Priority LOW 31

A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical…

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00199 Published 2025-05-07 No fix listed CWE-347
TI-2025-14437 CVE-2025-20137 · GHSA-x37r-wqwh-97qm

Improper access control in Cisco IOS

Priority LOW 21

A vulnerability in the access control list (ACL) programming of Cisco IOS Software that is running on Cisco Catalyst 1000 Switches and Cisco Catalyst 2960L Switches could allow an unauthenticated, remote attacker to bypa…

CVSS 3.1MEDIUM 4.7 Adjacent network No auth No interaction EPSS 0.00285 Published 2025-05-07 No fix listed CWE-284
Priority MEDIUM 46

A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload, re…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00545 Published 2025-05-07 No fix listed CWE-20
TI-2024-13347 CVE-2024-20414 · GHSA-m9jx-f6w8-8hj9

Improper authorization in Cisco IOS

Priority LOW 28

A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system through th…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00264 Published 2024-09-25 No fix listed CWE-285
TI-2024-13390 CVE-2024-20465 · GHSA-q728-88fr-65v3

Improper access control in Cisco IOS

Priority LOW 32

A vulnerability in the access control list (ACL) programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches could allow an unauthenticated, remote attacker to bypass a con…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00416 Published 2024-09-25 No fix listed CWE-284
TI-2024-13361 CVE-2024-20433 · GHSA-fg4m-w584-q5x8

Stack-based buffer overflow in Cisco IOS

Priority MEDIUM 44

A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resu…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0063 Published 2024-09-25 No fix listed CWE-121
TI-2024-13241 CVE-2024-20307 · GHSA-gfp8-qpwg-x4vj

Stack-based buffer overflow in Cisco IOS

Priority LOW 34

A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap overflow, resulting in an affected device reloading.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00726 Published 2024-03-27 No fix listed CWE-121
TI-2024-13242 CVE-2024-20308 · GHSA-6vwv-6hmx-54hh

Out-of-bounds write in Cisco IOS

Priority MEDIUM 45

A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow, resulting in an affected device reloading.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00803 Published 2024-03-27 No fix listed CWE-787
TI-2024-13246 CVE-2024-20312 · GHSA-h59x-f52x-4wxj

NULL pointer dereference in Cisco IOS

Priority LOW 32

A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) cond…

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00256 Published 2024-03-27 No fix listed CWE-476
Load more