Cisco — Security Activity Report
Networking, security, collaboration (Cisco PSIRT advisories)
Generated Nov 13, 2026Cohort: 9 vendors with ≥10 CVE advisoriesMethodology ↗
CVE Disclosure Volume
Total all-time: 388 CVEs with Cisco advisories. Source: NVD CVE records joined with vendor advisory publish dates.
Severity Composition
↑ +2.6 pp57.5% of Cisco's 388 CVEs are CRITICAL or HIGH severity. Industry median: 54.9%. Source: NVD CVSS v3.1.
CISA KEV Listings
↑ +4.8 pp21 of 388 Cisco CVEs in the last 3 years are on CISA's Known Exploited Vulnerabilities catalog (5.4%). Industry median: 0.6%.
Source: CISA Known Exploited Vulnerabilities catalog (current snapshot). KEV listing means CISA observed active in-the-wild exploitation.
Vendor Patch Velocity
Insufficient data to publish a reliable patch-velocity metric for Cisco(sample size: 6, minimum required: 10).
Top Recurring Weakness Classes
Most-frequently mapped CWEs across Cisco's last 3 years of CVE disclosures. Source: NVD — CWE mapping per MITRE taxonomy.
Recent Security Advisories
Latest advisories published by Cisco, straight from the vendor's own feed. Severity labels are the vendor's — scales differ across vendors.
- cisco-sa-ise-cert-mE9BD5GOMediumCVSS 5.3Nov 4, 2026
Cisco Identity Services Engine Authorization Bypass Vulnerability
- cisco-sa-asaftd-tunnel-dos-s6mgkb75HighCVSS 8.6Oct 28, 2026
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
- cisco-sa-notice-I8z3n6lKLowOct 28, 2026
Cisco Advance Notification for Publication of November 4, 2026, Security Advisories
- cisco-sa-oct2026-node-js-Jj3SQ19uHighCVSS 7.4Oct 27, 2026
Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
- cisco-sa-emudhra-info-ScS22A1rLowOct 23, 2026
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
- cisco-sa-php-october26-Jj384DaqOct 21, 2026
Vulnerabilities in PHP Affecting Cisco Products: October 2026
- cisco-sa-snort3-gtpcodec-dos-RmecfepzMediumCVSS 5.3Oct 21, 2026
Multiple Cisco Products Snort 3 Denial of Service Vulnerability
- cisco-sa-snort3-vba-bufdos-jAuFdvn9MediumCVSS 5.8Oct 21, 2026
Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability
Full advisory archive: /pulse/vendor-advisories →
Data sources & corrections
- NVD National Vulnerability Database (nvd.nist.gov) — CVE records + CVSS v3.1 severity
- MITRE cvelistV5 (github.com/CVEProject/cvelistV5) — CNA-published CVE timestamps
- CISA Known Exploited Vulnerabilities catalog (cisa.gov/known-exploited-vulnerabilities-catalog)
- Vendor security advisories (Red Hat RHSA, Ubuntu USN, Microsoft MSRC, Cisco PSIRT and other per-vendor feeds; the GitHub and OSV advisory databases are not used) — published_at timestamps
- MITRE CWE taxonomy (cwe.mitre.org) — weakness class mappings
Snapshot generated Nov 13, 2026: when these counts and industry medians were computed. Vendors in the index are recomputed every 6 hours.
Spot a factual error in this report?
Email [email protected] with the specific number you're disputing and a link to the authoritative source. We review every report and publish corrections on the methodology page.