Known exploited vulnerabilities (CISA KEV)
Vulnerabilities of firewalls and security appliances that CISA lists as actively exploited, with their remediation due dates.
149 of the 259 vulnerabilities Patcharo tracks are in the CISA Known Exploited Vulnerabilities catalog. 29 are flagged for known ransomware use. Newest additions first.
What CISA KEV means
The Known Exploited Vulnerabilities catalog lists CVEs with reliable evidence of exploitation in the wild. Each entry carries a required action and a due date that binds US federal agencies; for everyone else it is the clearest signal that a fix cannot wait. Patcharo reads the feed at every synchronisation and keeps the due date and the ransomware flag next to the vendor's fixed releases.
| CVE | Product | Added | Due | CVSS · EPSS |
|---|---|---|---|---|
| CVE-2026-93616 | Directory Traversal and File upload allows execution of arbitrary script on the Management ServerCheck Point Quantum Security Management | Critical9.8CVSS 3.1, Critical20% | ||
| CVE-2026-85102 | Improper Certificate Validation in Quantum Security GatewayCheck Point Quantum Security Gateway | Critical9.8CVSS 3.1, Critical8% | ||
| CVE-2026-76460 | Cisco Identity Services Engine Authentication Bypass VulnerabilityCisco Cisco Identity Services Engine Software, Cisco Cisco ISE Passive Identity Connector | Critical10CVSS 3.1, Critical14% | ||
| CVE-2026-76461 | Cisco Secure Email Gateway SQL Injection VulnerabilityCisco Cisco Secure Email | Critical9.8CVSS 3.1, Critical28% | ||
| CVE-2026-20079 | Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution VulnerabilityCisco Secure Firewall Management Center (FMC) | Critical10CVSS 3.1, Critical88% | ||
| CVE-2025-25249 | Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityFortinet FortiOS | Critical9.8CVSS 3.1, Critical4% | ||
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD) | High8.6CVSS 3.1, High1% | ||
| CVE-2026-20316Ransomware use known | Cisco Secure Firewall Management Center Software Static Credential VulnerabilityCisco Secure Firewall Management Center (FMC) | Medium5.3CVSS 3.1, Medium35% | ||
| CVE-2025-68686 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityFortinet FortiOS | Medium5.9CVSS 3.1, Medium30% | ||
| CVE-2026-16232 | Authentication Bypass in the SmartConsole Login Process Using an Application TokenCheck Point Quantum Security Management | Critical9.8CVSS 3.1, Critical78% | ||
| CVE-2026-39808 | Fortinet FortiSandbox OS Command Injection VulnerabilityFortinet FortiSandbox | Critical9.8CVSS 3.1, Critical47% | ||
| CVE-2026-25089 | Fortinet FortiSandbox OS Command Injection VulnerabilityFortinet FortiSandbox | Critical9.8CVSS 3.1, Critical76% | ||
| CVE-2008-4128 | Cisco IOS Cross-Site Request Forgery Vulnerabilityn/a n/a | High8.1CVSS 3.1, High34% | ||
| CVE-2026-20230 | Cisco Unified Communications Manager Server-Side Request Forgery VulnerabilityCisco Cisco Unified Communications Manager | High8.6CVSS 3.1, High88% | ||
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager Arbitrary File Write VulnerabilityCisco Cisco Catalyst SD-WAN Manager | Medium6.5CVSS 3.1, Medium28% | ||
| CVE-2026-20245 | Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation VulnerabilityCisco Cisco Catalyst SD-WAN Controller, Cisco Cisco Catalyst SD-WAN Manager | High7.8CVSS 3.1, High25% | ||
| CVE-2026-50751Ransomware use known | User Authentication Bypass in VPN Remote Access and Mobile AccessCheck Point Quantum Security Gateway | Critical9.3CVSS 3.1, Critical6% | ||
| CVE-2026-0257Ransomware use known | PAN-OS: GlobalProtect Authentication Bypass VulnerabilitiesPalo Alto Networks PAN-OS | Critical9.1CVSS 3.1, Critical96% | ||
| CVE-2026-20182 | Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCisco Cisco Catalyst SD-WAN Controller, Cisco Cisco Catalyst SD-WAN Manager | Critical10CVSS 3.1, Critical92% | ||
| CVE-2026-0300 | PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication PortalPalo Alto Networks PAN-OS | Critical9.8CVSS 3.1, Critical32% | ||
| CVE-2026-20133 | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityCisco Cisco Catalyst SD-WAN Manager | High7.5CVSS 3.1, High32% | ||
| CVE-2026-20128 | Cisco Catalyst SD-WAN Manager Information Disclosure VulnerabilityCisco Cisco Catalyst SD-WAN Manager | High7.5CVSS 3.1, High7% | ||
| CVE-2026-20122 | Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite VulnerabilityCisco Cisco Catalyst SD-WAN Manager | Medium5.4CVSS 3.1, Medium25% | ||
| CVE-2026-21643 | Fortinet FortiClient EMS SQL Injection VulnerabilityFortinet FortiClient EMS | Critical9.8CVSS 3.1, Critical94% | ||
| CVE-2026-35616 | Fortinet FortiClient EMS Improper Access Control VulnerabilityFortinet FortiClient EMS | Critical9.8CVSS 3.1, Critical9% | ||
| CVE-2026-20131Ransomware use known | Cisco Secure Firewall Management Center Software Remote Code Execution VulnerabilityCisco Secure Firewall Management Center (FMC) | Critical10CVSS 3.1, Critical43% | ||
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCisco Cisco Catalyst SD-WAN Manager | Critical10CVSS 3.1, Critical88% | ||
| CVE-2022-20775 | Cisco SD-WAN Software Privilege Escalation VulnerabilityCisco Cisco Catalyst SD-WAN, Cisco Cisco Catalyst SD-WAN Manager | High7.8CVSS 3.1, High12% | ||
| CVE-2026-24858 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel VulnerabilityFortinet FortiWeb, Fortinet FortiOS, Fortinet FortiAnalyzer, Fortinet FortiProxy, Fortinet FortiManager | Critical9.8CVSS 3.1, Critical86% | ||
| CVE-2026-20045 | Cisco Unified Communications Products Remote Code Execution VulnerabilityCisco Cisco Unified Communications Manager, Cisco Cisco Unified Communications Manager IM and Presence Service | Critical9.8CVSS 3.1, Critical5% | ||
| CVE-2025-20393 | Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution VulnerabilityCisco Cisco Secure Email, Cisco Cisco Secure Email and Web Manager | Critical10CVSS 3.1, Critical32% | ||
| CVE-2025-59718 | Fortinet Multiple Products Improper Verification of Cryptographic Signature VulnerabilityFortinet FortiOS, Fortinet FortiProxy | Critical9.8CVSS 3.1, Critical68% | ||
| CVE-2025-58034 | Fortinet FortiWeb OS Command Injection VulnerabilityFortinet FortiWeb | High7.2CVSS 3.1, High56% | ||
| CVE-2025-64446 | Fortinet FortiWeb Path Traversal VulnerabilityFortinet FortiWeb | Critical9.8CVSS 3.1, Critical92% | ||
| CVE-2025-20352 | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution VulnerabilityCisco IOS, Cisco Cisco IOS XE Software | High7.7CVSS 3.1, High39% | ||
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD) | High8.6CVSS 3.1, High87% | ||
| CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD) | Critical9.9CVSS 3.1, Critical71% | ||
| CVE-2025-20337 | Cisco ISE API Unauthenticated Remote Code Execution VulnerabilityCisco Cisco Identity Services Engine Software, Cisco Cisco ISE Passive Identity Connector | Critical10CVSS 3.1, Critical68% | ||
| CVE-2025-20281 | Cisco ISE API Unauthenticated Remote Code Execution VulnerabilityCisco Cisco Identity Services Engine Software | Critical10CVSS 3.1, Critical98% | ||
| CVE-2025-25257 | Fortinet FortiWeb SQL Injection VulnerabilityFortinet FortiWeb | Critical9.8CVSS 3.1, Critical100% | ||
| CVE-2019-6693Ransomware use known | Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityFortinet FortiGate | Medium6.5CVSS 3.1, Medium6% | ||
| CVE-2025-32756 | Fortinet Multiple Products Stack-Based Buffer Overflow VulnerabilityFortinet FortiNDR, Fortinet FortiCamera | Critical9.8CVSS 3.1, Critical30% | ||
| CVE-2024-20439 | Cisco Smart Licensing Utility Static Credential VulnerabilityCisco Cisco Smart License Utility | Critical9.8CVSS 3.1, Critical97% | ||
| CVE-2025-24472Ransomware use known | Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityFortinet FortiOS, Fortinet FortiProxy | High8.1CVSS 3.1, High7% | ||
| CVE-2023-20118 | Cisco Small Business RV Series Routers Command Injection VulnerabilityCisco Cisco Small Business RV Series Router Firmware | High7.2CVSS 3.1, High54% | ||
| CVE-2025-0111 | PAN-OS: Authenticated File Read Vulnerability in the Management Web InterfacePalo Alto Networks PAN-OS | Medium6.5CVSS 3.1, Medium2% | ||
| CVE-2025-0108 | PAN-OS: Authentication Bypass in the Management Web InterfacePalo Alto Networks PAN-OS | Critical9.1CVSS 3.1, Critical98% | ||
| CVE-2024-55591Ransomware use known | Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityFortinet FortiOS, Fortinet FortiProxy | Critical9.8CVSS 3.1, Critical94% | ||
| CVE-2024-3393 | PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted PacketPalo Alto Networks PAN-OS | High7.5CVSS 3.1, High28% | ||
| CVE-2024-9474Ransomware use known | PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management InterfacePalo Alto Networks PAN-OS | High7.2CVSS 3.1, High95% | ||
| CVE-2024-0012Ransomware use known | PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)Palo Alto Networks PAN-OS | Critical9.8CVSS 3.1, Critical100% | ||
| CVE-2024-9465 | Expedition: SQL Injection Leads to Firewall Admin Credential DisclosurePalo Alto Networks Expedition | Critical9.1CVSS 3.1, Critical100% | ||
| CVE-2024-9463 | Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential DisclosurePalo Alto Networks Expedition | High7.5CVSS 3.1, High99% | ||
| CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerabilityn/a n/a | Medium6.1CVSS 3.1, Medium23% | ||
| CVE-2024-5910 | Expedition: Missing Authentication Leads to Admin Account TakeoverPalo Alto Networks Expedition | Critical9.8CVSS 3.1, Critical92% | ||
| CVE-2024-20481 | Cisco ASA and FTD Denial-of-Service VulnerabilityCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD) | Medium5.8CVSS 3.1, Medium16% | ||
| CVE-2024-47575 | Fortinet FortiManager Missing Authentication VulnerabilityFortinet FortiManager | Critical9.8CVSS 3.1, Critical95% | ||
| CVE-2024-23113 | Fortinet Multiple Products Format String VulnerabilityFortinet FortiOS, Fortinet FortiProxy | Critical9.8CVSS 3.1, Critical62% | ||
| CVE-2024-20399 | Cisco NX-OS Software CLI Command Injection VulnerabilityCisco Cisco NX-OS Software | Medium6.7CVSS 3.1, Medium4% | ||
| CVE-2024-24919Ransomware use known | Information disclosureCheck Point Quantum Security Gateway | High8.6CVSS 3.1, High100% | ||
| CVE-2024-20359 | Cisco ASA and FTD Privilege Escalation VulnerabilityCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD) | Medium6CVSS 3.1, Medium19% | ||
| CVE-2024-20353 | Cisco ASA and FTD Denial of Service VulnerabilityCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD) | High8.6CVSS 3.1, High71% | ||
| CVE-2024-3400Ransomware use known | PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtectPalo Alto Networks PAN-OS | Critical10CVSS 3.1, Critical100% | ||
| CVE-2023-48788Ransomware use known | Fortinet FortiClient EMS SQL Injection VulnerabilityFortinet FortiClient EMS | Critical9.8CVSS 3.1, Critical98% | ||
| CVE-2020-3259Ransomware use known | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure VulnerabilityCisco Cisco Adaptive Security Appliance (ASA) Software | High7.5CVSS 3.1, High72% | ||
| CVE-2024-21762Ransomware use known | Fortinet FortiOS Out-of-Bound Write VulnerabilityFortinet FortiProxy, Fortinet FortiOS | Critical9.8CVSS 3.1, Critical83% | ||
| CVE-2023-20273 | Cisco IOS XE Web UI Command Injection VulnerabilityCisco Cisco IOS XE Software | High7.2CVSS 3.1, High90% | ||
| CVE-2023-20198 | Cisco IOS XE Web UI Privilege Escalation VulnerabilityCisco Cisco IOS XE Software | Critical10CVSS 3.1, Critical100% | ||
| CVE-2023-20109 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write VulnerabilityCisco IOS, Cisco Cisco IOS XE Software | Medium6.6CVSS 3.1, Medium2% | ||
| CVE-2023-20269Ransomware use known | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD) | Critical9.1CVSS 3.1, Critical25% | ||
| CVE-2023-27997Ransomware use known | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow VulnerabilityFortinet FortiProxy, Fortinet FortiOS | Critical9.8CVSS 3.1, Critical86% | ||
| CVE-2016-6415 | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerabilityn/a n/a | High7.5CVSS 3.1, High88% | ||
| CVE-2004-1464 | Cisco IOS Denial-of-Service Vulnerabilityn/a n/a | Medium5.9CVSS 3.1, Medium5% | ||
| CVE-2017-6742 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco Cisco IOS XE Software, IntelliShield Universal Product | High8.8CVSS 3.1, High21% | ||
| CVE-2022-41328 | Fortinet FortiOS Path Traversal VulnerabilityFortinet FortiOS | High7.1CVSS 3.1, High11% | ||
| CVE-2022-42475Ransomware use known | Fortinet FortiOS Heap-Based Buffer Overflow VulnerabilityFortinet FortiProxy, Fortinet FortiOS | Critical9.8CVSS 3.1, Critical99% | ||
| CVE-2020-3433Ransomware use known | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityCisco Cisco AnyConnect Secure Mobility Client | High7.8CVSS 3.1, High10% | ||
| CVE-2020-3153Ransomware use known | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityCisco Cisco AnyConnect Secure Mobility Client | Medium6.5CVSS 3.1, Medium28% | ||
| CVE-2022-40684Ransomware use known | Fortinet Multiple Products Authentication Bypass VulnerabilityFortinet Fortinet FortiOS, FortiProxy, FortiSwitchManager | Critical9.8CVSS 3.1, Critical100% | ||
| CVE-2018-13374Ransomware use known | Fortinet FortiOS and FortiADC Improper Access Control VulnerabilityFortinet Fortinet FortiOS, fortiADC | Medium4.3CVSS 3.1, Medium38% | ||
| CVE-2022-0028 | PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL FilteringPalo Alto Networks PAN-OS | High8.6CVSS 3.1, High2% | ||
| CVE-2017-15944 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerabilityn/a n/a | Critical9.8CVSS 3.1, Critical98% | ||
| CVE-2019-15271 | Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution VulnerabilityCisco Cisco Small Business RV Series Router Firmware | High8.8CVSS 3.1, High5% | ||
| CVE-2016-6367 | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerabilityn/a n/a | High7.8CVSS 3.1, High23% | ||
| CVE-2016-6366 | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerabilityn/a n/a | High8.8CVSS 3.1, High88% | ||
| CVE-2022-20821 | Cisco IOS XR Software Health Check Open Port VulnerabilityCisco Cisco IOS XR Software | Medium6.5CVSS 3.1, Medium11% | ||
| CVE-2020-2021Ransomware use known | PAN-OS: Authentication Bypass in SAML AuthenticationPalo Alto Networks PAN-OS | Critical10CVSS 3.1, Critical4% | ||
| CVE-2018-0147 | Cisco Secure Access Control System Java Deserialization Vulnerabilityn/a Cisco Secure Access Control System | Critical9.8CVSS 3.1, Critical18% | ||
| CVE-2018-0125 | Cisco VPN Routers Remote Code Execution Vulnerabilityn/a Cisco RV132W and RV134W | Critical9.8CVSS 3.1, Critical55% | ||
| CVE-2017-3881 | Cisco IOS and IOS XE Remote Code Execution Vulnerabilityn/a Cisco IOS and IOS XE Software | Critical9.8CVSS 3.1, Critical99% | ||
| CVE-2015-0666 | Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerabilityn/a n/a | High7.5CVSS 3.1, High40% | ||
| CVE-2010-3035 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerabilityn/a n/a | High7.5CVSS 3.1, High6% | ||
| CVE-2009-2055 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerabilityn/a n/a | Medium5.9CVSS 3.1, Medium3% | ||
| CVE-2022-20708 | Cisco Small Business RV Series Routers VulnerabilitiesCisco Cisco Small Business RV Series Router Firmware | High8CVSS 3.1, High15% | ||
| CVE-2022-20703 | Cisco Small Business RV Series Routers VulnerabilitiesCisco Cisco Small Business RV Series Router Firmware | High8CVSS 3.1, High9% | ||
| CVE-2022-20701 | Cisco Small Business RV Series Routers VulnerabilitiesCisco Cisco Small Business RV Series Router Firmware | High7.8CVSS 3.1, High10% | ||
| CVE-2022-20700 | Cisco Small Business RV Series Routers VulnerabilitiesCisco Cisco Small Business RV Series Router Firmware | Critical9.8CVSS 3.1, Critical6% | ||
| CVE-2022-20699 | Cisco Small Business RV Series Routers VulnerabilitiesCisco Cisco Small Business RV Series Router Firmware | Critical9.8CVSS 3.1, Critical72% | ||
| CVE-2019-1652 | Cisco Small Business RV320 and RV325 Routers Command Injection VulnerabilityCisco Cisco Small Business RV Series Router Firmware | High7.2CVSS 3.1, High96% | ||
| CVE-2018-0180 | Cisco IOS Software Denial-of-Service Vulnerabilityn/a Cisco IOS | Medium5.9CVSS 3.1, Medium5% | ||
| CVE-2018-0179 | Cisco IOS Software Denial-of-Service Vulnerabilityn/a Cisco IOS | Medium5.9CVSS 3.1, Medium5% | ||
| CVE-2018-0175 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerabilityn/a Cisco IOS, IOS XE, and IOS XR | High8CVSS 3.1, High3% | ||
| CVE-2018-0174 | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerabilityn/a Cisco IOS and IOS XE | High8.6CVSS 3.1, High8% | ||
| CVE-2018-0173 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerabilityn/a Cisco IOS and IOS XE | High8.6CVSS 3.1, High8% | ||
| CVE-2018-0172 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerabilityn/a Cisco IOS and IOS XE | High8.6CVSS 3.1, High8% | ||
| CVE-2018-0167 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerabilityn/a Cisco IOS, IOS XE, and IOS XR | High8.8CVSS 3.1, High3% | ||
| CVE-2018-0161 | Cisco IOS Software Resource Management Errors Vulnerabilityn/a Cisco IOS | Medium6.3CVSS 3.1, Medium4% | ||
| CVE-2018-0159 | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerabilityn/a Cisco IOS and IOS XE | High7.5CVSS 3.1, High7% | ||
| CVE-2018-0158 | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerabilityn/a Cisco IOS and IOS XE | High8.6CVSS 3.1, High7% | ||
| CVE-2018-0156 | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerabilityn/a Cisco IOS and IOS XE | High7.5CVSS 3.1, High9% | ||
| CVE-2018-0155 | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerabilityn/a Cisco IOS and IOS XE | High8.6CVSS 3.1, High8% | ||
| CVE-2018-0154 | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerabilityn/a Cisco IOS | High7.5CVSS 3.1, High7% | ||
| CVE-2018-0151 | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerabilityn/a Cisco IOS and IOS XE | Critical9.8CVSS 3.1, Critical14% | ||
| CVE-2017-6744 | Cisco IOS Software SNMP Remote Code Execution VulnerabilityCisco IOS, IntelliShield Universal Product | High8.8CVSS 3.1, High7% | ||
| CVE-2017-6743 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco IOS, IntelliShield Universal Product | High8.8CVSS 3.1, High11% | ||
| CVE-2017-6740 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco IOS, IntelliShield Universal Product | High8.8CVSS 3.1, High11% | ||
| CVE-2017-6739 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityIntelliShield Universal Product | High8.8CVSS 3.1, High11% | ||
| CVE-2017-6738 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco IOS, Cisco Cisco IOS XE Software | High8.8CVSS 3.1, High11% | ||
| CVE-2017-6737 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco IOS | High8.8CVSS 3.1, High45% | ||
| CVE-2017-6736 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco IOS, IntelliShield Universal Product | High8.8CVSS 3.1, High70% | ||
| CVE-2017-6663 | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerabilityn/a Cisco IOS and IOS XE | Medium6.5CVSS 3.1, Medium2% | ||
| CVE-2017-6627 | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerabilityn/a Cisco IOS and Cisco IOS XE | High7.5CVSS 3.1, High6% | ||
| CVE-2017-12319 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerabilityn/a Cisco IOS XE | Medium5.9CVSS 3.1, Medium5% | ||
| CVE-2017-12240 | Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerabilityn/a Cisco IOS and IOS XE | Critical9.8CVSS 3.1, Critical14% | ||
| CVE-2017-12238 | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerabilityn/a Cisco IOS | Medium6.5CVSS 3.1, Medium2% | ||
| CVE-2017-12237 | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerabilityn/a Cisco IOS and IOS XE | High7.5CVSS 3.1, High7% | ||
| CVE-2017-12235 | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerabilityn/a Cisco IOS | High7.5CVSS 3.1, High7% | ||
| CVE-2017-12234 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerabilityn/a Cisco IOS | High7.5CVSS 3.1, High7% | ||
| CVE-2017-12233 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerabilityn/a Cisco IOS | High7.5CVSS 3.1, High7% | ||
| CVE-2017-12232 | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerabilityn/a Cisco IOS | Medium6.5CVSS 3.1, Medium2% | ||
| CVE-2017-12231 | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerabilityn/a Cisco IOS | High7.5CVSS 3.1, High7% | ||
| CVE-2019-1579Ransomware use known | Palo Alto Networks PAN-OS Remote Code Execution Vulnerabilityn/a Palo Alto Networks GlobalProtect Portal/Gateway Interface | High8.1CVSS 3.1, High46% | ||
| CVE-2018-13383Ransomware use known | Fortinet FortiOS and FortiProxy Out-of-bounds WriteFortinet Fortinet FortiOS and FortiProxy | Medium6.5CVSS 3.1, Medium34% | ||
| CVE-2018-13382Ransomware use known | Fortinet FortiOS and FortiProxy Improper AuthorizationFortinet Fortinet FortiOS, FortiProxy | High7.5CVSS 3.1, High82% | ||
| CVE-2021-44168 | Fortinet FortiOS Arbitrary File DownloadFortinet Fortinet FortiOS | High7.8CVSS 3.1, High0.87% | ||
| CVE-2021-1498 | Cisco HyperFlex HX Command Injection VulnerabilitiesCisco Cisco HyperFlex HX Data Platform | Critical9.8CVSS 3.1, Critical100% | ||
| CVE-2021-1497 | Cisco HyperFlex HX Command Injection VulnerabilitiesCisco Cisco HyperFlex HX Data Platform | Critical9.8CVSS 3.1, Critical100% | ||
| CVE-2020-3580Ransomware use known | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting VulnerabilitiesCisco Cisco Adaptive Security Appliance (ASA) Software | Medium6.1CVSS 3.1, Medium86% | ||
| CVE-2020-3569 | Cisco IOS XR Software DVMRP Memory Exhaustion VulnerabilitiesCisco Cisco IOS XR Software | High8.6CVSS 3.1, High3% | ||
| CVE-2020-3566 | Cisco IOS XR Software DVMRP Memory Exhaustion VulnerabilityCisco Cisco IOS XR Software | High8.6CVSS 3.1, High4% | ||
| CVE-2020-3452 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal VulnerabilityCisco Cisco Adaptive Security Appliance (ASA) Software | High7.5CVSS 3.1, High100% | ||
| CVE-2020-3161 | Cisco IP Phones Web Server Remote Code Execution and Denial of Service VulnerabilityCisco Cisco IP phone | Critical9.8CVSS 3.1, Critical84% | ||
| CVE-2020-3118 | Cisco IOS XR Software Cisco Discovery Protocol Format String VulnerabilityCisco Cisco IOS XR Software | High8.8CVSS 3.1, High12% | ||
| CVE-2020-12812Ransomware use known | Fortinet FortiOS SSL VPN Improper Authentication Vulnerabilityn/a Fortinet FortiOS | Critical9.8CVSS 3.1, Critical49% | ||
| CVE-2019-5591Ransomware use known | Fortinet FortiOS Default Configuration VulnerabilityFortinet Fortinet FortiOS | Medium6.5CVSS 3.1, Medium18% | ||
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityCisco Cisco Small Business RV Series Router Firmware | High7.5CVSS 3.1, High100% | ||
| CVE-2018-13379Ransomware use known | Fortinet FortiOS SSL VPN Path Traversal VulnerabilityFortinet Fortinet FortiOS, FortiProxy | Critical9.8CVSS 3.1, Critical100% | ||
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerabilityn/a Cisco Adaptive Security Appliance unknown | High7.5CVSS 3.1, High100% | ||
| CVE-2018-0171 | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerabilityn/a Cisco IOS and IOS XE | Critical9.8CVSS 3.1, Critical99% |