| CVE-2026-76389 | 8.8 | — | — | — | cisco / talos intelligence for enterprise security cloud | In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the | 64d ago |
| CVE-2026-20200 | 8.8 | — | — | — | cisco / unified computing system | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker w | 78d ago |
| CVE-2026-20150 | 8.8 | — | — | — | cisco / roomos | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team | 99d ago |
| CVE-2026-20046 | 8.8 | — | — | — | cisco / ios xr | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authen | 225d ago |
| CVE-2026-20040 | 8.8 | — | — | — | cisco / ios xr | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitr | 225d ago |
| CVE-2026-20349zero day | 8.6 | 1.0% | 3/3 | same day | cisco / adaptive security appliance software | A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) S | 72d ago |
| CVE-2026-20273 | 8.6 | — | — | — | cisco / ios xe | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software enginee | 78d ago |
| CVE-2026-20271 | 8.6 | — | — | — | cisco / ios xe | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software enginee | 78d ago |
| CVE-2026-20270 | 8.6 | — | — | — | cisco / ios xe | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software enginee | 78d ago |
| CVE-2026-20269 | 8.6 | — | — | — | cisco / ios xe | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software enginee | 78d ago |
| CVE-2026-20268 | 8.6 | — | — | — | cisco / ios xe | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software enginee | 78d ago |
| CVE-2026-20230exploited | 8.6 | 88.2% | 3/3 | +19d | cisco / unified communications manager | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Sess | 141d ago |
| CVE-2026-20224 | 8.6 | — | — | — | cisco / catalyst sd-wan manager | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenti | 161d ago |
| CVE-2026-20156 | 8.1 | — | — | — | cisco / roomos | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team | 99d ago |
| CVE-2026-20245exploited | 7.8 | 25.3% | 3/3 | +1d | cisco / catalyst sd-wan manager | A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Mana | 140d ago |
| CVE-2026-20348 | 7.5 | — | — | — | cisco / secure endpoint | A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a | 76d ago |
| CVE-2026-20187 | 7.5 | — | — | — | cisco / roomos | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team | 99d ago |
| CVE-2026-20158 | 7.5 | — | — | — | cisco / roomos | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team | 99d ago |
| CVE-2026-20157 | 7.5 | — | — | — | cisco / roomos | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team | 99d ago |
| CVE-2026-20153 | 7.5 | — | — | — | cisco / roomos | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team | 99d ago |
| CVE-2026-20244 | 7.5 | — | — | — | cisco / secure endpoint | A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a | 113d ago |
| CVE-2026-20243 | 7.5 | — | — | — | cisco / secure endpoint | A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a | 113d ago |
| CVE-2026-20217 | 7.5 | — | — | — | cisco / secure endpoint | A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to caus | 113d ago |
| CVE-2026-20216 | 7.5 | — | — | — | cisco / secure endpoint | A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker | 113d ago |
| CVE-2026-20215 | 7.5 | — | — | — | cisco / secure endpoint | A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a | 113d ago |
| CVE-2026-20214 | 7.5 | — | — | — | cisco / secure endpoint | A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a | 113d ago |
| CVE-2026-20213 | 7.5 | — | — | — | cisco / secure endpoint | A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a | 113d ago |
| CVE-2026-20190 | 7.5 | — | — | — | cisco / identity services engine | A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive informa | 127d ago |
| CVE-2026-20074 | 7.4 | — | — | — | cisco / ios xr | A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) multi-instance routing feature of Cisco | 225d ago |
| CVE-2026-24700 | 7.2 | — | — | — | cisco / rv130 firmware | An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W | 106d ago |
| CVE-2026-24699 | 7.2 | — | — | — | cisco / rv130 firmware | An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV130W | 106d ago |
| CVE-2026-24698 | 7.2 | — | — | — | cisco / rv130 firmware | An OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd" binary in Cisco | 106d ago |
| CVE-2026-24697 | 7.2 | — | — | — | cisco / rv130 firmware | An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV1 | 106d ago |
