Cisco
101 Cisco flaws are on CISA's list of vulnerabilities attackers have used, 19 of them added in 2026. CISA says 7 are known to be used by ransomware. The latest was added Oct 14, 2026.
101on CISA's list, all time
19added in 2026
6in the last 90 days
7used by ransomware
23zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| IOS and IOS XE Software | 14 | Apr 19, 2023 |
| Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 6 | Oct 24, 2024 |
| IOS XR | 6 | May 23, 2022 |
| IOS software | 6 | Mar 3, 2022 |
| Catalyst SD-WAN Manager | 5 | Sep 30, 2026 |
| Small Business RV160, RV260, RV340, and RV345 Series Routers | 5 | Mar 3, 2022 |
| IOS and IOS XE | 4 | Sep 29, 2025 |
| Adaptive Security Appliance (ASA) | 4 | Nov 12, 2024 |
| IOS Software | 4 | Mar 3, 2022 |
| Identity Services Engine | 3 | Sep 16, 2026 |
Latest Cisco flaws
- Secure Email GatewayCisco Secure Email Gateway Relative Path Traversal Vulnerability
- Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
- Identity Services EngineCisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
- Secure Email GatewayCisco Secure Email Gateway SQL Injection Vulnerability
- Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
- Secure Firewall Management Center (FMC)Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
- IOSCisco IOS Cross-Site Request Forgery Vulnerability
- Unified Communications ManagerCisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
- Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
- Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
- Catalyst SD-WANCisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
- Catalyst SD-WAN MangerCisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
- Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
- Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.