Skip to content
Patcharo

Cisco vulnerabilities: CVE, KEV, fixed releases

Patcharo tracks 59 vulnerabilities affecting Cisco products: 19 critical, 59 known exploited (CISA KEV), 0 with a fixed release stated by the vendor. Last source modification: 26 Sept 2026.

Last verified by Patcharo: 30 Sept 2026 at 12:52 UTC

Products covered

Each product has its own page with affected branches and fixed releases.

Latest vulnerabilities

Newest source publication first.

All Cisco CVEs

Known exploited (CISA KEV)

Vulnerabilities CISA lists as exploited, with the federal remediation due date.

  • CVE-2026-76460Cisco Identity Services Engine Authentication Bypass VulnerabilityDue 19 Sept 2026
  • CVE-2026-76461Cisco Secure Email Gateway SQL Injection VulnerabilityDue 17 Sept 2026
  • CVE-2026-20079Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution VulnerabilityDue 12 Sept 2026
  • CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityDue 14 Aug 2026
  • CVE-2026-20316Cisco Secure Firewall Management Center Software Static Credential VulnerabilityDue 1 Aug 2026Ransomware use known
  • CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery VulnerabilityDue 28 Jun 2026
  • CVE-2026-20262Cisco Catalyst SD-WAN Manager Arbitrary File Write VulnerabilityDue 29 Jun 2026
  • CVE-2026-20245Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation VulnerabilityDue 23 Jun 2026
  • CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityDue 17 May 2026
  • CVE-2026-20122Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite VulnerabilityDue 23 Apr 2026
Known exploited vulnerabilities (CISA KEV)

Official sources