Are Cisco & Meraki safe right now?
2 flaws were added to CISA's list of actively exploited vulnerabilities in the last 30 days, including zero-days. If you run Cisco & Meraki, update now.
Exploited in the last 90 days
- Secure Firewall ASA Software and Cisco Secure FTD SoftwareZero-dayCisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
- Secure Email GatewayZero-dayCisco Secure Email Gateway Relative Path Traversal Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
- Catalyst SD-WAN ManagerZero-dayCisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
- Identity Services EngineZero-dayCisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
- Secure Email GatewayZero-dayCisco Secure Email Gateway SQL Injection Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
- Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementRansomware groups are exploiting a perfect-10 Cisco firewall flaw
What to do: Upgrade to Cisco's fixed build for your release, and keep the management screen off the public internet.
- Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Zero-dayCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
Earlier exploited flaws
- Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability Zero-day
- Cisco IOS Cross-Site Request Forgery Vulnerability
- Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
- Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability Zero-day
- Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability Zero-day
- Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Zero-day
- Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
- Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
- Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
- Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
- Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability Zero-day
- Cisco SD-WAN Path Traversal Vulnerability
- Cisco Unified Communications Products Code Injection Vulnerability Zero-day
- Cisco Multiple Products Improper Input Validation Vulnerability Zero-day
- Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Zero-day
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 20 | 12 |
| 2025 | 8 | 4 |
| 2024 | 6 | 4 |
| 2023 | 7 | 3 |
| 2022 | 50 | 1 |
Questions
Are Cisco & Meraki safe right now?
2 flaws were added to CISA's list of actively exploited vulnerabilities in the last 30 days, including zero-days. If you run Cisco & Meraki, update now. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many Cisco & Meraki vulnerabilities have been exploited?
102 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks, 7 of them used by ransomware.
Covers products matching cisco, meraki. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.