| CVE-2026-20223 | 10 | critical | secure workload | A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauth | 154d ago |
| CVE-2026-20182exploited | 10 | critical | catalyst sd-wan manager | May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered | 160d ago |
| CVE-2026-20272 | 9.8 | critical | ios xe | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software enginee | 77d ago |
| CVE-2026-20181 | 9.1 | critical | identity services engine | A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary comman | 126d ago |
| CVE-2026-20267 | 9 | critical | ios xe | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software enginee | 77d ago |
| CVE-2026-20046 | 8.8 | high | ios xr | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authen | 224d ago |
| CVE-2026-20040 | 8.8 | high | ios xr | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitr | 224d ago |
| CVE-2026-20150 | 8.8 | high | roomos | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team | 98d ago |
| CVE-2026-20200 | 8.8 | high | unified computing system | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker w | 77d ago |
| CVE-2026-76389 | 8.8 | high | talos intelligence for enterprise security cloud | In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the | 62d ago |
| CVE-2026-20224 | 8.6 | high | catalyst sd-wan manager | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenti | 160d ago |
| CVE-2026-20230exploited | 8.6 | high | unified communications manager | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Sess | 140d ago |
| CVE-2026-20273 | 8.6 | high | ios xe | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software enginee | 77d ago |
| CVE-2026-20271 | 8.6 | high | ios xe | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software enginee | 77d ago |
| CVE-2026-20270 | 8.6 | high | ios xe | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software enginee | 77d ago |
| CVE-2026-20269 | 8.6 | high | ios xe | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software enginee | 77d ago |
| CVE-2026-20268 | 8.6 | high | ios xe | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software enginee | 77d ago |
| CVE-2026-20349exploited | 8.6 | high | adaptive security appliance software | A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) S | 71d ago |
| CVE-2026-20156 | 8.1 | high | roomos | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team | 98d ago |
| CVE-2026-20245exploited | 7.8 | high | catalyst sd-wan manager | A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Mana | 138d ago |
| CVE-2026-20214 | 7.5 | high | secure endpoint | A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a | 112d ago |
| CVE-2026-20213 | 7.5 | high | secure endpoint | A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a | 112d ago |
| CVE-2026-20348 | 7.5 | high | secure endpoint | A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a | 75d ago |
| CVE-2026-20153 | 7.5 | high | roomos | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team | 98d ago |
| CVE-2026-20244 | 7.5 | high | secure endpoint | A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a | 112d ago |
| CVE-2026-20157 | 7.5 | high | roomos | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team | 98d ago |
| CVE-2026-20158 | 7.5 | high | roomos | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team | 98d ago |
| CVE-2026-20187 | 7.5 | high | roomos | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team | 98d ago |
| CVE-2026-20216 | 7.5 | high | secure endpoint | A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker | 112d ago |
| CVE-2026-20215 | 7.5 | high | secure endpoint | A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a | 112d ago |
| CVE-2026-20243 | 7.5 | high | secure endpoint | A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a | 112d ago |
| CVE-2026-20190 | 7.5 | high | identity services engine | A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive informa | 126d ago |
| CVE-2026-20217 | 7.5 | high | secure endpoint | A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to caus | 112d ago |
| CVE-2026-20074 | 7.4 | high | ios xr | A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) multi-instance routing feature of Cisco | 224d ago |
| CVE-2026-24697 | 7.2 | high | rv130 firmware | An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV1 | 105d ago |
| CVE-2026-24698 | 7.2 | high | rv130 firmware | An OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd" binary in Cisco | 105d ago |
| CVE-2026-24699 | 7.2 | high | rv130 firmware | An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV130W | 105d ago |
| CVE-2026-24700 | 7.2 | high | rv130 firmware | An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W | 105d ago |
| CVE-2026-20262exploited | 6.5 | medium | catalyst sd-wan manager | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authentica | 128d ago |
| CVE-2026-20117 | 6.1 | medium | unified contact center express | A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could | 224d ago |
| CVE-2026-20316exploited | 5.3 | medium | secure firewall management center | A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unau | 84d ago |
