Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

562 records

Priority MEDIUM 44

A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cau…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00573 Published 2026-08-05 No fix listed CWE-606
Priority MEDIUM 44

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00467 Published 2026-08-05 No fix listed CWE-20
Priority MEDIUM 50

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00573 Published 2026-08-05 No fix listed CWE-74
Priority MEDIUM 44

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00467 Published 2026-08-05 No fix listed CWE-691
Priority MEDIUM 44

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00467 Published 2026-08-05 No fix listed CWE-682
Priority MEDIUM 44

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00467 Published 2026-08-05 No fix listed CWE-664
Priority MEDIUM 44

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00467 Published 2026-08-05 No fix listed CWE-119
Priority MEDIUM 41

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00384 Published 2026-08-05 No fix listed CWE-284
Priority LOW 34

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (D…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00501 Published 2026-08-05 No fix listed CWE-772
Priority LOW 28

A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and IE9320 Rugged Series Switches, and Cisco IE35…

CVSS 3.1MEDIUM 6.1 Physical No auth No interaction EPSS 0.0016 Published 2026-03-25 No fix listed CWE-124
TI-2026-16230 CVE-2026-20012 · GHSA-5cpj-j8xh-5rgh

Memory leak in Cisco IOS

Priority MEDIUM 43

A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Defe…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0036 Published 2026-03-25 No fix listed CWE-401
Priority MEDIUM 43

A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VLANs, resulting in a denial of service (DoS) condition…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0036 Published 2026-03-25 No fix listed CWE-400
TI-2025-14658 CVE-2025-20363 · GHSA-8wv4-73v4-qxp2

Heap-based buffer overflow in Cisco IOS

Priority MEDIUM 51

A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR So…

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.0716 Published 2025-09-25 No fix listed CWE-122
Priority LOW 31

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected devi…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00294 Published 2025-09-24 No fix listed CWE-141
TI-2025-14449 CVE-2025-20149 · GHSA-833m-h6fc-hmvx

Buffer overflow in Cisco IOS

Priority LOW 28

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.0024 Published 2025-09-24 No fix listed CWE-120
TI-2025-14609 CVE-2025-20313 · GHSA-8vx8-2pfg-45rm

Path traversal in Cisco IOS XE Software

Priority LOW 31

Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at b…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00182 Published 2025-09-24 No fix listed CWE-35
Priority LOW 32

A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an egress port to become blocked and drop a…

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00212 Published 2025-09-24 No fix listed CWE-19
TI-2025-14608 CVE-2025-20312 · GHSA-6cwx-5rq4-6px8

Infinite loop in Cisco IOS XE Software

Priority LOW 34

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00416 Published 2025-09-24 No fix listed CWE-835
TI-2025-14647 CVE-2025-20352 · GHSA-c924-mch4-p3p3

Stack-based buffer overflow in Cisco IOS

Priority CRITICAL 93KEV

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a de…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.40575 Published 2025-09-24 No fix listed CWE-121
TI-2025-14460 CVE-2025-20160 · GHSA-g4wr-69xr-36p6

Improper authentication in Cisco IOS

Priority LOW 38

A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00448 Published 2025-09-24 No fix listed CWE-287
Priority MEDIUM 44

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, causing a denial of service (DoS…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00465 Published 2025-09-24 No fix listed CWE-805
Priority LOW 20

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and execute commands on the CLI of an affected device.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0024 Published 2025-05-07 No fix listed CWE-352
Priority LOW 26

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00333 Published 2025-05-07 No fix listed CWE-78
Load more