cisco security advisories
60 threat alerts tracking vulnerabilities and security advisories that affect cisco products.
Vulnios monitors cisco CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent cisco security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2024-20419 — cisco — smart_software_manager_on-prem
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including adminis
criticalCVE-2024-20419Critical Vulnerability: CVE-2025-20354 — cisco — unified_contact_center_express
A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrary commands with ro
criticalCVE-2025-20354Critical Vulnerability: CVE-2025-20358 — cisco — unified_contact_center_express
A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissio
criticalCVE-2025-20358Critical Vulnerability: CVE-2025-20363 — cisco — ios_xr, asr_9001
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software,
criticalCVE-2025-20363Critical Vulnerability: CVE-2024-20412 — cisco — secure_firewall_threat_defense, firepower_1000
A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an affected system using
criticalCVE-2024-20412Critical Vulnerability: CVE-2021-40113 — cisco — catalyst_pon_switch_cgp-ont-1p_firmware, catalyst_pon_switch_cgp-ont-1p
Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote
criticalCVE-2021-40113Critical Vulnerability: CVE-2021-34795 — cisco — catalyst_pon_switch_cgp-ont-1p_firmware, catalyst_pon_switch_cgp-ont-1p
Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote
criticalCVE-2021-34795Critical Vulnerability: CVE-2021-40119 — cisco — policy_suite
A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log in to an affected system as the root user. This vulnerability
criticalCVE-2021-40119Critical Vulnerability: CVE-2021-40112 — cisco — catalyst_pon_switch_cgp-ont-1p_firmware, catalyst_pon_switch_cgp-ont-1p
Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote
criticalCVE-2021-40112Critical Vulnerability: CVE-2021-1619 — cisco — ios_xe, ios_xe_sd-wan
A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass NETCONF or RESTCONF authenticatio
criticalCVE-2021-1619Critical Vulnerability: CVE-2021-34727 — cisco — ios_xe_sd-wan, 1000_integrated_services_router
A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to in
criticalCVE-2021-34727Critical Vulnerability: CVE-2021-34770 — cisco — ios_xe, catalyst_9800
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unaut
criticalCVE-2021-34770Critical Vulnerability: CVE-2021-34746 — cisco — enterprise_nfv_infrastructure_software
A vulnerability in the TACACS+ authentication, authorization and accounting (AAA) feature of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to byp
criticalCVE-2021-34746Critical Vulnerability: CVE-2021-1577 — cisco — application_policy_infrastructure_controller, cloud_application_policy_infrastructure_controller
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an unauthenticated
criticalCVE-2021-1577Critical Vulnerability: CVE-2021-34730 — cisco — application_extension_platform, rv110w_wireless-n_vpn_firewall_firmware
A vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary cod
criticalCVE-2021-34730Critical Vulnerability: CVE-2021-1609 — cisco — small_business_rv_series_router_firmware, small_business_rv340
Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Ex
criticalCVE-2021-1609Critical Vulnerability: CVE-2021-1610 — cisco — small_business_rv_series_router_firmware, small_business_rv340
Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Ex
criticalCVE-2021-1610Critical Vulnerability: CVE-2021-1468 — cisco — catalyst_sd-wan_manager, sd-wan_vmanage
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated,
criticalCVE-2021-1468Critical Vulnerability: CVE-2021-1275 — cisco — catalyst_sd-wan_manager, sd-wan_vmanage
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated,
criticalCVE-2021-1275Critical Vulnerability: CVE-2021-1508 — cisco — catalyst_sd-wan_manager, sd-wan_vmanage
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated,
criticalCVE-2021-1508Critical Vulnerability: CVE-2021-1505 — cisco — catalyst_sd-wan_manager, sd-wan_vmanage
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated,
criticalCVE-2021-1505Critical Vulnerability: CVE-2021-1506 — cisco — catalyst_sd-wan_manager, sd-wan_vmanage
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated,
criticalCVE-2021-1506Critical Vulnerability: CVE-2021-1459 — cisco — rv110w_firmware, rv110w
A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an
criticalCVE-2021-1459Critical Vulnerability: CVE-2021-1418 — cisco — jabber
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating sy
criticalCVE-2021-1418Critical Vulnerability: CVE-2021-1417 — cisco — jabber
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating sy
criticalCVE-2021-1417Critical Vulnerability: CVE-2021-1469 — cisco — jabber
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating sy
criticalCVE-2021-1469Critical Vulnerability: CVE-2021-1471 — cisco — jabber
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating sy
criticalCVE-2021-1471Critical Vulnerability: CVE-2021-1411 — cisco — jabber
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating sy
criticalCVE-2021-1411Critical Vulnerability: CVE-2021-1388 — cisco — aci_multi-site_orchestrator, application_policy_infrastructure_controller
A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engine could allow an unauthenticated, remote attacker to bypass authentication on a
criticalCVE-2021-1388Critical Vulnerability: CVE-2021-1393 — cisco — application_services_engine, application_policy_infrastructure_controller
Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information
criticalCVE-2021-1393Critical Vulnerability: CVE-2021-1361 — cisco — nx-os, nexus_3000
A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco N
criticalCVE-2021-1361Critical Vulnerability: CVE-2021-1396 — cisco — application_services_engine, application_policy_infrastructure_controller
Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information
criticalCVE-2021-1396Critical Vulnerability: CVE-2021-1290 — cisco — rv160w_wireless-ac_vpn_router_firmware, rv160w_wireless-ac_vpn_router
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute a
criticalCVE-2021-1290Critical Vulnerability: CVE-2021-1293 — cisco — rv160w_wireless-ac_vpn_router_firmware, rv160w_wireless-ac_vpn_router
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute a
criticalCVE-2021-1293Critical Vulnerability: CVE-2021-1291 — cisco — rv160w_wireless-ac_vpn_router_firmware, rv160w_wireless-ac_vpn_router
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute a
criticalCVE-2021-1291Critical Vulnerability: CVE-2021-1295 — cisco — rv160w_wireless-ac_vpn_router_firmware, rv160w_wireless-ac_vpn_router
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute a
criticalCVE-2021-1295Critical Vulnerability: CVE-2021-1289 — cisco — rv160w_wireless-ac_vpn_router_firmware, rv160w_wireless-ac_vpn_router
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute a
criticalCVE-2021-1289Critical Vulnerability: CVE-2021-1294 — cisco — rv160w_wireless-ac_vpn_router_firmware, rv160w_wireless-ac_vpn_router
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute a
criticalCVE-2021-1294Critical Vulnerability: CVE-2021-1292 — cisco — rv160w_wireless-ac_vpn_router_firmware, rv160w_wireless-ac_vpn_router
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute a
criticalCVE-2021-1292Critical Vulnerability: CVE-2021-1142 — cisco — smart_software_manager_satellite
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For m
criticalCVE-2021-1142Critical Vulnerability: CVE-2021-1139 — cisco — smart_software_manager_satellite
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For m
criticalCVE-2021-1139Critical Vulnerability: CVE-2021-1141 — cisco — smart_software_manager_satellite
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For m
criticalCVE-2021-1141Critical Vulnerability: CVE-2021-1300 — cisco — ios_xe_sd-wan, sd-wan_firmware
Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see t
criticalCVE-2021-1300Critical Vulnerability: CVE-2021-1301 — cisco — ios_xe_sd-wan, sd-wan_firmware
Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see t
criticalCVE-2021-1301Critical Vulnerability: CVE-2021-1138 — cisco — smart_software_manager_satellite
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For m
criticalCVE-2021-1138Critical Vulnerability: CVE-2021-1264 — cisco — catalyst_center
A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input valid
criticalCVE-2021-1264Critical Vulnerability: CVE-2021-1140 — cisco — smart_software_manager_satellite
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For m
criticalCVE-2021-1140Critical Vulnerability: CVE-2021-1225 — cisco — sd-wan_vmanage
Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected system.
criticalCVE-2021-1225Critical Vulnerability: CVE-2020-26085 — cisco — jabber
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) wi
criticalCVE-2020-26085Critical Vulnerability: CVE-2020-27134 — cisco — jabber, jabber_for_mobile_platforms
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) wi
criticalCVE-2020-27134Critical Vulnerability: CVE-2020-27132 — cisco — jabber, jabber_for_mobile_platforms
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) wi
criticalCVE-2020-27132Critical Vulnerability: CVE-2020-27133 — cisco — jabber, jabber_for_mobile_platforms
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) wi
criticalCVE-2020-27133Critical Vulnerability: CVE-2020-27127 — cisco — jabber, jabber_for_mobile_platforms
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) wi
criticalCVE-2020-27127Critical Vulnerability: CVE-2020-3586 — cisco — dna_spaces\
A vulnerability in the web-based management interface of Cisco DNA Spaces Connector could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerabili
criticalCVE-2020-3586Critical Vulnerability: CVE-2020-3470 — cisco — enterprise_nfv_infrastructure_software, enterprise_network_compute_system_5100
Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulner
criticalCVE-2020-3470Critical Vulnerability: CVE-2020-3531 — cisco — iot_field_network_director
A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability exist
criticalCVE-2020-3531Critical Vulnerability: CVE-2020-27130 — cisco — security_manager
A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversa
criticalCVE-2020-27130Critical Vulnerability: CVE-2020-3284 — cisco — a9k-rsp880-se_firmware, ios_xr
A vulnerability in the enhanced Preboot eXecution Environment (PXE) boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE
criticalCVE-2020-3284Critical Vulnerability: CVE-2019-16028 — cisco — secure_firewall_management_center
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions
criticalCVE-2019-16028Critical Vulnerability: CVE-2020-3495 — cisco — jabber
A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of message contents. An attacker co
criticalCVE-2020-3495
Showing the 60 most recent. Older alerts are archived but still reachable via search and the main feed.
Track cisco exposure across your environment
Vulnios automatically cross-references your asset inventory against new cisco CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan