Skip to content
Patcharo

Vendors

Cisco vulnerabilities: CVE, KEV, fixed releases

Cisco vulnerabilities, tracked with their affected releases, the vendor's official fixes and known exploitation.

Sources last modified 1 Oct 2026 · Last verified by Patcharo: 1 Oct 2026 at 13:37 UTC

100
CVEs tracked
26
Critical
100
CISA KEV
7
With a fixed release

Published CVEs per product

Distinct CVEs NVD attaches to each product over the period chosen, whatever their score. A CVE common to two products counts in each.

Compare products
Ten-year view

Last 12 months · 14 Nov 2025 – 14 Nov 2026 · Rolling calendar period, by publication date of the CVE record; both days included.

The history could not be read right now. The list below shows the analysed catalog only.

Products covered

Each product has its own page with affected branches and fixed releases.

Latest vulnerabilities

Newest source publication first.

All Cisco CVEs
  1. CVE-2026-76504Published:

    Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability

    Cisco Catalyst SD-WAN Manager

    Critical9.8CVSS 3.1, CriticalKEVDue 3 Oct 2026EPSS—
  2. CVE-2026-76460Published:

    Cisco Identity Services Engine Authentication Bypass Vulnerability

    Cisco Identity Services Engine Software, Cisco ISE Passive Identity Connector

    Critical10CVSS 3.1, CriticalKEVDue 19 Sept 2026EPSS14%
  3. CVE-2026-76461Published:

    Cisco Secure Email Gateway SQL Injection Vulnerability

    Cisco Secure Email

    Critical9.8CVSS 3.1, CriticalKEVDue 17 Sept 2026EPSS28%
  4. CVE-2026-20349Published:

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

    Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)

    High8.6CVSS 3.1, HighKEVDue 14 Aug 2026EPSS1%
  5. CVE-2026-20316Published:

    Cisco Secure Firewall Management Center Software Static Credential Vulnerability

    Cisco Secure Firewall Management Center (FMC)

    Medium5.3CVSS 3.1, MediumKEVRansomwareDue 1 Aug 2026EPSS35%
  6. CVE-2026-20262Published:

    Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

    Cisco Catalyst SD-WAN Manager

    Medium6.5CVSS 3.1, MediumKEVDue 29 Jun 2026EPSS28%
  7. CVE-2026-20245Published:

    Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability

    Cisco Catalyst SD-WAN Controller, Cisco Catalyst SD-WAN Manager

    High7.8CVSS 3.1, HighKEVDue 23 Jun 2026EPSS25%
  8. CVE-2026-20230Published:

    Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

    Cisco Unified Communications Manager

    High8.6CVSS 3.1, HighKEVDue 28 Jun 2026EPSS88%
  9. CVE-2026-20182Published:

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    Cisco Catalyst SD-WAN Controller, Cisco Catalyst SD-WAN Manager

    Critical10CVSS 3.1, CriticalKEVDue 17 May 2026EPSS92%
  10. CVE-2026-20131Published:

    Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability

    Cisco Secure Firewall Management Center (FMC)

    Critical10CVSS 3.1, CriticalKEVRansomwareDue 22 Mar 2026EPSS43%

Known exploited (CISA KEV)

Vulnerabilities CISA lists as exploited, with the federal remediation due date.

All Cisco KEV entries
  1. CVE-2026-20079Published:

    Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability

    Cisco Secure Firewall Management Center (FMC)

    Critical10CVSS 3.1, CriticalKEVDue 12 Sept 2026EPSS88%
  2. CVE-2008-4128Published:

    Cisco IOS Cross-Site Request Forgery Vulnerability

    Cisco IOS

    High8.1CVSS 3.1, HighKEVDue 16 Jul 2026EPSS34%
  3. CVE-2026-20122Published:

    Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

    Cisco Catalyst SD-WAN Manager

    Medium5.4CVSS 3.1, MediumKEVDue 23 Apr 2026EPSS25%
  4. CVE-2026-20128Published:

    Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

    Cisco Catalyst SD-WAN Manager

    High7.5CVSS 3.1, HighKEVDue 23 Apr 2026EPSS7%
  5. CVE-2026-20133Published:

    Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

    Cisco Catalyst SD-WAN Manager

    High7.5CVSS 3.1, HighKEVDue 23 Apr 2026EPSS32%
  6. CVE-2026-20127Published:

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    Cisco Catalyst SD-WAN Manager

    Critical10CVSS 3.1, CriticalKEVDue 27 Feb 2026EPSS88%
  7. CVE-2022-20775Published:

    Cisco SD-WAN Software Privilege Escalation Vulnerability

    Cisco Catalyst SD-WAN, Cisco Catalyst SD-WAN Manager, Cisco SD-WAN vContainer

    High7.8CVSS 3.1, HighKEVDue 27 Feb 2026EPSS12%
  8. CVE-2026-20045Published:

    Cisco Unified Communications Products Remote Code Execution Vulnerability

    Cisco Unified Communications Manager, Cisco Unified Communications Manager IM and Presence Service, Cisco Unity Connection

    Critical9.8CVSS 3.1, CriticalKEVDue 11 Feb 2026EPSS5%
  9. CVE-2025-20393Published:

    Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

    Cisco Secure Email, Cisco Secure Email and Web Manager

    Critical10CVSS 3.1, CriticalKEVDue 24 Dec 2025EPSS32%
  10. CVE-2025-20352Published:

    Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

    Cisco IOS, Cisco IOS XE Software, Cisco IOS XE Catalyst SD-WAN

    High7.7CVSS 3.1, HighKEVDue 20 Oct 2025EPSS39%

Vendor recommendation

The vendor's own statement about what to run, with its date and source. Separate from vulnerabilities and from support status: being behind a recommendation is not a vulnerability, and a supported release is not necessarily the recommended one.

Cisco publishes no recommended-release page Patcharo can read. The fixed releases on this site come from the security advisories only; nothing is inferred from version numbers.

CERT-FR

Advisories and alerts of the French national CERT referencing the vendor.

Some titles in this list are machine-translated by artificial intelligence (Mistral AI) from the source texts; each record shows the original.

Support lifecycle

From the vendor's published life cycle policy.

  1. Secure Firewall ASA9.16
    SupportSupported
    End of support30 Nov 2027
  2. Secure Firewall ASA9.18
    SupportSupported
    End of support30 Nov 2027
  3. Secure Firewall ASA9.19
    SupportSupported
    End of support30 Nov 2027
  4. Secure Firewall ASA9.23
    SupportSupported
    End of support30 Sept 2028
  5. Secure Firewall Management Center (FMC)7.0
    SupportSupported
    End of support30 Nov 2027
  6. Secure Firewall Management Center (FMC)7.2
    SupportSupported
    End of support30 Nov 2027
  7. Secure Firewall Management Center (FMC)7.3
    SupportSupported
    End of support30 Nov 2027
  8. Secure Firewall Management Center (FMC)7.7
    SupportSupported
    End of support30 Sept 2028
  9. Secure Firewall Threat Defense (FTD)7.0
    SupportSupported
    End of support30 Nov 2027
  10. Secure Firewall Threat Defense (FTD)7.2
    SupportSupported
    End of support30 Nov 2027
  11. Secure Firewall Threat Defense (FTD)7.3
    SupportSupported
    End of support30 Nov 2027
  12. Secure Firewall Threat Defense (FTD)7.7
    SupportSupported
    End of support30 Sept 2028
24 branches past their end of life
  1. Secure Firewall ASA9.1
    SupportEnd of life
    End of support31 Aug 2022
  2. Secure Firewall ASA9.10
    SupportEnd of life
    End of support31 Oct 2022
  3. Secure Firewall ASA9.12
    SupportEnd of life
    End of support28 Feb 2026
  4. Secure Firewall ASA9.13
    SupportEnd of life
    End of support30 Jun 2023
  5. Secure Firewall ASA9.14
    SupportEnd of life
    End of support31 Mar 2025
  6. Secure Firewall ASA9.15
    SupportEnd of life
    End of support30 Jun 2024
  7. Secure Firewall ASA9.17
    SupportEnd of life
    End of support31 Dec 2025
  8. Secure Firewall ASA9.2
    SupportEnd of life
    End of support31 Aug 2022
  9. Secure Firewall ASA9.4
    SupportEnd of life
    End of support31 Aug 2021
  10. Secure Firewall ASA9.5
    SupportEnd of life
    End of support31 May 2021
  11. Secure Firewall ASA9.6
    SupportEnd of life
    End of support30 Sept 2022
  12. Secure Firewall ASA9.7
    SupportEnd of life
    End of support31 Aug 2022
  13. Secure Firewall ASA9.8
    SupportEnd of life
    End of support28 Feb 2025
  14. Secure Firewall ASA9.9
    SupportEnd of life
    End of support31 May 2023
  15. Secure Firewall Management Center (FMC)6.4
    SupportEnd of life
    End of support28 Feb 2026
  16. Secure Firewall Management Center (FMC)6.5
    SupportEnd of life
    End of support30 Jun 2023
  17. Secure Firewall Management Center (FMC)6.6
    SupportEnd of life
    End of support31 Mar 2025
  18. Secure Firewall Management Center (FMC)6.7
    SupportEnd of life
    End of support31 Jul 2024
  19. Secure Firewall Management Center (FMC)7.1
    SupportEnd of life
    End of support31 Dec 2025
  20. Secure Firewall Threat Defense (FTD)6.4
    SupportEnd of life
    End of support28 Feb 2026
  21. Secure Firewall Threat Defense (FTD)6.5
    SupportEnd of life
    End of support30 Jun 2023
  22. Secure Firewall Threat Defense (FTD)6.6
    SupportEnd of life
    End of support31 Mar 2025
  23. Secure Firewall Threat Defense (FTD)6.7
    SupportEnd of life
    End of support31 Jul 2024
  24. Secure Firewall Threat Defense (FTD)7.1
    SupportEnd of life
    End of support31 Dec 2025

Appliance life cycle

End of sale, end of support and replacement of every Cisco appliance model (98).

Official sources