Cisco PSIRT
Cisco PSIRT security advisories — networking, IOS, ASA, and beyond.
211 advisories tracked · showing 100
- Nov 4, 2026cisco-sa-ise-cert-mE9BD5GOMediumCVSS 5.3CVE-2026-20241
Cisco Identity Services Engine Authorization Bypass Vulnerability
- Oct 28, 2026cisco-sa-asaftd-tunnel-dos-s6mgkb75HighCVSS 8.6CVE-2026-76418
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
- Oct 28, 2026cisco-sa-notice-I8z3n6lKLowNo CVE ID
Cisco Advance Notification for Publication of November 4, 2026, Security Advisories
- Oct 27, 2026cisco-sa-oct2026-node-js-Jj3SQ19uHighCVSS 7.4CVE-2026-105482, CVE-2026-105483 +2
Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
- Oct 23, 2026cisco-sa-emudhra-info-ScS22A1rLowNo CVE ID
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
- Oct 21, 2026cisco-sa-php-october26-Jj384DaqCVE-2026-109618, CVE-2026-109619
Vulnerabilities in PHP Affecting Cisco Products: October 2026
- Oct 21, 2026cisco-sa-exwy-hardening-FhcqBVcsHighCVSS 8.6CVE-2026-76490, CVE-2026-76491 +6
Cisco Expressway Series Security Hardening Release: October 2026
- Oct 21, 2026cisco-sa-voice-hardening-twgbH9e3CriticalCVSS 9.8CVE-2026-76473, CVE-2026-76474 +6
Cisco Unified Communications Products Security Hardening Release: October 2026
- Oct 21, 2026cisco-sa-hardening-snort3-ybgmhTQeCriticalCVSS 9.0CVE-2026-20043, CVE-2026-20236 +2
Multiple Cisco Products Snort 3 Security Hardening Release: October 2026
- Oct 21, 2026cisco-sa-snort3-vba-bufdos-jAuFdvn9MediumCVSS 5.8CVE-2026-20218
Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability
- Oct 21, 2026cisco-sa-snort3-gre-JNpMHrTvMediumCVSS 5.8CVE-2026-20221
Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability
- Oct 21, 2026cisco-sa-snort3-misc-dos-6mB22qAKMediumCVSS 5.8CVE-2026-20019, CVE-2026-20179 +2
Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities
- Oct 21, 2026cisco-sa-snort3-mime-vulns-bkXjcKktMediumCVSS 5.8CVE-2026-20011
Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
- Oct 21, 2026cisco-sa-snort3-gtpcodec-dos-RmecfepzMediumCVSS 5.3CVE-2026-76445
Multiple Cisco Products Snort 3 Denial of Service Vulnerability
- Oct 21, 2026cisco-sa-sec-client-priv-esc-muF8eZdmHighCVSS 5.5CVE-2026-76462
Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability
- Oct 21, 2026cisco-sa-opensrc-snort3-2fXGJPfeHighCVSS 7.8CVE-2026-76524
Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability
- Oct 21, 2026cisco-sa-expressway-inf-disc-vvYqgSTSMediumCVSS 5.3CVE-2026-76435
Cisco Expressway Series Information Disclosure Vulnerability
- Oct 21, 2026cisco-sa-asr9k-tUyxcyXNHighCVSS 7.5CVE-2026-76505
Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability
- Oct 21, 2026cisco-sa-cucm-access-PW9e8Jt2MediumCVSS 5.3CVE-2026-76487
Cisco Unified Communications Manager Improper Access Control Vulnerability
- Oct 21, 2026cisco-sa-vcs-static-cred-hr7EWZ8tCriticalCVSS 9.8CVE-2026-76466
Cisco Expressway Series Remote Code Execution Vulnerability
- Oct 14, 2026cisco-sa-notice-QGwHnJ6kLowNo CVE ID
Cisco Advance Notification for Publication of October 21, 2026, Security Advisories
- Oct 14, 2026cisco-sa-esa-afw-zqYJkjxpCriticalCVSS 9.8CVE-2026-76519
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
- Oct 7, 2026cisco-sa-hardening-meraki-os-drbEX9GHCriticalCVSS 9.6CVE-2026-76463, CVE-2026-76464 +5
Cisco Meraki Security Hardening Release: October 2026
- Oct 7, 2026cisco-sa-hardening-nxosw1-cWzSbtRCriticalCVSS 9.8CVE-2026-76453, CVE-2026-76455 +4
Cisco NX-OS Software Security Hardening Release: October 2026
- Oct 7, 2026cisco-sa-finesse-ssrf-mmSuyugSHighCVSS 7.2CVE-2026-20362
Cisco Finesse Server-Side Request Forgery Vulnerability
- Oct 7, 2026cisco-sa-hardening-ssm-Ph77wdhfCriticalCVSS 10.0CVE-2026-76480, CVE-2026-76482 +2
Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026
- Oct 7, 2026cisco-sa-apic-cmdinj-L6VR4E7MediumCVSS 6.5CVE-2026-20321
Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability
- Oct 7, 2026cisco-sa-apic-info-priv-enAdB5vDMediumCVSS 6.5CVE-2026-76488
Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability
- Oct 7, 2026cisco-sa-moam-rce-uBTzYV7CriticalCVSS 9.8CVE-2026-76465
Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability
- Oct 7, 2026cisco-sa-aci-epgcbp-SfDU7NLfMediumCVSS 5.8CVE-2026-20038
Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass Vulnerability
- Oct 7, 2026cisco-sa-hardening-apic-UOXWtfhCriticalCVSS 9.8CVE-2026-76498, CVE-2026-76499 +1
Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026
- Oct 7, 2026cisco-sa-ngoam-rce-LWKQ4BUCriticalCVSS 9.8CVE-2026-76485, CVE-2026-76486 +1
Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities
- Oct 7, 2026cisco-sa-nxos-mppe-dhKZAFgbMediumCVSS 4.4CVE-2026-20032
Cisco NX-OS Software Python Sandbox Escape Vulnerability
- Oct 7, 2026cisco-sa-napi-rce-r2shwu2jCriticalCVSS 9.8CVE-2026-76471
Cisco NX-OS Software NX-API Remote Code Execution Vulnerability
- Oct 7, 2026cisco-sa-nxos-nscpdos-SnderkC7MediumCVSS 5.8CVE-2026-20173
Cisco NX-OS Software Control Plane Denial of Service Vulnerability
- Oct 7, 2026cisco-sa-ssm-access-nttb2dhECriticalCVSS 9.1CVE-2026-20328, CVE-2026-76437 +2
Cisco License (Smart Software Manager) On-Prem Vulnerabilities
- Sep 30, 2026cisco-sa-notice-fBn58ELxLowNo CVE ID
Cisco Advance Notification for Publication of October 7, 2026, Security Advisories
- Sep 30, 2026cisco-sa-sdwan-webauth-xr8beuuUCriticalCVSS 9.8CVE-2026-76504
Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability
- Sep 16, 2026cisco-sa-ise-mult-vul-ymSsTLCcCriticalCVSS 9.1CVE-2026-20282, CVE-2026-20283 +1
Cisco Identity Services Engine Authenticated Remote Code Execution and API Vulnerabilities
- Sep 16, 2026cisco-sa-ise-multi-hrP9jQSQCriticalCVSS 10.0CVE-2026-76423, CVE-2026-76424 +4
Cisco Identity Services Engine Vulnerabilities
- Sep 16, 2026cisco-sa-hardening-asaftdfmc-uvpPROhNCriticalCVSS 9.9CVE-2026-20329, CVE-2026-20330 +6
Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026
- Sep 16, 2026cisco-sa-ise-cmd-inj-e2CuZCYZCriticalCVSS 9.1CVE-2026-20305, CVE-2026-20306
Cisco Identity Services Engine Command Injection Vulnerabilities
- Sep 16, 2026cisco-sa-fmc2-multivulns-HXgcqRGCriticalCVSS 9.0CVE-2026-76412, CVE-2026-76413 +1
Cisco Secure Firewall Management Center Software Vulnerabilities
- Sep 16, 2026cisco-sa-fmc-sftunn-codex-c3O4Jft2CriticalCVSS 9.9CVE-2026-20324
Cisco Secure Firewall Management Center Software sftunnel Root Arbitrary Code Execution Vulnerability
- Sep 16, 2026cisco-sa-hardening-ise-XU5EwX5TCriticalCVSS 10.0CVE-2026-20130, CVE-2026-20192 +4
Cisco Identity Services Engine Hardening Release: September 2026
- Sep 16, 2026cisco-sa-fmc-mulivulns-4PsnFwvxCriticalCVSS 9.1CVE-2026-20340, CVE-2026-20341 +3
Cisco Secure Firewall Management Center Software Vulnerabilities
- Sep 16, 2026cisco-sa-fmc-javarce-y2NypXwkCriticalCVSS 9.8CVE-2026-20242
Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability
- Sep 16, 2026cisco-sa-auth-bypass-broadwor-57m9dmm5MediumCVSS 6.5CVE-2026-76438
Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability
- Sep 16, 2026cisco-sa-ise-auth-bypass-1-MxcTNgwxMediumCVSS 4.3CVE-2026-20183, CVE-2026-20285 +1
Cisco Identity Services Engine Authorization Bypass Vulnerabilities
- Sep 16, 2026cisco-sa-ftd-acl-bypass-8p6vFvwMediumCVSS 5.8CVE-2026-20120, CVE-2026-20121
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Object Group Access Control List Bypass Vulnerabilities
- Sep 16, 2026cisco-sa-ise-multi-traversal-WDTgYCdnMediumCVSS 5.3CVE-2026-76431, CVE-2026-76432 +2
Cisco Identity Services Engine Multiple Path Traversal Vulnerabilities
- Sep 16, 2026cisco-sa-ise-xss-Uz9VWRQMediumCVSS 6.1CVE-2026-20309
Cisco Identity Services Engine Cross-Site Scripting Vulnerability
- Sep 16, 2026cisco-sa-ise-inf-disc-LFWvcCuMediumCVSS 4.9CVE-2026-20235
Cisco Identity Services Engine Information Disclosure Vulnerability
- Sep 16, 2026cisco-sa-teva-os-command-W4GAO6jpMediumCVSS 4.7CVE-2026-20350
Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability
- Sep 16, 2026cisco-sa-ftd-snort2-ssldos-Mw7WYX9cMediumCVSS 5.8CVE-2026-20290
Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability
- Sep 16, 2026cisco-sa-ise-multisql-inject-JnHK54RqMediumCVSS 4.9CVE-2026-76448, CVE-2026-76449 +2
Cisco Identity Services Engine SQL and HQL Injection Vulnerabilities
- Sep 16, 2026cisco-sa-ise-multi-vuln-kWLeNnRDMediumCVSS 4.9CVE-2026-20071, CVE-2026-20072
Cisco Identity Services Engine 802.1X Session Hijack and Information Disclosure Vulnerabilities
- Sep 16, 2026cisco-sa-asaftd-tcpdns-dos-p6dUnjr5MediumCVSS 6.8CVE-2026-20248
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability
- Sep 16, 2026cisco-sa-ise-multiauth-bypass-sgD2HbL4MediumCVSS 5.3CVE-2026-76439, CVE-2026-76444 +2
Cisco Identity Services Engine Authentication Bypass Vulnerabilities
- Sep 16, 2026cisco-sa-asaftd-dtls-dos-Kp57HkyOHighCVSS 8.6CVE-2026-20250
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service Vulnerability
- Sep 16, 2026cisco-sa-ftd-tls1.3-dos-dLxwFWgFHighCVSS 8.6CVE-2026-20135
Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability
- Sep 16, 2026cisco-sa-asa-ftd-logging-dos-ZXXNesfNHighCVSS 8.6CVE-2026-20154
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability
- Sep 16, 2026cisco-sa-ise-sql-inj-3QTKR947HighCVSS 7.5CVE-2026-20247, CVE-2026-20300
Cisco Identity Services Engine SQL Injection Vulnerabilities
- Sep 16, 2026cisco-sa-asaftd-ikev2cert-dos-uWyc2xtvHighCVSS 8.6CVE-2026-20249
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability
- Sep 16, 2026cisco-sa-ise-RADIUS-dos-wR3hYPMwHighCVSS 8.6CVE-2026-20352
Cisco Identity Services Engine RADIUS Denial of Service Vulnerability
- Sep 16, 2026cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3HighCVSS 8.6CVE-2026-20295, CVE-2026-20323
Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Vulnerabilities
- Sep 16, 2026cisco-sa-asaftd-eigrp-dos-GOhNejSjHighCVSS 7.4CVE-2026-20222
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability
- Sep 16, 2026cisco-sa-hardening-ndw1-psFvnrgCriticalCVSS 9.9CVE-2026-20322, CVE-2026-20325 +4
Cisco Nexus Dashboard Software Security Hardening Release: September 2026
- Sep 16, 2026cisco-sa-ISE-ABP-VNSW7Tn5CriticalCVSS 10.0CVE-2026-76460
Cisco Identity Services Engine Authentication Bypass Vulnerability
- Sep 16, 2026cisco-sa-ise-rce-se7bYU57CriticalCVSS 9.9CVE-2026-20176, CVE-2026-20211 +1
Cisco Identity Services Engine Remote Code Execution Vulnerabilities
- Sep 14, 2026cisco-sa-esa-inj-2bLVGmhXCriticalCVSS 9.8CVE-2026-76461
Cisco Secure Email Gateway SQL Injection Vulnerability
- Sep 14, 2026cisco-sa-hardening-esa-dfCrfXkmCriticalCVSS 9.8CVE-2026-20353, CVE-2026-76440 +3
Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
- Sep 9, 2026cisco-sa-notice-jfxK98ZPLowNo CVE ID
Cisco Advance Notification for Publication of September 16, 2026, Security Advisories
- Sep 8, 2026cisco-sa-ucs-uefi-sb-bypass-eb6xC5GWHighCVSS 7.1CVE-2026-20293
Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability
- Sep 2, 2026cisco-sa-esa-smime-disc-dzw4rEdYMediumCVSS 5.9CVE-2026-20354, CVE-2026-20355
Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities
- Sep 2, 2026cisco-sa-hardening-iosxr-qg64NcMCriticalCVSS 9.8CVE-2026-20274, CVE-2026-20275 +5
Cisco IOS XR Software Security Hardening Release: September 2026
- Sep 2, 2026cisco-sa-n9k-s1-rce-EH8dEtrCriticalCVSS 9.8CVE-2026-20212
Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability
- Sep 2, 2026cisco-sa-phone-dos-txMYNRzvHighCVSS 7.5CVE-2026-20281
Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability
- Aug 26, 2026cisco-sa-notice-f2SiMFxlLowNo CVE ID
Cisco Advance Notification for Publication of September 2, 2026, Security Advisories
- Aug 19, 2026cisco-sa-hardening-crosswork-UzDTU9VhCriticalCVSS 10.0CVE-2026-20030, CVE-2026-20357 +2
Cisco Crosswork Security Hardening Release: August 2026
- Aug 19, 2026cisco-sa-roomos-bof-vTMANZguMediumCVSS 6.1CVE-2026-20302
Cisco RoomOS Stack Overflow Vulnerability
- Aug 19, 2026cisco-sa-bworks-xxe-uwUd7CEtHighCVSS 7.5CVE-2026-20320
Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
- Aug 19, 2026cisco-sa-hardening-csw1-shSvndWPCriticalCVSS 10.0CVE-2026-20231, CVE-2026-20315 +3
Cisco Secure Workload Software Security Hardening Release: August 2026
- Aug 19, 2026cisco-sa-ie1k-NgXUFF52MediumCVSS 5.4CVE-2026-20232
Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability
- Aug 19, 2026cisco-sa-ucce-pcce-ssrf-TghHxDMediumCVSS 5.0CVE-2026-20314
Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability
- Aug 19, 2026cisco-sa-cuic-sql-inject-2qbfWSm5MediumCVSS 6.5CVE-2026-20327
Cisco Unified Intelligence Center SQL Injection Vulnerability
- Aug 19, 2026cisco-sa-ie1k-uxq86LnxMediumCVSS 5.3CVE-2026-20177
Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability
- Aug 12, 2026cisco-sa-notice-LDquvx5dLowNo CVE ID
Cisco Advance Notification for Publication of August 19, 2026, Security Advisories
- Aug 11, 2026cisco-sa-asaftd-vpn-dos-dzv4mQFFHighCVSS 8.6CVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
- Aug 7, 2026cisco-sa-clamav-WuuvVd26HighCVSS 7.5CVE-2026-20337, CVE-2026-20338 +5
ClamAV Vulnerabilities Affecting Cisco Products: August 2026
- Aug 5, 2026cisco-sa-ios-xmcp-thbAr34tHighCVSS 8.6CVE-2026-20301
Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability
- Aug 5, 2026cisco-sa-iosxe-snmp-dos-ZAqNm4MDHighCVSS 7.7CVE-2026-20124
Cisco IOS XE Software SNMP Denial of Service Vulnerability
- Aug 5, 2026cisco-sa-xe-webui-dos-PtAODAWWMediumCVSS 6.3CVE-2026-20311
Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability
- Aug 5, 2026cisco-sa-roomos-infodisc-qBXjfmWmMediumCVSS 5.7CVE-2026-20289
Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability
- Aug 5, 2026cisco-sa-sdwan-infodis-SPuJBDCeMediumCVSS 6.5CVE-2026-20294
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
- Aug 5, 2026cisco-sa-ts-agent-fw-bypass-MYBTMrevMediumCVSS 5.0CVE-2026-20028
Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability
- Aug 5, 2026cisco-sa-webui-dos-qdc7qx3MediumCVSS 4.3CVE-2026-20308
Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability
- Aug 5, 2026cisco-sa-hardening-sdwan-faLcR3KCriticalCVSS 9.9CVE-2026-20303, CVE-2026-20304 +3
Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026
- Aug 5, 2026cisco-sa-cimc-arg-inject-upSHdMfUHighCVSS 8.8CVE-2026-20200, CVE-2026-20288
Cisco Integrated Management Controller Argument Injection Vulnerabilities
- Aug 5, 2026cisco-sa-iosxe-bing-MGHrFAkdHighCVSS 8.6CVE-2026-20263
Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability