Browse CVEs

HIGH 7.2 CVE-2026-24700 An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W … Rv130 Firmware No fix yet Fix from $1,9502026-07-08 HIGH 7.2 CVE-2026-24697 An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV11… Rv130 Firmware Mitigation only Fix from $1,9502026-07-08 HIGH 7.2 CVE-2026-24698 An OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd" binary in Cisco RV130/RV130W with firmware 1.0.3.55… Rv130 Firmware Mitigation only Fix from $1,9502026-07-08 HIGH 7.2 CVE-2026-24699 An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W r… Rv130 Firmware Mitigation only Fix from $1,9502026-07-08 HIGH 8.8 CVE-2026-20040 A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underly… Ios Xr 25.2.21 / 25.4.2+ Fix from $1,9502026-03-11 MEDIUM 6.0 CVE-2026-20008 A vulnerability in a small subset of CLI commands that are used on Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure … Adaptive Security Appliance Software 7.0.9 / 7.2.11+ Fix from $1,6002026-03-04 HIGH 8.8 CVE-2025-20349 A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted … Catalyst Center 2.3.7.10+ Fix from $1,9502025-11-13 MEDIUM 6.7 CVE-2025-20308 A vulnerability in Cisco Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the un… Spaces Connector Mitigation only Fix from $1,6002025-07-02 MEDIUM 5.5 CVE-2025-20213 A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite… Catalyst Sd Wan Manager Mitigation only Fix from $1,6002025-05-07 MEDIUM 6.5 CVE-2025-20193 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perfo… Ios Xe Mitigation only Fix from $1,6002025-05-07 MEDIUM 5.4 CVE-2025-20194 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perfo… Ios Xe Mitigation only Fix from $1,6002025-05-07 HIGH 8.8 CVE-2025-20186 A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authenticated, r… Ios Xe Mitigation only Fix from $1,9502025-05-07 HIGH 8.8 CVE-2025-20138 A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underly… Ios Xr 24.2.21 / 24.4+ Fix from $1,9502025-03-12 CRITICAL 9.9 CVE-2023-20036EPSS 13% A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges… Industrial Network Director 1.11.3+ Fix from $2,3002024-11-15 HIGH 8.8 CVE-2022-20871 A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, formerly Cisco Web Security Appliance… Asyncos Mitigation only Fix from $1,9502024-11-15 CRITICAL 9.9 CVE-2024-20424 A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center… Secure Firewall Management Center Mitigation only Fix from $2,3002024-10-23 MEDIUM 6.1 CVE-2024-20275 A vulnerability in the cluster backup feature of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Softwar… Secure Firewall Management Center Mitigation only Fix from $1,6002024-10-23 MEDIUM 6.0 CVE-2024-20461 A vulnerability in the CLI of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, local attacker with high priv… Ata 191 Firmware 11.2.5 / 12.0.2+ Fix from $1,6002024-10-16 HIGH 8.2 CVE-2024-20458 A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remot… Ata 191 Firmware 11.2.5 / 12.0.2+ Fix from $1,9502024-10-16 HIGH 7.2 CVE-2024-20459 A vulnerability in the web-based management interface of Cisco ATA 190 Multiplatform Series Analog Telephone Adapter firmware could allow an authenti… Ata 191 Firmware 11.2.5 / 12.0.2+ Fix from $1,9502024-10-16 HIGH 7.2 CVE-2024-20483 Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Soft… Ios Xr Mitigation only Fix from $1,9502024-09-11 HIGH 7.8 CVE-2024-20398 A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write file system access on the under… Ios Xr Mitigation only Fix from $1,9502024-09-11 MEDIUM 6.7 CVE-2024-20469 A vulnerability in specific CLI commands in Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command inje… Identity Services Engine Mitigation only Fix from $1,6002024-09-04 MEDIUM 6.7 CVE-2024-20399 KEV A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary … Nx Os Mitigation only Fix from $1,6002024-07-01 HIGH 7.8 CVE-2024-20326 A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attac… Confd Basic 5.4 / 5.5+ Fix from $1,9502024-05-16 MEDIUM 6.7 CVE-2024-20358 A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firepower Thre… Adaptive Security Appliance Software Mitigation only Fix from $1,6002024-04-24 MEDIUM 6.5 CVE-2024-20335 A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, rem… Wap121 Firmware Mitigation only Fix from $1,6002024-03-06 HIGH 8.0 CVE-2024-20277 A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an aut… Thousandeyes Enterprise Agent 0.233.2+ Fix from $1,9502024-01-17 HIGH 8.8 CVE-2023-20175 A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlyi… Identity Services Engine Mitigation only Fix from $1,9502023-11-01 HIGH 8.8 CVE-2023-20219 Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote att… Secure Firewall Management Center after 7.3.1.1 Fix from $1,9502023-11-01