Priority MEDIUM 44
A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cau…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-08-05 · No fix listed CWE-606
Priority MEDIUM 44
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00467 · Published 2026-08-05 · No fix listed CWE-20
Priority MEDIUM 50
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-08-05 · No fix listed CWE-74
Priority MEDIUM 44
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00467 · Published 2026-08-05 · No fix listed CWE-691
Priority MEDIUM 44
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00467 · Published 2026-08-05 · No fix listed CWE-682
Priority MEDIUM 44
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00467 · Published 2026-08-05 · No fix listed CWE-664
Priority MEDIUM 44
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00467 · Published 2026-08-05 · No fix listed CWE-119
Priority MEDIUM 41
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.00384 · Published 2026-08-05 · No fix listed CWE-284
Priority MEDIUM 44
A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-08-05 · No fix listed CWE-388
Priority LOW 34
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (D…
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00501 · Published 2026-08-05 · No fix listed CWE-772
Priority LOW 28
A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and IE9320 Rugged Series Switches, and Cisco IE35…
CVSS 3.1MEDIUM 6.1· Physical · No auth · No interaction · EPSS 0.0016 · Published 2026-03-25 · No fix listed CWE-124
Priority LOW 32
A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device.
CVSS 3.1HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.00187 · Published 2026-03-25 · No fix listed CWE-771
Priority MEDIUM 43
A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Defe…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.0036 · Published 2026-03-25 · No fix listed CWE-401
Priority MEDIUM 43
A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VLANs, resulting in a denial of service (DoS) condition…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.0036 · Published 2026-03-25 · No fix listed CWE-400
Priority MEDIUM 51
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR So…
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.0716 · Published 2025-09-25 · No fix listed CWE-122
Priority LOW 31
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected devi…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00294 · Published 2025-09-24 · No fix listed CWE-141
Priority LOW 28
A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition…
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.0024 · Published 2025-09-24 · No fix listed CWE-120
Priority LOW 31
Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at b…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00182 · Published 2025-09-24 · No fix listed CWE-35
Priority LOW 32
A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an egress port to become blocked and drop a…
CVSS 3.1HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.00212 · Published 2025-09-24 · No fix listed CWE-19
Priority LOW 34
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00416 · Published 2025-09-24 · No fix listed CWE-835
Priority CRITICAL 93KEV
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a de…
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.40575 · Published 2025-09-24 · No fix listed CWE-121
Priority LOW 38
A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00448 · Published 2025-09-24 · No fix listed CWE-287
Priority MEDIUM 44
A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, causing a denial of service (DoS…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00465 · Published 2025-09-24 · No fix listed CWE-805
Priority LOW 20
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and execute commands on the CLI of an affected device.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.0024 · Published 2025-05-07 · No fix listed CWE-352
Priority LOW 26
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00333 · Published 2025-05-07 · No fix listed CWE-78
Load more