Cisco — Security Activity Report

Networking, security, collaboration (Cisco PSIRT advisories)

Generated Sep 19, 2026Cohort: 9 vendors with ≥10 CVE advisoriesMethodology ↗

CVE Disclosure Volume

Total all-time: 309 CVEs with Cisco advisories. Source: NVD CVE records joined with vendor advisory publish dates.

Severity Composition

at industry median

53.1% of Cisco's 309 CVEs are CRITICAL or HIGH severity. Industry median: 53.1%. Source: NVD CVSS v3.1.

CRITICAL 60 (19.4%)HIGH 104 (33.7%)MEDIUM 143 (46.3%)LOW 1 (0.3%)NONE 1 (0.3%)

CISA KEV Listings

↑ +3.7 pp

14 of 309 Cisco CVEs in the last 3 years are on CISA's Known Exploited Vulnerabilities catalog (4.5%). Industry median: 0.8%.

Source: CISA Known Exploited Vulnerabilities catalog (current snapshot). KEV listing means CISA observed active in-the-wild exploitation.

Vendor Patch Velocity

Insufficient data to publish a reliable patch-velocity metric for Cisco(sample size: 0, minimum required: 10).

Top Recurring Weakness Classes

Most-frequently mapped CWEs across Cisco's last 3 years of CVE disclosures. Source: NVD — CWE mapping per MITRE taxonomy.

CWE-79Cross-site Scripting (XSS)21 CVEs
CWE-89SQL Injection17 CVEs
CWE-284Improper Access Control14 CVEs
CWE-22Path Traversal12 CVEs
CWE-120Buffer Copy without Checking Size (Classic Buffer Overflow)10 CVEs

Recent Security Advisories

Latest advisories published by Cisco, straight from the vendor's own feed. Severity labels are the vendor's — scales differ across vendors.

cisco-sa-hardening-ise-XU5EwX5TCriticalCVSS 10.0
Sep 16, 2026
Cisco Identity Services Engine Hardening Release: September 2026
CVE-2026-20287 CVE-2026-20130 CVE-2026-20192 CVE-2026-20194 CVE-2026-20234 CVE-2026-20237 vendor source ↗
cisco-sa-fmc-sftunn-codex-c3O4Jft2CriticalCVSS 9.9
Sep 16, 2026
Cisco Secure Firewall Management Center Software sftunnel Root Arbitrary Code Execution Vulnerability
CVE-2026-20324 vendor source ↗
cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3HighCVSS 8.6
Sep 16, 2026
Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Vulnerabilities
CVE-2026-20295 CVE-2026-20323 vendor source ↗
cisco-sa-ISE-ABP-VNSW7Tn5CriticalCVSS 10.0
Sep 16, 2026
Cisco Identity Services Engine Authentication Bypass Vulnerability
CVE-2026-76460 vendor source ↗
cisco-sa-asaftd-eigrp-dos-GOhNejSjHighCVSS 7.4
Sep 16, 2026
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability
CVE-2026-20222 vendor source ↗
cisco-sa-hardening-ndw1-psFvnrgCriticalCVSS 9.9
Sep 16, 2026
Cisco Nexus Dashboard Software Security Hardening Release: September 2026
CVE-2026-20325 CVE-2026-20326 CVE-2026-20360 CVE-2026-20361 CVE-2026-76409 CVE-2026-20322 vendor source ↗
cisco-sa-ise-RADIUS-dos-wR3hYPMwHighCVSS 8.6
Sep 16, 2026
Cisco Identity Services Engine RADIUS Denial of Service Vulnerability
CVE-2026-20352 vendor source ↗
cisco-sa-asaftd-ikev2cert-dos-uWyc2xtvHighCVSS 8.6
Sep 16, 2026
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability
CVE-2026-20249 vendor source ↗

Full advisory archive: /pulse/vendor-advisories →

Data sources & corrections

NVD National Vulnerability Database (nvd.nist.gov) — CVE records + CVSS v3.1 severity
MITRE cvelistV5 (github.com/CVEProject/cvelistV5) — CNA-published CVE timestamps
CISA Known Exploited Vulnerabilities catalog (cisa.gov/known-exploited-vulnerabilities-catalog)
Vendor security advisories (RHSA, USN, MSRC, GHSA, etc.) — published_at timestamps
MITRE CWE taxonomy (cwe.mitre.org) — weakness class mappings

Snapshot generated Sep 19, 2026. Industry medians refresh every 6 hours; raw vendor counts are queried live on each request.

Spot a factual error in this report?

Email [email protected] with the specific number you're disputing and a link to the authoritative source. We review every report and publish corrections on the methodology page.