Sysprobs Sysprobs

CISA KEV by vendor

Cisco vulnerabilities in the CISA KEV catalogue

102 Cisco entries in CISA's Known Exploited Vulnerabilities catalogue, 7 of them (7 percent) known to have been used in ransomware campaigns. First added 3 November 2021, latest 29 October 2026.

Last updated MethodologyDownload all entries (CSV)

By . Published by Sysprobs.

Dinesh has worked in IT for about 20 years across virtualisation, networking and Microsoft platforms. He runs Sysprobs.

Data status: a source is stale

Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually

102entries, 5.8% of the catalogue
7known ransomware use
0added in the last 7 days
0federal due dates in the next 14 days

Products

Cisco products in the catalogue, by number of entries
Product, as CISA names itEntries
IOS and IOS XE Software14
Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)6
IOS XR6
IOS software6
Catalyst SD-WAN Manager5
Small Business RV160, RV260, RV340, and RV345 Series Routers5
IOS and IOS XE4
Adaptive Security Appliance (ASA)4
IOS Software4
Identity Services Engine3
IOS Software and Cisco IOS XE Software3
Secure Email Gateway2
Secure Firewall Management Center (FMC)2
IOS2
Unified Communications Manager2
Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense2
AnyConnect Secure2
IOS, XR, and XE Software2
IOS XE Software2
HyperFlex HX2
Secure Firewall ASA Software and Cisco Secure FTD Software1
Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management1
Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)1
Catalyst SD-WAN1
Catalyst SD-WAN Manger1
Catalyst SD-WAN Controller and Manager1
SD-WAN1
Multiple Products1
Smart Licensing Utility1
Small Business RV Series Routers1
NX-OS1
Cisco IOS XE Web UI1
IOS XE Web UI1
Adaptive Security Appliance and Firepower Threat Defense1
IOS, IOS XR, and IOS XE1
RV Series Routers1
Secure Access Control System (ACS)1
VPN Routers1
Prime Data Center Network Manager (DCNM)1
Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers1
Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches1
Catalyst 6800 Series Switches1
Cisco IP Phones1
Small Business RV320 and RV325 Routers1

Latest additions

The 10 most recent Cisco entries
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2026-76418Secure Firewall ASA Software and Cisco Secure FTD Software2026-10-292026-11-01 passedUnknown8.6 High0.8%Auto, partial3 days
CVE-2026-76519Secure Email Gateway2026-10-142026-10-17 passedUnknown9.8 Critical2.1%Auto, total3 days + triage
CVE-2026-76504Catalyst SD-WAN Manager2026-09-302026-10-03Unknown9.8 Critical38.9%Auto, total3 days + triage
CVE-2026-76460Identity Services Engine2026-09-162026-09-19Unknown10.0 Critical75.5%Auto, total3 days + triage
CVE-2026-76461Secure Email Gateway2026-09-142026-09-17Unknown9.8 Critical29.5%Auto, total3 days + triage
CVE-2026-20079Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management2026-09-092026-09-12Unknown10.0 Critical88.6%Auto, total3 days + triage
CVE-2026-20349Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)2026-08-112026-08-14Unknown8.6 High1.0%Auto, partial3 days
CVE-2026-20316Secure Firewall Management Center (FMC)2026-07-292026-08-01Known5.3 Medium35.0%Auto, partial3 days
CVE-2008-4128IOS2026-07-132026-07-16Unknown8.1 High33.8%Not auto, total3 days + triage
CVE-2026-20230Unified Communications Manager2026-06-252026-06-28Unknown8.6 High88.5%Not auto, total3 days + triage

All 102 entries

Every Cisco entry, newest first
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2026-76418Secure Firewall ASA Software and Cisco Secure FTD Software2026-10-292026-11-01 passedUnknown8.6 High0.8%Auto, partial3 days
CVE-2026-76519Secure Email Gateway2026-10-142026-10-17 passedUnknown9.8 Critical2.1%Auto, total3 days + triage
CVE-2026-76504Catalyst SD-WAN Manager2026-09-302026-10-03Unknown9.8 Critical38.9%Auto, total3 days + triage
CVE-2026-76460Identity Services Engine2026-09-162026-09-19Unknown10.0 Critical75.5%Auto, total3 days + triage
CVE-2026-76461Secure Email Gateway2026-09-142026-09-17Unknown9.8 Critical29.5%Auto, total3 days + triage
CVE-2026-20079Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management2026-09-092026-09-12Unknown10.0 Critical88.6%Auto, total3 days + triage
CVE-2026-20349Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)2026-08-112026-08-14Unknown8.6 High1.0%Auto, partial3 days
CVE-2026-20316Secure Firewall Management Center (FMC)2026-07-292026-08-01Known5.3 Medium35.0%Auto, partial3 days
CVE-2008-4128IOS2026-07-132026-07-16Unknown8.1 High33.8%Not auto, total3 days + triage
CVE-2026-20230Unified Communications Manager2026-06-252026-06-28Unknown8.6 High88.5%Not auto, total3 days + triage
CVE-2026-20262Catalyst SD-WAN Manager2026-06-152026-06-29Unknown6.5 Medium29.1%Not auto, partial14 days
CVE-2026-20245Catalyst SD-WAN Manager2026-06-092026-06-23Unknown7.8 High25.3%Not auto, total3 days + triage
CVE-2026-20182Catalyst SD-WAN2026-05-142026-05-17Unknown10.0 Critical91.8%Auto, total3 days + triage
CVE-2026-20133Catalyst SD-WAN Manager2026-04-202026-04-23Unknown7.5 High35.2%Not auto, partial14 days
CVE-2026-20128Catalyst SD-WAN Manager2026-04-202026-04-23Unknown7.5 High8.3%Not auto, total3 days + triage
CVE-2026-20122Catalyst SD-WAN Manger2026-04-202026-04-23Unknown5.4 Medium25.8%Not auto, total3 days + triage
CVE-2026-20131Secure Firewall Management Center (FMC)2026-03-192026-03-22Known10.0 Critical44.4%Auto, total3 days + triage
CVE-2026-20127Catalyst SD-WAN Controller and Manager2026-02-252026-02-27Unknown10.0 Critical87.6%Auto, total3 days + triage
CVE-2022-20775SD-WAN2026-02-252026-02-27Unknown7.8 High11.9%Not auto, total3 days + triage
CVE-2026-20045Unified Communications Manager2026-01-212026-02-11Unknown9.8 Critical4.5%Auto, total3 days + triage
CVE-2025-20393Multiple Products2025-12-172025-12-24Unknown10.0 Critical32.3%Auto, total3 days + triage
CVE-2025-20352IOS and IOS XE2025-09-292025-10-20Unknown7.7 High40.5%Not auto, total3 days + triage
CVE-2025-20362Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense2025-09-252025-09-26Unknown8.6 High86.6%Auto, partial3 days
CVE-2025-20333Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense2025-09-252025-09-26Unknown9.9 Critical72.0%Not auto, total3 days + triage
CVE-2025-20337Identity Services Engine2025-07-282025-08-18Unknown10.0 Critical74.4%Auto, total3 days + triage
CVE-2025-20281Identity Services Engine2025-07-282025-08-18Unknown10.0 Critical97.6%Auto, total3 days + triage
CVE-2024-20439Smart Licensing Utility2025-03-312025-04-21Unknown9.8 Critical97.0%Auto, total3 days + triage
CVE-2023-20118Small Business RV Series Routers2025-03-032025-03-24Unknown7.2 High54.1%Not auto, total3 days + triage
CVE-2014-2120Adaptive Security Appliance (ASA)2024-11-122024-12-03Unknown6.1 Medium22.5%Not auto, total3 days + triage
CVE-2024-20481Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)2024-10-242024-11-14Unknown5.8 Medium15.8%Auto, partial3 days
CVE-2024-20399NX-OS2024-07-022024-07-23Unknown6.7 Medium4.3%Not auto, total3 days + triage
CVE-2024-20359Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)2024-04-242024-05-01Unknown6.0 Medium18.8%Not auto, partial14 days
CVE-2024-20353Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)2024-04-242024-05-01Unknown8.6 High69.8%Auto, partial3 days
CVE-2020-3259Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)2024-02-152024-03-07Known7.5 High71.5%Auto, partial3 days
CVE-2023-20273Cisco IOS XE Web UI2023-10-232023-10-27Unknown7.2 High92.9%Not auto, total3 days + triage
CVE-2023-20198IOS XE Web UI2023-10-162023-10-20Unknown10.0 Critical99.6%Auto, total3 days + triage
CVE-2023-20109IOS and IOS XE2023-10-102023-10-31Unknown6.6 Medium2.5%Not auto, total3 days + triage
CVE-2023-20269Adaptive Security Appliance and Firepower Threat Defense2023-09-132023-10-04Known9.1 Critical26.6%Not auto, partial14 days
CVE-2016-6415IOS, IOS XR, and IOS XE2023-05-192023-06-09Unknown7.5 High87.6%Auto, partial3 days
CVE-2004-1464IOS2023-05-192023-06-09Unknown5.9 Medium4.8%Not auto, partial14 days
CVE-2017-6742IOS and IOS XE Software2023-04-192023-05-10Unknown8.8 High21.4%Not auto, total3 days + triage
CVE-2020-3433AnyConnect Secure2022-10-242022-11-14Known7.8 High10.0%Not auto, total3 days + triage
CVE-2020-3153AnyConnect Secure2022-10-242022-11-14Known6.5 Medium28.5%Not auto, partial14 days
CVE-2019-15271RV Series Routers2022-06-082022-06-22Unknown8.8 High5.4%Not auto, total3 days + triage
CVE-2016-6367Adaptive Security Appliance (ASA)2022-05-242022-06-14Unknown7.8 High22.5%Not auto, total3 days + triage
CVE-2016-6366Adaptive Security Appliance (ASA)2022-05-242022-06-14Unknown8.8 High87.5%Not auto, total3 days + triage
CVE-2022-20821IOS XR2022-05-232022-06-13Unknown6.5 Medium11.4%Auto, partial3 days
CVE-2018-0147Secure Access Control System (ACS)2022-03-252022-04-15Unknown9.8 Critical18.2%Auto, total3 days + triage
CVE-2018-0125VPN Routers2022-03-252022-04-15Unknown9.8 Critical55.1%Auto, total3 days + triage
CVE-2017-3881IOS and IOS XE2022-03-252022-04-15Unknown9.8 Critical98.9%Auto, total3 days + triage
CVE-2015-0666Prime Data Center Network Manager (DCNM)2022-03-252022-04-15Unknown7.5 High40.3%Auto, partial3 days
CVE-2010-3035IOS XR2022-03-252022-04-15Unknown7.5 High5.6%Auto, partial3 days
CVE-2009-2055IOS XR2022-03-252022-04-15Unknown5.9 Medium3.3%Not auto, partial14 days
CVE-2022-20708Small Business RV160, RV260, RV340, and RV345 Series Routers2022-03-032022-03-17Unknown8.0 High14.8%Auto, total3 days + triage
CVE-2022-20703Small Business RV160, RV260, RV340, and RV345 Series Routers2022-03-032022-03-17Unknown8.0 High9.2%Auto, total3 days + triage
CVE-2022-20701Small Business RV160, RV260, RV340, and RV345 Series Routers2022-03-032022-03-17Unknown7.8 High9.7%Auto, total3 days + triage
CVE-2022-20700Small Business RV160, RV260, RV340, and RV345 Series Routers2022-03-032022-03-17Unknown9.8 Critical5.6%Auto, total3 days + triage
CVE-2022-20699Small Business RV160, RV260, RV340, and RV345 Series Routers2022-03-032022-03-17Unknown9.8 Critical72.4%Auto, total3 days + triage
CVE-2019-1652Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers2022-03-032022-03-17Unknown7.2 High95.9%Not auto, total3 days + triage
CVE-2018-0180IOS Software2022-03-032022-03-17Unknown5.9 Medium4.9%Not auto, partial14 days
CVE-2018-0179IOS Software2022-03-032022-03-17Unknown5.9 Medium4.9%Not auto, partial14 days
CVE-2018-0175IOS, XR, and XE Software2022-03-032022-03-17Unknown8.0 High3.4%Not auto, total3 days + triage
CVE-2018-0174IOS XE Software2022-03-032022-03-17Unknown8.6 High7.6%Auto, partial3 days
CVE-2018-0173IOS and IOS XE Software2022-03-032022-03-17Unknown8.6 High7.6%Not auto, total3 days + triage
CVE-2018-0172IOS and IOS XE Software2022-03-032022-03-17Unknown8.6 High7.8%Not auto, total3 days + triage
CVE-2018-0167IOS, XR, and XE Software2022-03-032022-03-17Unknown8.8 High3.3%Not auto, total3 days + triage
CVE-2018-0161IOS Software2022-03-032022-03-17Unknown6.3 Medium4.1%Not auto, partial14 days
CVE-2018-0159IOS Software and Cisco IOS XE Software2022-03-032022-03-17Unknown7.5 High6.8%Auto, partial3 days
CVE-2018-0158IOS Software and Cisco IOS XE Software2022-03-032022-03-17Unknown8.6 High7.1%Auto, partial3 days
CVE-2018-0156IOS Software and Cisco IOS XE Software2022-03-032022-03-17Unknown7.5 High9.3%Auto, partial3 days
CVE-2018-0155Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches2022-03-032022-03-17Unknown8.6 High7.7%Auto, partial3 days
CVE-2018-0154IOS Software2022-03-032022-03-17Unknown7.5 High7.0%Auto, partial3 days
CVE-2018-0151IOS and IOS XE Software2022-03-032022-03-17Unknown9.8 Critical14.1%Auto, total3 days + triage
CVE-2017-6744IOS software2022-03-032022-03-24Unknown8.8 High7.2%Not auto, total3 days + triage
CVE-2017-6743IOS and IOS XE Software2022-03-032022-03-24Unknown8.8 High10.8%Not auto, total3 days + triage
CVE-2017-6740IOS and IOS XE Software2022-03-032022-03-24Unknown8.8 High11.1%Not auto, total3 days + triage
CVE-2017-6739IOS and IOS XE Software2022-03-032022-03-24Unknown8.8 High10.8%Not auto, total3 days + triage
CVE-2017-6738IOS and IOS XE Software2022-03-032022-03-24Unknown8.8 High10.8%Not auto, total3 days + triage
CVE-2017-6737IOS and IOS XE Software2022-03-032022-03-24Unknown8.8 High44.9%Not auto, total3 days + triage
CVE-2017-6736IOS and IOS XE Software2022-03-032022-03-24Unknown8.8 High70.3%Not auto, total3 days + triage
CVE-2017-6663IOS and IOS XE Software2022-03-032022-03-24Unknown6.5 Medium2.1%Not auto, partial14 days
CVE-2017-6627IOS and IOS XE Software2022-03-032022-03-24Unknown7.5 High6.1%Auto, partial3 days
CVE-2017-12319IOS XE Software2022-03-032022-03-24Unknown5.9 Medium5.2%Auto, partial3 days
CVE-2017-12240IOS and IOS XE Software2022-03-032022-03-24Unknown9.8 Critical13.7%Auto, total3 days + triage
CVE-2017-12238Catalyst 6800 Series Switches2022-03-032022-03-24Unknown6.5 Medium2.0%Not auto, partial14 days
CVE-2017-12237IOS and IOS XE Software2022-03-032022-03-24Unknown7.5 High7.0%Auto, partial3 days
CVE-2017-12235IOS software2022-03-032022-03-24Unknown7.5 High7.0%Auto, partial3 days
CVE-2017-12234IOS software2022-03-032022-03-24Unknown7.5 High7.0%Auto, partial3 days
CVE-2017-12233IOS software2022-03-032022-03-24Unknown7.5 High7.0%Auto, partial3 days
CVE-2017-12232IOS software2022-03-032022-03-24Unknown6.5 Medium2.1%Not auto, partial14 days
CVE-2017-12231IOS software2022-03-032022-03-24Unknown7.5 High7.0%Auto, partial3 days
CVE-2021-1498HyperFlex HX2021-11-032021-11-17Unknown9.8 Critical99.9%Auto, total3 days + triage
CVE-2021-1497HyperFlex HX2021-11-032021-11-17Unknown9.8 Critical99.9%Auto, total3 days + triage
CVE-2020-3580Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)2021-11-032022-05-03Known6.1 Medium85.5%Not auto, partial14 days
CVE-2020-3569IOS XR2021-11-032022-05-03Unknown8.6 High3.3%Auto, partial3 days
CVE-2020-3566IOS XR2021-11-032022-05-03Unknown8.6 High3.7%Auto, partial3 days
CVE-2020-3452Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)2021-11-032022-05-03Unknown7.5 High99.9%Auto, partial3 days
CVE-2020-3161Cisco IP Phones2021-11-032022-05-03Unknown9.8 Critical83.8%Auto, total3 days + triage
CVE-2020-3118IOS XR2021-11-032022-05-03Unknown8.8 High11.6%Not auto, total3 days + triage
CVE-2019-1653Small Business RV320 and RV325 Routers2021-11-032022-05-03Unknown7.5 High99.8%Auto, partial3 days
CVE-2018-0296Adaptive Security Appliance (ASA)2021-11-032022-05-03Unknown7.5 High99.8%Auto, partial3 days
CVE-2018-0171IOS and IOS XE2021-11-032022-05-03Unknown9.8 Critical99.4%Auto, total3 days + triage

Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter Cisco in the tracker by date, score or status.

Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.