Skip to content
Edition of Sunday, November 8, 2026
Daily CISO

The five-minute briefing for security leaders.

Security vendor · Firewalls and NGFW · in CISA KEV

Cisco in the CISA KEV catalog

CISA’s Known Exploited Vulnerabilities catalog lists 102 entries for Cisco as of catalog version 2026.11.06, released November 6, 2026. The newest was added October 29, 2026, and the latest federal due date is November 1, 2026. CISA marks 7 of them as known ransomware use.

Updated

entries in the catalog
102
newest addition
October 29, 2026
latest federal due date
November 1, 2026
marked known ransomware use
7

Directory record

Website
www.cisco.com/site/us/en/products/security/index.html
Categories
Firewalls and NGFW (primary), SASE and SSE, Network access control, SIEM
Headquarters
San Jose, United States
Founded
1984
Ownership
Public (NASDAQ: CSCO)
Company record
Cisco on CISO Tribune

Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.

KEV entries, newest first

Filed by CISA under the name “Cisco”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.

  1. Added October 29, 2026

    CVE-2026-76418 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability

    Secure Firewall ASA Software and Cisco Secure FTD Software · on must-patch

    Due November 1, 2026

  2. Added October 14, 2026

    CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability

    Secure Email Gateway · on must-patch

    Due October 17, 2026

  3. Added September 30, 2026

    CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

    Catalyst SD-WAN Manager · on must-patch

    Due October 3, 2026

  4. Added September 16, 2026

    CVE-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

    Identity Services Engine

    Due September 19, 2026

  5. Added September 14, 2026

    CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability

    Secure Email Gateway

    Due September 17, 2026

  6. Added September 9, 2026

    CVE-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management

    Due September 12, 2026

  7. Added August 11, 2026

    CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

    Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)

    Due August 14, 2026

  8. Added July 29, 2026

    CVE-2026-20316 Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

    Secure Firewall Management Center (FMC) · known ransomware use

    Due August 1, 2026

  9. Added July 13, 2026

    CVE-2008-4128 Cisco IOS Cross-Site Request Forgery Vulnerability

    IOS

    Due July 16, 2026

  10. Added June 25, 2026

    CVE-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

    Unified Communications Manager

    Due June 28, 2026

  11. Added June 15, 2026

    CVE-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

    Catalyst SD-WAN Manager

    Due June 29, 2026

  12. Added June 9, 2026

    CVE-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

    Catalyst SD-WAN Manager

    Due June 23, 2026

  13. Added May 14, 2026

    CVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    Catalyst SD-WAN

    Due May 17, 2026

  14. Added April 20, 2026

    CVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

    Catalyst SD-WAN Manager

    Due April 23, 2026

  15. Added April 20, 2026

    CVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

    Catalyst SD-WAN Manager

    Due April 23, 2026

  16. Added April 20, 2026

    CVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

    Catalyst SD-WAN Manger

    Due April 23, 2026

  17. Added March 19, 2026

    CVE-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

    Secure Firewall Management Center (FMC) · known ransomware use

    Due March 22, 2026

  18. Added February 25, 2026

    CVE-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

    Catalyst SD-WAN Controller and Manager

    Due February 27, 2026

  19. Added February 25, 2026

    CVE-2022-20775 Cisco SD-WAN Path Traversal Vulnerability

    SD-WAN

    Due February 27, 2026

  20. Added January 21, 2026

    CVE-2026-20045 Cisco Unified Communications Products Code Injection Vulnerability

    Unified Communications Manager

    Due February 11, 2026

  21. Added December 17, 2025

    CVE-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability

    Multiple Products

    Due December 24, 2025

  22. Added September 29, 2025

    CVE-2025-20352 Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

    IOS and IOS XE

    Due October 20, 2025

  23. Added September 25, 2025

    CVE-2025-20362 Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

    Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense

    Due September 26, 2025

  24. Added September 25, 2025

    CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

    Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense

    Due September 26, 2025

  25. Added July 28, 2025

    CVE-2025-20337 Cisco Identity Services Engine Injection Vulnerability

    Identity Services Engine

    Due August 18, 2025

  26. Added July 28, 2025

    CVE-2025-20281 Cisco Identity Services Engine Injection Vulnerability

    Identity Services Engine

    Due August 18, 2025

  27. Added March 31, 2025

    CVE-2024-20439 Cisco Smart Licensing Utility Static Credential Vulnerability

    Smart Licensing Utility

    Due April 21, 2025

  28. Added March 3, 2025

    CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability

    Small Business RV Series Routers

    Due March 24, 2025

  29. Added November 12, 2024

    CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

    Adaptive Security Appliance (ASA)

    Due December 3, 2024

  30. Added October 24, 2024

    CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability

    Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

    Due November 14, 2024

  31. Added July 2, 2024

    CVE-2024-20399 Cisco NX-OS Command Injection Vulnerability

    NX-OS

    Due July 23, 2024

  32. Added April 24, 2024

    CVE-2024-20359 Cisco ASA and FTD Privilege Escalation Vulnerability

    Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

    Due May 1, 2024

  33. Added April 24, 2024

    CVE-2024-20353 Cisco ASA and FTD Denial of Service Vulnerability

    Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

    Due May 1, 2024

  34. Added February 15, 2024

    CVE-2020-3259 Cisco ASA and FTD Information Disclosure Vulnerability

    Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) · known ransomware use

    Due March 7, 2024

  35. Added October 23, 2023

    CVE-2023-20273 Cisco IOS XE Web UI Command Injection Vulnerability

    Cisco IOS XE Web UI

    Due October 27, 2023

  36. Added October 16, 2023

    CVE-2023-20198 Cisco IOS XE Web UI Privilege Escalation Vulnerability

    IOS XE Web UI

    Due October 20, 2023

  37. Added October 10, 2023

    CVE-2023-20109 Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

    IOS and IOS XE

    Due October 31, 2023

  38. Added September 13, 2023

    CVE-2023-20269 Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

    Adaptive Security Appliance and Firepower Threat Defense · known ransomware use

    Due October 4, 2023

  39. Added May 19, 2023

    CVE-2016-6415 Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

    IOS, IOS XR, and IOS XE

    Due June 9, 2023

  40. Added May 19, 2023

    CVE-2004-1464 Cisco IOS Denial-of-Service Vulnerability

    IOS

    Due June 9, 2023

  41. Added April 19, 2023

    CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    IOS and IOS XE Software

    Due May 10, 2023

  42. Added October 24, 2022

    CVE-2020-3433 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

    AnyConnect Secure · known ransomware use

    Due November 14, 2022

  43. Added October 24, 2022

    CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

    AnyConnect Secure · known ransomware use

    Due November 14, 2022

  44. Added June 8, 2022

    CVE-2019-15271 Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability

    RV Series Routers

    Due June 22, 2022

  45. Added May 24, 2022

    CVE-2016-6367 Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability

    Adaptive Security Appliance (ASA)

    Due June 14, 2022

  46. Added May 24, 2022

    CVE-2016-6366 Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability

    Adaptive Security Appliance (ASA)

    Due June 14, 2022

  47. Added May 23, 2022

    CVE-2022-20821 Cisco IOS XR Open Port Vulnerability

    IOS XR

    Due June 13, 2022

  48. Added March 25, 2022

    CVE-2018-0147 Cisco Secure Access Control System Java Deserialization Vulnerability

    Secure Access Control System (ACS)

    Due April 15, 2022

  49. Added March 25, 2022

    CVE-2018-0125 Cisco VPN Routers Remote Code Execution Vulnerability

    VPN Routers

    Due April 15, 2022

  50. Added March 25, 2022

    CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability

    IOS and IOS XE

    Due April 15, 2022

  51. Added March 25, 2022

    CVE-2015-0666 Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability

    Prime Data Center Network Manager (DCNM)

    Due April 15, 2022

  52. Added March 25, 2022

    CVE-2010-3035 Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

    IOS XR

    Due April 15, 2022

  53. Added March 25, 2022

    CVE-2009-2055 Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

    IOS XR

    Due April 15, 2022

  54. Added March 3, 2022

    CVE-2022-20708 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    Small Business RV160, RV260, RV340, and RV345 Series Routers

    Due March 17, 2022

  55. Added March 3, 2022

    CVE-2022-20703 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    Small Business RV160, RV260, RV340, and RV345 Series Routers

    Due March 17, 2022

  56. Added March 3, 2022

    CVE-2022-20701 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    Small Business RV160, RV260, RV340, and RV345 Series Routers

    Due March 17, 2022

  57. Added March 3, 2022

    CVE-2022-20700 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    Small Business RV160, RV260, RV340, and RV345 Series Routers

    Due March 17, 2022

  58. Added March 3, 2022

    CVE-2022-20699 Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

    Small Business RV160, RV260, RV340, and RV345 Series Routers

    Due March 17, 2022

  59. Added March 3, 2022

    CVE-2019-1652 Cisco Small Business Routers Improper Input Validation Vulnerability

    Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers

    Due March 17, 2022

  60. Added March 3, 2022

    CVE-2018-0180 Cisco IOS Software Denial-of-Service Vulnerability

    IOS Software

    Due March 17, 2022

  61. Added March 3, 2022

    CVE-2018-0179 Cisco IOS Software Denial-of-Service Vulnerability

    IOS Software

    Due March 17, 2022

  62. Added March 3, 2022

    CVE-2018-0175 Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

    IOS, XR, and XE Software

    Due March 17, 2022

  63. Added March 3, 2022

    CVE-2018-0174 Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability

    IOS XE Software

    Due March 17, 2022

  64. Added March 3, 2022

    CVE-2018-0173 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

    IOS and IOS XE Software

    Due March 17, 2022

  65. Added March 3, 2022

    CVE-2018-0172 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

    IOS and IOS XE Software

    Due March 17, 2022

  66. Added March 3, 2022

    CVE-2018-0167 Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

    IOS, XR, and XE Software

    Due March 17, 2022

  67. Added March 3, 2022

    CVE-2018-0161 Cisco IOS Software Resource Management Errors Vulnerability

    IOS Software

    Due March 17, 2022

  68. Added March 3, 2022

    CVE-2018-0159 Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability

    IOS Software and Cisco IOS XE Software

    Due March 17, 2022

  69. Added March 3, 2022

    CVE-2018-0158 Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability

    IOS Software and Cisco IOS XE Software

    Due March 17, 2022

  70. Added March 3, 2022

    CVE-2018-0156 Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability

    IOS Software and Cisco IOS XE Software

    Due March 17, 2022

  71. Added March 3, 2022

    CVE-2018-0155 Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability

    Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches

    Due March 17, 2022

  72. Added March 3, 2022

    CVE-2018-0154 Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability

    IOS Software

    Due March 17, 2022

  73. Added March 3, 2022

    CVE-2018-0151 Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability

    IOS and IOS XE Software

    Due March 17, 2022

  74. Added March 3, 2022

    CVE-2017-6744 Cisco IOS Software SNMP Remote Code Execution Vulnerability

    IOS software

    Due March 24, 2022

  75. Added March 3, 2022

    CVE-2017-6743 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    IOS and IOS XE Software

    Due March 24, 2022

  76. Added March 3, 2022

    CVE-2017-6740 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    IOS and IOS XE Software

    Due March 24, 2022

  77. Added March 3, 2022

    CVE-2017-6739 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    IOS and IOS XE Software

    Due March 24, 2022

  78. Added March 3, 2022

    CVE-2017-6738 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    IOS and IOS XE Software

    Due March 24, 2022

  79. Added March 3, 2022

    CVE-2017-6737 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    IOS and IOS XE Software

    Due March 24, 2022

  80. Added March 3, 2022

    CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

    IOS and IOS XE Software

    Due March 24, 2022

  81. Added March 3, 2022

    CVE-2017-6663 Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability

    IOS and IOS XE Software

    Due March 24, 2022

  82. Added March 3, 2022

    CVE-2017-6627 Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability

    IOS and IOS XE Software

    Due March 24, 2022

  83. Added March 3, 2022

    CVE-2017-12319 Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability

    IOS XE Software

    Due March 24, 2022

  84. Added March 3, 2022

    CVE-2017-12240 Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

    IOS and IOS XE Software

    Due March 24, 2022

  85. Added March 3, 2022

    CVE-2017-12238 Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability

    Catalyst 6800 Series Switches

    Due March 24, 2022

  86. Added March 3, 2022

    CVE-2017-12237 Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability

    IOS and IOS XE Software

    Due March 24, 2022

  87. Added March 3, 2022

    CVE-2017-12235 Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability

    IOS software

    Due March 24, 2022

  88. Added March 3, 2022

    CVE-2017-12234 Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

    IOS software

    Due March 24, 2022

  89. Added March 3, 2022

    CVE-2017-12233 Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

    IOS software

    Due March 24, 2022

  90. Added March 3, 2022

    CVE-2017-12232 Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability

    IOS software

    Due March 24, 2022

  91. Added March 3, 2022

    CVE-2017-12231 Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability

    IOS software

    Due March 24, 2022

  92. Added November 3, 2021

    CVE-2021-1498 Cisco HyperFlex HX Data Platform Command Injection Vulnerability

    HyperFlex HX

    Due November 17, 2021

  93. Added November 3, 2021

    CVE-2021-1497 Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability

    HyperFlex HX

    Due November 17, 2021

  94. Added November 3, 2021

    CVE-2020-3580 Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability

    Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) · known ransomware use

    Due May 3, 2022

  95. Added November 3, 2021

    CVE-2020-3569 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

    IOS XR

    Due May 3, 2022

  96. Added November 3, 2021

    CVE-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

    IOS XR

    Due May 3, 2022

  97. Added November 3, 2021

    CVE-2020-3452 Cisco ASA and FTD Read-Only Path Traversal Vulnerability

    Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

    Due May 3, 2022

  98. Added November 3, 2021

    CVE-2020-3161 Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability

    Cisco IP Phones

    Due May 3, 2022

  99. Added November 3, 2021

    CVE-2020-3118 Cisco IOS XR Software Discovery Protocol Format String Vulnerability

    IOS XR

    Due May 3, 2022

  100. Added November 3, 2021

    CVE-2019-1653 Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

    Small Business RV320 and RV325 Routers

    Due May 3, 2022

  101. Added November 3, 2021

    CVE-2018-0296 Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability

    Adaptive Security Appliance (ASA)

    Due May 3, 2022

  102. Added November 3, 2021

    CVE-2018-0171 Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

    IOS and IOS XE

    Due May 3, 2022

Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.

On Daily CISO, newest first

  1. Daily briefing · November 2, 2026

    Cisco Talos: Fake IT Help Desk Calls Fueled Ransomware and Credential Theft

  2. Daily briefing · October 31, 2026

    Chinese actors chained VMware ESX and Linux zero-days to root firewalls

  3. Daily briefing · October 20, 2026

    CISA deadline hits for exploited Palo Alto, Cisco and Ahsay flaws; Ivanti chain also active

  4. Daily briefing · October 18, 2026

    CISA KEV catalog grows with exploited Palo Alto, Cisco and Ahsay flaws

  5. Daily briefing · October 17, 2026

    CISA Catalogs Four More Exploited Flaws in Palo Alto, Cisco, Ahsay Products

  6. Daily briefing · October 16, 2026

    CISA Flags Actively Exploited Flaws in Palo Alto, Cisco and Ahsay Products

  7. Daily briefing · October 15, 2026

    CISA adds four more exploited flaws, including Palo Alto and Cisco products, to KEV catalog

  8. Weekly archive · Oct 12 – Oct 18, 2026

    CISA Adds Four More Exploited Vulnerabilities to KEV Catalog

  9. Daily briefing · October 4, 2026

    Cisco's fifth SD-WAN zero-day of the year exploited in the wild

  10. Daily briefing · October 3, 2026

    CISA adds Cisco SD-WAN Manager zero-day to KEV catalog

  11. Daily briefing · October 2, 2026

    Cisco Catalyst SD-WAN Manager Flaw Joins CISA's Exploited Vulnerability List

  12. Daily briefing · October 1, 2026

    CISA adds actively exploited Cisco Catalyst SD-WAN Manager bug to KEV catalog

  13. Weekly archive · Sep 14 – Sep 20, 2026

    Cisco patches Secure Email Gateway zero-day under active exploitation

  14. Weekly archive · Sep 7 – Sep 13, 2026

    Cisco Secure Firewall Management Center flaws exploited by state and ransomware actors

  15. Weekly archive · Aug 10 – Aug 16, 2026

    Attackers knock Cisco firewalls offline with an unauthenticated request

  16. Weekly archive · Jul 27 – Aug 2, 2026

    CISA Adds Cisco Firewall Flaw to Exploited Vulnerabilities List

  17. Weekly archive · Jun 22 – Jun 28, 2026

    CISA Adds Actively Exploited Cisco and PTC Flaws to KEV Catalog

  18. Weekly archive · Jun 15 – Jun 21, 2026

    CISA Adds Exploited Cisco SD-WAN and LiteSpeed Flaws to KEV Catalog

  19. Weekly archive · Jun 8 – Jun 14, 2026

    CISA Flags Cisco SD-WAN, Arista EOS, and Chromium V8 Flaws as Exploited

  20. Weekly archive · May 11 – May 17, 2026

    CISA adds Cisco Catalyst SD-WAN Controller bypass flaw to KEV Catalog

  21. Weekly archive · Apr 20 – Apr 26, 2026

    CISA Adds Eight Vulnerabilities to KEV Catalog

  22. Weekly archive · Apr 20 – Apr 26, 2026

    CISA and NCSC-UK Detail FIRESTARTER Backdoor on Cisco Firewalls

  23. Weekly archive · Mar 16 – Mar 22, 2026

    CISA Adds Cisco Firewall Management Flaw to KEV Catalog

  24. Weekly archive · Mar 2 – Mar 8, 2026

    Cisco Confirms Active Exploitation of SD-WAN Manager Flaws, Patches 48 Firewall Bugs

  25. Weekly archive · Feb 23 – Mar 1, 2026

    Cisco SD-WAN authentication bypass was exploited for about three years

  26. Weekly archive · Feb 23 – Mar 1, 2026

    CISA issues Emergency Directive 26-03 during the DHS shutdown

  27. Weekly archive · Jan 19 – Jan 25, 2026

    CISA Adds Actively Exploited Cisco Communications Flaw to KEV Catalog

  28. Weekly archive · Jan 12 – Jan 18, 2026

    Cisco patches the AsyncOS email appliance flaw exploited since November

  29. Weekly archive · Dec 15 – Dec 21, 2025

    CISA Adds Cisco, SonicWall, and ASUS Flaws to Exploited Vulnerabilities Catalog

  30. Weekly archive · Dec 15 – Dec 21, 2025

    Unpatched Cisco Email Security Flaw Used to Install Backdoors

  31. Weekly archive · Nov 10 – Nov 16, 2025

    CISA Pushes Cisco ASA and Firepower Patch Verification After Compliance Gaps

  32. Weekly archive · Nov 3 – Nov 9, 2025

    Cisco Patches Critical UCCX Authentication Bypass and Root RCE Flaws

  33. Weekly archive · Sep 29 – Oct 5, 2025

    CISA Adds Five Vulnerabilities to KEV Catalog

  34. Weekly archive · Sep 29 – Oct 5, 2025

    Tens of Thousands of Cisco ASA Devices Remained Unpatched

  35. Weekly archive · Sep 22 – Sep 28, 2025

    CISA Orders Emergency Mitigation of Cisco ASA and Firepower Zero-Days

  36. Weekly archive · Jul 28 – Aug 3, 2025

    Cisco ISE injection flaws and an old PaperCut bug go on the KEV list

  37. Weekly archive · Jul 21 – Jul 27, 2025

    Cisco Confirms Exploitation of Maximum-Severity ISE Flaws

  38. Weekly archive · Mar 31 – Apr 6, 2025

    Cisco Smart Licensing Utility Flaw Added to KEV Catalog

  39. Weekly archive · Mar 3 – Mar 9, 2025

    CISA Flags Five Actively Exploited Vulnerabilities, Including Cisco Routers

  40. Weekly archive · Dec 2 – Dec 8, 2024

    Cisco Patches NX-OS Image Verification Bypass Flaw

  41. Weekly archive · Oct 21 – Oct 27, 2024

    Cisco Ships Semiannual ASA/FMC/FTD Bundle as CISA Flags Exploited DoS Flaw

  42. Weekly archive · Sep 23 – Sep 29, 2024

    Cisco Ships Semiannual IOS and IOS XE Security Bundle

  43. Weekly archive · Aug 5 – Aug 11, 2024

    CISA Urges Cisco Device Hardening After Smart Install Abuse

  44. Weekly archive · Jul 1 – Jul 7, 2024

    CISA Adds Cisco NX-OS Flaw to Known Exploited Vulnerabilities Catalog

  45. Weekly archive · Jun 10 – Jun 16, 2024

    Cisco and Schneider Electric Name New Security Leaders

  46. Weekly archive · May 20 – May 26, 2024

    Cisco Issues Bundled Security Advisory for ASA, FMC, and FTD Software

  47. Weekly archive · Apr 22 – Apr 28, 2024

    Cisco patches ArcaneDoor zero-days in ASA and Firepower firewalls

  48. Weekly archive · Mar 25 – Mar 31, 2024

    Cisco bundles IOS and IOS XE security patches

  49. Weekly archive · Feb 26 – Mar 3, 2024

    Cisco Issues NX-OS Advisories Covering MPLS and BGP Denial-of-Service Flaws

  50. Weekly archive · Feb 12 – Feb 18, 2024

    CISA Adds Cisco ASA/FTD and Exchange Flaws to Known Exploited Vulnerabilities Catalog

  51. Weekly archive · Feb 5 – Feb 11, 2024

    Cisco Patches Vulnerabilities in Expressway Series Collaboration Gateways

  52. Weekly archive · Jan 8 – Jan 14, 2024

    Cisco patches critical Unity Connection file-upload flaw

  53. Weekly archive · Oct 30 – Nov 5, 2023

    CISA Updates Guidance on Exploited Cisco IOS XE Web UI Bugs

  54. Weekly archive · Oct 23 – Oct 29, 2023

    CISA Adds Cisco IOS XE Flaw to KEV Catalog

  55. Weekly archive · Oct 23 – Oct 29, 2023

    CISA Updates Cisco IOS XE Patch Guidance Again

  56. Weekly archive · Oct 16 – Oct 22, 2023

    Cisco IOS XE Web UI zero-day exploited to install implants

  57. Weekly archive · Oct 16 – Oct 22, 2023

    CISA issues guidance on second Cisco IOS XE Web UI vulnerability

  58. Weekly archive · Oct 16 – Oct 22, 2023

    CISA adds Citrix NetScaler and Cisco IOS XE bugs to KEV catalog

  59. Weekly archive · Oct 9 – Oct 15, 2023

    CISA Adds Five Actively Exploited Flaws to KEV Catalog

  60. Weekly archive · Sep 11 – Sep 17, 2023

    CISA Adds Chrome, Cisco, and Android Flaws to KEV Catalog

  61. Weekly archive · Sep 4 – Sep 10, 2023

    Cisco Issues Advisories for BroadWorks and Identity Services Engine Flaws

  62. Weekly archive · May 15 – May 21, 2023

    Cisco Advisory Flags Critical Flaws in Small Business Switches

  63. Weekly archive · Apr 17 – Apr 23, 2023

    Joint Advisory Details APT28 Exploitation of Cisco Routers via CVE-2017-6742

  64. Weekly archive · Apr 3 – Apr 9, 2023

    Cisco Issues Advisories for Remote Code Execution and Command Injection Flaws

  65. Weekly archive · Mar 20 – Mar 26, 2023

    Cisco Publishes Nine Security Advisories for IOS XE and Related Products

  66. Weekly archive · Mar 6 – Mar 12, 2023

    Cisco Discloses IOS XR Denial-of-Service Flaw

  67. Weekly archive · Feb 20 – Feb 26, 2023

    Cisco Discloses Advisories Spanning ACI, Nexus, and ClamAV

  68. Weekly archive · Feb 13 – Feb 19, 2023

    Cisco Issues Advisories Covering ClamAV, Nexus Dashboard and Email Security Products

  69. Weekly archive · Jan 30 – Feb 5, 2023

    Cisco Patches Persistent Code-Injection Flaw in Industrial Gear

  70. Weekly archive · Nov 14 – Nov 20, 2022

    Cisco Patched Identity Services Engine Flaws Allowing Authorization Bypass

  71. Weekly archive · Nov 7 – Nov 13, 2022

    Cisco patches multiple products including ASA and Secure Firewall 3100

  72. Weekly archive · Oct 31 – Nov 6, 2022

    CISA Flags Cisco Security Updates for Multiple Products

  73. Weekly archive · Oct 17 – Oct 23, 2022

    Cisco Patches Identity Services Engine Vulnerabilities

  74. Weekly archive · Oct 3 – Oct 9, 2022

    Cisco Patches Multiple Products After CISA Alert

  75. Weekly archive · Sep 5 – Sep 11, 2022

    Cisco Patches SD-WAN vManage and NVIDIA DPDK Flaws

  76. Weekly archive · Aug 22 – Aug 28, 2022

    Cisco Patched Multiple Products Against Remote Takeover Flaws

  77. Weekly archive · Aug 15 – Aug 21, 2022

    Cisco Patches Privilege Escalation Flaw in Secure Web Appliance

  78. Weekly archive · Aug 8 – Aug 14, 2022

    Cisco Confirms Corporate Network Breach Tied to Yanluowang-Linked Actor

  79. Weekly archive · Aug 8 – Aug 14, 2022

    Cisco Fixes RSA Private Key Leak in ASA and Firepower Software

  80. Weekly archive · Jul 18 – Jul 24, 2022

    Cisco Issues Security Updates Across Multiple Products

  81. Weekly archive · Jul 4 – Jul 10, 2022

    Cisco Issues Updates for Expressway, TelePresence VCS, and Smart Software Manager

  82. Weekly archive · Jun 13 – Jun 19, 2022

    Cisco Patches Email Security Appliance and Small Business Router Flaws

  83. Weekly archive · May 2 – May 8, 2022

    Cisco Patches Multiple Flaws in Enterprise NFV Infrastructure Software

  84. Weekly archive · Apr 25 – May 1, 2022

    Cisco Issues Security Updates Across Multiple Products

  85. Weekly archive · Apr 18 – Apr 24, 2022

    Cisco patches multiple products against takeover vulnerabilities

  86. Weekly archive · Feb 28 – Mar 6, 2022

    Cisco Patched Flaws in Expressway, Ultra Cloud Core and ISE

  87. Weekly archive · Jan 31 – Feb 6, 2022

    Cisco Patches Small Business RV Series Router Vulnerabilities

  88. Weekly archive · Jan 10 – Jan 16, 2022

    Cisco Patches Privilege Escalation Flaw in Contact Center Management Tools

Sources

  1. Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
  2. Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
  3. CISO Tribune, vendor directory record for Cisco, published November 8, 2026