Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 35 added in the last 30 days, latest on Nov 6, 2026.
102 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Oct 29, 2026 | CVE-2026-76418 | Cisco · Secure Firewall ASA Software and Cisco Secure FTD Software | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability | High 8.6 | 0.8% | Nov 1, 2026 |
| Oct 14, 2026 | CVE-2026-76519 | Cisco · Secure Email Gateway | Cisco Secure Email Gateway Relative Path Traversal Vulnerability | Critical 9.8 | 6.2% | Oct 17, 2026 |
| Sep 30, 2026 | CVE-2026-76504 | Cisco · Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | Critical 9.8 | 38.9% | Oct 3, 2026 |
| Sep 16, 2026 | CVE-2026-76460 | Cisco · Identity Services Engine | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | Critical 10.0 | 75.6% | Sep 19, 2026 |
| Sep 14, 2026 | CVE-2026-76461 | Cisco · Secure Email Gateway | Cisco Secure Email Gateway SQL Injection Vulnerability | Critical 9.8 | 40.2% | Sep 17, 2026 |
| Sep 9, 2026 | CVE-2026-20079 | Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | Critical 10.0 | 88.7% | Sep 12, 2026 |
| Aug 11, 2026 | CVE-2026-20349 | Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | High 8.6 | 1.0% | Aug 14, 2026 |
| Jul 29, 2026 | CVE-2026-20316 Ransomware | Cisco · Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | Medium 5.3 | 35.1% | Aug 1, 2026 |
| Jul 13, 2026 | CVE-2008-4128 | Cisco · IOS | Cisco IOS Cross-Site Request Forgery Vulnerability | High 8.1 | 33.9% | Jul 16, 2026 |
| Jun 25, 2026 | CVE-2026-20230 | Cisco · Unified Communications Manager | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | High 8.6 | 88.5% | Jun 28, 2026 |
| Jun 15, 2026 | CVE-2026-20262 | Cisco · Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | Medium 6.5 | 29.1% | Jun 29, 2026 |
| Jun 9, 2026 | CVE-2026-20245 | Cisco · Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | High 7.8 | 25.3% | Jun 23, 2026 |
| May 14, 2026 | CVE-2026-20182 | Cisco · Catalyst SD-WAN | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | Critical 10.0 | 91.8% | May 17, 2026 |
| Apr 20, 2026 | CVE-2026-20133 | Cisco · Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | Medium 6.5 | 35.3% | Apr 23, 2026 |
| Apr 20, 2026 | CVE-2026-20128 | Cisco · Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | High 7.5 | 8.3% | Apr 23, 2026 |
| Apr 20, 2026 | CVE-2026-20122 | Cisco · Catalyst SD-WAN Manger | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | Medium 5.4 | 25.8% | Apr 23, 2026 |
| Mar 19, 2026 | CVE-2026-20131 Ransomware | Cisco · Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability | Critical 10.0 | 44.4% | Mar 22, 2026 |
| Feb 25, 2026 | CVE-2026-20127 | Cisco · Catalyst SD-WAN Controller and Manager | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | Critical 10.0 | 87.6% | Feb 27, 2026 |
| Feb 25, 2026 | CVE-2022-20775 | Cisco · SD-WAN | Cisco SD-WAN Path Traversal Vulnerability | High 7.8 | 12.0% | Feb 27, 2026 |
| Jan 21, 2026 | CVE-2026-20045 | Cisco · Unified Communications Manager | Cisco Unified Communications Products Code Injection Vulnerability | High 8.2 | 4.5% | Feb 11, 2026 |
| Dec 17, 2025 | CVE-2025-20393 | Cisco · Multiple Products | Cisco Multiple Products Improper Input Validation Vulnerability | Critical 10.0 | 32.4% | Dec 24, 2025 |
| Sep 29, 2025 | CVE-2025-20352 | Cisco · IOS and IOS XE | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | High 7.7 | 40.6% | Oct 20, 2025 |
| Sep 25, 2025 | CVE-2025-20362 | Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | Medium 6.5 | 86.7% | Sep 26, 2025 |
| Sep 25, 2025 | CVE-2025-20333 | Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | Critical 9.9 | 72.0% | Sep 26, 2025 |
| Jul 28, 2025 | CVE-2025-20337 | Cisco · Identity Services Engine | Cisco Identity Services Engine Injection Vulnerability | Critical 10.0 | 74.5% | Aug 18, 2025 |
| Jul 28, 2025 | CVE-2025-20281 | Cisco · Identity Services Engine | Cisco Identity Services Engine Injection Vulnerability | Critical 10.0 | 97.6% | Aug 18, 2025 |
| Mar 31, 2025 | CVE-2024-20439 | Cisco · Smart Licensing Utility | Cisco Smart Licensing Utility Static Credential Vulnerability | Critical 9.8 | 97.1% | Apr 21, 2025 |
| Mar 3, 2025 | CVE-2023-20118 | Cisco · Small Business RV Series Routers | Cisco Small Business RV Series Routers Command Injection Vulnerability | Medium 6.5 | 54.1% | Mar 24, 2025 |
| Nov 12, 2024 | CVE-2014-2120 | Cisco · Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability | Medium 5.4 | 22.6% | Dec 3, 2024 |
| Oct 24, 2024 | CVE-2024-20481 | Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Denial-of-Service Vulnerability | Medium 5.8 | 15.9% | Nov 14, 2024 |
| Jul 2, 2024 | CVE-2024-20399 | Cisco · NX-OS | Cisco NX-OS Command Injection Vulnerability | Medium 6.0 | 4.3% | Jul 23, 2024 |
| Apr 24, 2024 | CVE-2024-20359 | Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Privilege Escalation Vulnerability | Medium 6.0 | 18.8% | May 1, 2024 |
| Apr 24, 2024 | CVE-2024-20353 | Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Denial of Service Vulnerability | High 8.6 | 69.8% | May 1, 2024 |
| Feb 15, 2024 | CVE-2020-3259 Ransomware | Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Information Disclosure Vulnerability | High 7.5 | 71.5% | Mar 7, 2024 |
| Oct 23, 2023 | CVE-2023-20273 | Cisco · Cisco IOS XE Web UI | Cisco IOS XE Web UI Command Injection Vulnerability | High 7.2 | 92.9% | Oct 27, 2023 |
| Oct 16, 2023 | CVE-2023-20198 | Cisco · IOS XE Web UI | Cisco IOS XE Web UI Privilege Escalation Vulnerability | Critical 10.0 | 99.6% | Oct 20, 2023 |
| Oct 10, 2023 | CVE-2023-20109 | Cisco · IOS and IOS XE | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | Medium 6.6 | 2.5% | Oct 31, 2023 |
| Sep 13, 2023 | CVE-2023-20269 Ransomware | Cisco · Adaptive Security Appliance and Firepower Threat Defense | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability | Medium 5.0 | 26.6% | Oct 4, 2023 |
| May 19, 2023 | CVE-2016-6415 | Cisco · IOS, IOS XR, and IOS XE | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability | High 7.5 | 87.7% | Jun 9, 2023 |
| May 19, 2023 | CVE-2004-1464 | Cisco · IOS | Cisco IOS Denial-of-Service Vulnerability | Medium 5.9 | 4.8% | Jun 9, 2023 |
| Apr 19, 2023 | CVE-2017-6742 | Cisco · IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | High 8.8 | 21.3% | May 10, 2023 |
| Oct 24, 2022 | CVE-2020-3433 Ransomware | Cisco · AnyConnect Secure | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | High 7.8 | 10.0% | Nov 14, 2022 |
| Oct 24, 2022 | CVE-2020-3153 Ransomware | Cisco · AnyConnect Secure | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | Medium 6.5 | 28.5% | Nov 14, 2022 |
| Jun 8, 2022 | CVE-2019-15271 | Cisco · RV Series Routers | Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability | High 8.8 | 5.5% | Jun 22, 2022 |
| May 24, 2022 | CVE-2016-6367 | Cisco · Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability | High 7.8 | 22.6% | Jun 14, 2022 |
| May 24, 2022 | CVE-2016-6366 | Cisco · Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability | High 8.8 | 87.6% | Jun 14, 2022 |
| May 23, 2022 | CVE-2022-20821 | Cisco · IOS XR | Cisco IOS XR Open Port Vulnerability | Medium 6.5 | 11.5% | Jun 13, 2022 |
| Mar 25, 2022 | CVE-2018-0147 | Cisco · Secure Access Control System (ACS) | Cisco Secure Access Control System Java Deserialization Vulnerability | Critical 9.8 | 18.2% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2018-0125 | Cisco · VPN Routers | Cisco VPN Routers Remote Code Execution Vulnerability | Critical 9.8 | 55.2% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2017-3881 | Cisco · IOS and IOS XE | Cisco IOS and IOS XE Remote Code Execution Vulnerability | Critical 9.8 | 99.0% | Apr 15, 2022 |