Cisco

CPE vendor key: cisco · 737 CVEs published in the last 24 months.

CVEs (365 d)

330

▲ +56 vs prior 30d

Avg CVSS (365 d)

6.59

over 330 CVEs

Avg EPSS pct (365 d)

0.28

higher = more likely exploited

KEV hit rate (365 d)

4.8%

16 of 330 added to CISA KEV

LLM-credited CVEs

none detected

Monthly CVE volume — last 24 months

Each point is one calendar month. Bars in the severity card to the right slice the same volume by CVSS band.

Severity mix

Stacked by CVSS band (Critical / High / Medium / Low) using the best available metric per CVE.

Top affected products (24 mo)

secure_firewall_threat_defense

ios_xe

adaptive_security_appliance_software

identity_services_engine

secure_firewall_management_center

catalyst_sd-wan_manager

ios_xr

ios

roomos

unified_contact_center_express

Distinct CVEs that include each product in their CPE configuration.

Top CWEs (24 mo)

Distinct CVEs assigned each weakness.

Recent CISA KEV adds (last 12 months)

Added	CVE	Product	KEV name
2026-08-11	CVE-2026-20349	Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
2026-07-29	CVE-2026-20316	Secure Firewall Management Center (FMC)	Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
2026-07-13	CVE-2008-4128	IOS	Cisco IOS Cross-Site Request Forgery Vulnerability
2026-06-25	CVE-2026-20230	Unified Communications Manager	Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
2026-06-15	CVE-2026-20262	Catalyst SD-WAN Manager	Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
2026-06-09	CVE-2026-20245	Catalyst SD-WAN Manager	Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
2026-05-14	CVE-2026-20182	Catalyst SD-WAN	Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
2026-04-20	CVE-2026-20133	Catalyst SD-WAN Manager	Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
2026-04-20	CVE-2026-20128	Catalyst SD-WAN Manager	Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
2026-04-20	CVE-2026-20122	Catalyst SD-WAN Manger	Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
2026-03-19	CVE-2026-20131	Secure Firewall Management Center (FMC)	Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
2026-02-25	CVE-2026-20127	Catalyst SD-WAN Controller and Manager	Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
2026-02-25	CVE-2022-20775	SD-WAN	Cisco SD-WAN Path Traversal Vulnerability
2026-01-21	CVE-2026-20045	Unified Communications Manager	Cisco Unified Communications Products Code Injection Vulnerability
2025-12-17	CVE-2025-20393	Multiple Products	Cisco Multiple Products Improper Input Validation Vulnerability
2025-09-29	CVE-2025-20352	IOS and IOS XE	Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
2025-09-25	CVE-2025-20362	Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense	Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
2025-09-25	CVE-2025-20333	Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

Filtered to KEV entries whose CISA vendor or product name matches this vendor exactly, to drop cross-OS noise (e.g. third-party Windows apps that CPE-map to Microsoft).

Generated 23 August 2026 00:24 UTC .