Cisco — Security Activity Report

Networking, security, collaboration (Cisco PSIRT advisories)

Generated Jul 29, 2026Cohort: 9 vendors with ≥10 CVE advisoriesMethodology ↗

CVE Disclosure Volume

Total all-time: 164 CVEs with Cisco advisories. Source: NVD CVE records joined with vendor advisory publish dates.

Severity Composition

↓ -13.6 pp

39.0% of Cisco's 164 CVEs are CRITICAL or HIGH severity. Industry median: 52.6%. Source: NVD CVSS v3.1.

CRITICAL 13 (7.9%)HIGH 51 (31.1%)MEDIUM 99 (60.4%)NONE 1 (0.6%)

CISA KEV Listings

↑ +4.5 pp

9 of 164 Cisco CVEs in the last 3 years are on CISA's Known Exploited Vulnerabilities catalog (5.5%). Industry median: 1.0%.

Source: CISA Known Exploited Vulnerabilities catalog (current snapshot). KEV listing means CISA observed active in-the-wild exploitation.

Vendor Patch Velocity

Insufficient data to publish a reliable patch-velocity metric for Cisco(sample size: 0, minimum required: 10).

Top Recurring Weakness Classes

Most-frequently mapped CWEs across Cisco's last 3 years of CVE disclosures. Source: NVD — CWE mapping per MITRE taxonomy.

CWE-79Cross-site Scripting (XSS)19 CVEs
CWE-120Buffer Copy without Checking Size (Classic Buffer Overflow)7 CVEs
CWE-22Path Traversal7 CVEs
CWE-401Missing Release of Memory after Effective Lifetime (Memory Leak)7 CVEs
CWE-77Command Injection6 CVEs

Recent Security Advisories

Latest advisories published by Cisco, straight from the vendor's own feed. Severity labels are the vendor's — scales differ across vendors.

cisco-sa-hardening-roomos-AqNMbEqHighCVSS 8.8
Jul 15, 2026
Cisco RoomOS Security Hardening Release: July 2026
CVE-2026-20187 CVE-2026-20150 CVE-2026-20153 CVE-2026-20156 CVE-2026-20157 CVE-2026-20158 vendor source ↗
cisco-sa-ise-traversal-xNt7wb2YMediumCVSS 5.5
Jul 15, 2026
Cisco Identity Services Engine Path Traversal Vulnerability
CVE-2026-20146 vendor source ↗
cisco-sa-notice-ILh3ZrP5Low
Jul 8, 2026
Cisco Advance Notification for Publication of July 15, 2026, Security Advisories
vendor source ↗
cisco-sa-catc-file-read-wLH2vf8XHighCVSS 7.5
Jul 1, 2026
Cisco Catalyst Center Arbitrary File Read Vulnerability
CVE-2026-20191 vendor source ↗
cisco-sa-clamav-88cFYyxRHighCVSS 7.5
Jul 1, 2026
ClamAV Vulnerabilities Affecting Cisco Products: July 2026
CVE-2026-20214 CVE-2026-20215 CVE-2026-20216 CVE-2026-20217 CVE-2026-20243 CVE-2026-20244+1 more CVEsvendor source ↗
cisco-sa-notice-vwL7b0S7Low
Jun 24, 2026
Cisco Advance Notification for Publication of July 1, 2026, Security Advisories
vendor source ↗
cisco-sa-ise-multi-G5WP8vvCriticalCVSS 9.1
Jun 17, 2026
Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities
CVE-2026-20181 CVE-2026-20190 vendor source ↗
cisco-sa-umbrella-priv-esc-F4wJB7AUMediumCVSS 6.0
Jun 17, 2026
Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability
CVE-2026-20246 vendor source ↗

Full advisory archive: /pulse/vendor-advisories →

Data sources & corrections

NVD National Vulnerability Database (nvd.nist.gov) — CVE records + CVSS v3.1 severity
MITRE cvelistV5 (github.com/CVEProject/cvelistV5) — CNA-published CVE timestamps
CISA Known Exploited Vulnerabilities catalog (cisa.gov/known-exploited-vulnerabilities-catalog)
Vendor security advisories (RHSA, USN, MSRC, GHSA, etc.) — published_at timestamps
MITRE CWE taxonomy (cwe.mitre.org) — weakness class mappings

Snapshot generated Jul 29, 2026. Industry medians refresh every 6 hours; raw vendor counts are queried live on each request.

Spot a factual error in this report?

Email [email protected] with the specific number you're disputing and a link to the authoritative source. We review every report and publish corrections on the methodology page.