Browse CVEs

HIGH 7.7 CVE-2026-20014 A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacke… Adaptive Security Appliance Software 7.0.9 / 7.2.11+ Fix from $1,9502026-03-04 MEDIUM 5.8 CVE-2026-20013 A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attac… Adaptive Security Appliance Software 7.2.11 / 7.4.3+ Fix from $1,6002026-03-04 MEDIUM 5.8 CVE-2026-20015 A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attac… Adaptive Security Appliance Software 7.2.11 / 7.4.3+ Fix from $1,6002026-03-04 MEDIUM 6.0 CVE-2026-20008 A vulnerability in a small subset of CLI commands that are used on Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure … Adaptive Security Appliance Software 7.0.9 / 7.2.11+ Fix from $1,6002026-03-04 MEDIUM 5.3 CVE-2026-20009 A vulnerability in the implementation of the proprietary SSH stack with SSH key-based authentication in Cisco Secure Firewall Adaptive Security Appli… Adaptive Security Appliance Software 9.18.4.71 / 9.20.4.10+ Fix from $1,6002026-03-04 HIGH 8.1 CVE-2026-20002 A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injec… Secure Firewall Management Center after 7.7.10.1 Fix from $1,9502026-03-04 CRITICAL 9.8 CVE-2026-20129 A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain access to an … Catalyst Sd Wan Manager 20.9.8.2 / 20.12.5.3+ Fix from $2,3002026-02-25 HIGH 7.5 CVE-2026-20128 KEVEPSS 7% A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain D… Catalyst Sd Wan Manager 20.9.8.2 / 20.12.5.3+ Fix from $1,9502026-02-25 HIGH 7.5 CVE-2026-20133 KEVEPSS 31% A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system… Catalyst Sd Wan Manager 20.9.8.2 / 20.12.5.3+ Fix from $1,9502026-02-25 CRITICAL 10.0 CVE-2026-20127 KEVEPSS 88% A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD… Catalyst Sd Wan Manager 20.9.8.2 / 20.12.5.3+ Fix from $2,3002026-02-25 HIGH 7.8 CVE-2026-20126 A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gain root privileges on the unde… Catalyst Sd Wan Manager 20.9.8.2 / 20.12.5.3+ Fix from $1,9502026-02-25 MEDIUM 5.4 CVE-2026-20122 KEVEPSS 25% A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local f… Catalyst Sd Wan Manager 20.9.8.2 / 20.12.5.3+ Fix from $1,6002026-02-25 CRITICAL 9.1 CVE-2026-26057 Skill Scanner is a security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. A vulnerabilit… Skill Scanner 1.0.2+ Fix from $2,3002026-02-19 HIGH 8.8 CVE-2026-20098 A vulnerability in the Certificate Management feature of Cisco Meeting Management could allow an authenticated, remote attacker to upload arbitrary f… Meeting Management 3.12.1+ Fix from $1,9502026-02-04 MEDIUM 6.1 CVE-2026-20123 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow… Evolved Programmable Network Manager 3.10.6 / 8.1.1+ Fix from $1,6002026-02-04 CRITICAL 9.8 CVE-2026-20045 KEV A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME… Unified Communications Manager 14su5+ Fix from $2,3002026-01-21 CRITICAL 10.0 CVE-2025-20393 KEVEPSS 30% A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could … Asyncos 15.0.2-007 / 15.0.5-016+ Fix from $2,3002025-12-17 MEDIUM 6.1 CVE-2025-20353 A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote attacker to conduct a cross-sit… Catalyst Center 2.3.7.10+ Fix from $1,6002025-11-13 HIGH 8.8 CVE-2025-20349 A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted … Catalyst Center 2.3.7.10+ Fix from $1,9502025-11-13 CRITICAL 9.8 CVE-2025-20358 A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass… Unified Contact Center Express 12.5+ Fix from $2,3002025-11-05 HIGH 7.2 CVE-2025-20375 A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulne… Unified Contact Center Express 12.5+ Fix from $1,9502025-11-05 HIGH 7.2 CVE-2025-20376 A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulne… Unified Contact Center Express 12.5+ Fix from $1,9502025-11-05 CRITICAL 9.8 CVE-2025-20354 A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arb… Unified Contact Center Express 12.5+ Fix from $2,3002025-11-05 HIGH 7.5 CVE-2025-20343 A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine (ISE) could allow … Identity Services Engine No fix yet Fix from $1,9502025-11-05 MEDIUM 5.4 CVE-2025-20303 Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduc… Identity Services Engine after 3.1.0 Fix from $1,6002025-11-05 MEDIUM 5.4 CVE-2025-20304 Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduc… Identity Services Engine after 3.1.0 Fix from $1,6002025-11-05 MEDIUM 5.4 CVE-2025-20289 Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduc… Identity Services Engine after 3.1.0 Fix from $1,6002025-11-05 MEDIUM 6.1 CVE-2025-20351 A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Soft… Desk Phone 9871 Firmware 14.3+ Fix from $1,6002025-10-15 HIGH 7.5 CVE-2025-20350 A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Soft… Desk Phone 9871 Firmware 14.3+ Fix from $1,9502025-10-15 MEDIUM 5.4 CVE-2025-20357 A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-sit… Cyber Vision Center Mitigation only Fix from $1,6002025-10-01