Cisco

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Cisco product.

RSS Feeds for Cisco security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Cisco products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Cisco Sorted by Most Security Vulnerabilities since 2018

Cisco IOS XE335 vulnerabilities
Newer version of Cisco IOS Operating System built on linux.

Cisco Internetwork Operating System (IOS)220 vulnerabilities
Cisco Internetwork Operating System (IOS) is a family of network operating systems used on many Cisco Systems routers and current Cisco network switches.

Cisco Adaptive Security Appliance Software207 vulnerabilities

Cisco Secure Firewall Management Center203 vulnerabilities

Cisco Firepower Threat Defense194 vulnerabilities

Cisco Adaptive Security Appliance148 vulnerabilities

Cisco Firepower Management Center142 vulnerabilities

Cisco Identity Services Engine142 vulnerabilities

Cisco Small Business Rv Series Router Firmware137 vulnerabilities

Cisco Identity Services Engine Software104 vulnerabilities

Cisco Nx Os104 vulnerabilities

Cisco Catalyst Sd Wan Manager100 vulnerabilities

Cisco Unified Communications Manager94 vulnerabilities

Cisco Sd Wan Vmanage77 vulnerabilities

Cisco Ios Xr64 vulnerabilities

Cisco Data Center Network Manager64 vulnerabilities

Cisco Sd Wan63 vulnerabilities

Cisco Unified Computing System61 vulnerabilities

Cisco Webex Meetings60 vulnerabilities

Cisco Prime Infrastructure54 vulnerabilities

Cisco Firepower Threat Defense Software49 vulnerabilities

Cisco Unity Connection48 vulnerabilities

Cisco Unified Contact Center Express45 vulnerabilities

Cisco Unified Communications Manager Im Presence Service44 vulnerabilities

Cisco Telepresence Video Communication Server43 vulnerabilities

Cisco Evolved Programmable Network Manager38 vulnerabilities

Cisco Enterprise Nfv Infrastructure Software36 vulnerabilities

Cisco Wireless Lan Controller Software33 vulnerabilities

Cisco Email Security Appliance33 vulnerabilities

Cisco Roomos33 vulnerabilities

Cisco Application Policy Infrastructure Controller32 vulnerabilities

Cisco Nexus Dashboard31 vulnerabilities

Cisco Anyconnect Secure Mobility Client29 vulnerabilities

Cisco Telepresence Collaboration Endpoint28 vulnerabilities

Cisco Dna Center27 vulnerabilities

Cisco Secure Endpoint27 vulnerabilities

Cisco Asyncos25 vulnerabilities

Cisco Catalyst Center25 vulnerabilities

Cisco Web Security Appliance25 vulnerabilities

Cisco Jabber23 vulnerabilities

Cisco Cyber Vision20 vulnerabilities

Cisco Unified Intelligence Center19 vulnerabilities

Cisco Sd Wan Manager19 vulnerabilities

Cisco Common Services Platform Collector19 vulnerabilities

Cisco Aironet Access Point Software18 vulnerabilities

Cisco Smart Software Manager On Prem18 vulnerabilities

Cisco Finesse18 vulnerabilities

Cisco Emergency Responder18 vulnerabilities

Cisco Iot Field Network Director16 vulnerabilities

Cisco Prime Collaboration Provisioning16 vulnerabilities

Cisco Expressway16 vulnerabilities

Cisco Webex Business Suite15 vulnerabilities

Cisco Webex Teams15 vulnerabilities

Cisco Integrated Management Controller14 vulnerabilities

Cisco Clamav14 vulnerabilities

Cisco Enterprise Chat And Email14 vulnerabilities

Cisco Hyperflex Hx Data Platform14 vulnerabilities

Cisco Nexus Dashboard Fabric Controller13 vulnerabilities

Cisco Industrial Network Director12 vulnerabilities

Cisco Network Services Orchestrator12 vulnerabilities

Cisco Unified Contact Center Enterprise12 vulnerabilities

Cisco Broadworks11 vulnerabilities

Cisco Unified Computing System Director11 vulnerabilities

Cisco Packaged Contact Center Enterprise11 vulnerabilities

Cisco Ios Xe Sd Wan10 vulnerabilities

Cisco Secure Client10 vulnerabilities

Cisco Content Security Management Appliance10 vulnerabilities

Cisco Telepresence Management Suite9 vulnerabilities

Cisco Secure Network Analytics8 vulnerabilities

Cisco Secure Email And Web Manager8 vulnerabilities

Cisco Secure Endpoint Private Cloud8 vulnerabilities

Cisco Prime Collaboration Assurance8 vulnerabilities

Cisco Intersight Virtual Appliance7 vulnerabilities

Cisco Identity Services Engine Passive Identity Connector7 vulnerabilities

Recent Cisco Security Advisories

Advisory	Title	Published
2026-11-04	Cisco Identity Services Engine Authorization Bypass Vulnerability	November 4, 2026
2026-11-04	Cisco UCS Central Software Remote Code Execution Vulnerability	November 4, 2026
2026-11-04	Cisco Unified Communications Manager Cross-Site Scripting Vulnerability	November 4, 2026
2026-10-28	Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability	October 28, 2026
2026-10-28	Cisco Advance Notification for Publication of November 4, 2026, Security Advisories	October 28, 2026
2026-10-27	Vulnerabilities in node.js Affecting Cisco Products: October 2026	October 27, 2026
2026-10-23	Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities	October 23, 2026
2026-10-21	Vulnerabilities in PHP Affecting Cisco Products: October 2026	October 21, 2026
2026-10-21	Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability	October 21, 2026
2026-10-21	Multiple Cisco Products Snort 3 Security Hardening Release: October 2026	October 21, 2026

Known Exploited Cisco Vulnerabilities

The following Cisco vulnerabilities have recently been marked by CISA as Known to be Exploited by threat actors.

Title	Description	Added
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Poin	Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. CVE-2026-76418	October 29, 2026
Cisco Secure Email Gateway Relative Path Traversal Vulnerability	Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. CVE-2026-76519	October 14, 2026
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability	Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request. CVE-2026-76504	September 30, 2026
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability	Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface. CVE-2026-76460	September 16, 2026
Cisco Secure Email Gateway SQL Injection Vulnerability	Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. CVE-2026-76461	September 14, 2026
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerabil	Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. CVE-2026-20079 Exploit Probability: 88.2%	September 9, 2026
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Hea	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. CVE-2026-20349 Exploit Probability: 1.0%	August 11, 2026
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability	Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. CVE-2026-20316 Exploit Probability: 35.1%	July 29, 2026
Cisco IOS Cross-Site Request Forgery Vulnerability	Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. CVE-2008-4128 Exploit Probability: 33.9%	July 13, 2026
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability	Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an unauthenticated, remote attacker to write files to the underlying operating system that could be used later to elevate to root. CVE-2026-20230 Exploit Probability: 88.2%	June 25, 2026
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability	Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system. CVE-2026-20262 Exploit Probability: 28.2%	June 15, 2026
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability	Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerability could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system. CVE-2026-20245 Exploit Probability: 25.3%	June 9, 2026
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability	Cisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability that allows an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. CVE-2026-20182 Exploit Probability: 91.5%	May 14, 2026
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerabili	Cisco Catalyst SD-WAN Manager contains an exposure of sensitive information to an unauthorized actor vulnerability that could allow remote attackers to view sensitive information on affected systems. CVE-2026-20133 Exploit Probability: 31.8%	April 20, 2026
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability	Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges. CVE-2026-20122 Exploit Probability: 25.0%	April 20, 2026
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability	Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacker to gain DCA user privileges by accessing a credential file for the DCA user on the filesystem as a low-privileged user. CVE-2026-20128 Exploit Probability: 7.8%	April 20, 2026
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewa	Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. CVE-2026-20131 Exploit Probability: 42.7%	March 19, 2026
Cisco SD-WAN Path Traversal Vulnerability	Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. CVE-2022-20775 Exploit Probability: 12.0%	February 25, 2026
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability	Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, contain an authentication bypass vulnerability could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affec CVE-2026-20127 Exploit Probability: 88.5%	February 25, 2026
Cisco Unified Communications Products Code Injection Vulnerability	Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance contain a code injection vulnerability that could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. CVE-2026-20045 Exploit Probability: 4.5%	January 21, 2026

Of the known exploited vulnerabilities above, 4 are in the top 1%, or the 99th percentile of the EPSS exploit probability rankings. 8 known exploited Cisco vulnerabilities are in the top 5% (95th percentile or greater) of the EPSS exploit probability rankings.

Top 10 Riskiest Cisco Vulnerabilities

Based on the current exploit probability, these Cisco vulnerabilities are on CISA's Known Exploited vulnerabilities list (KEV) and are ranked by the current EPSS exploit probability.

Rank	CVE	EPSS	Vulnerability
1	CVE-2021-1498	100.0%	Cisco HyperFlex HX Command Injection Vulnerabilities
2	CVE-2020-3452	100.0%	Cisco Adaptive Security Appliance and Cisco Fire Power Threat Defense directory traversal sensitive
3	CVE-2021-1497	99.9%	Cisco HyperFlex HX Command Injection Vulnerabilities
4	CVE-2018-0296	99.9%	Cisco Adaptive Security Appliance Firepower Threat Defense Denial-of-Service/Directory Traversal vul
5	CVE-2019-1653	99.9%	Cisco RV320 and RV325 Routers Improper Access Control Vulnerability (COVID-19-CTI list)
6	CVE-2023-20198	99.6%	Cisco IOS XE Web UI Privilege Escalation Vulnerability
7	CVE-2018-0171	99.5%	Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
8	CVE-2017-3881	99.0%	Cisco IOS and IOS XE Remote Code Execution Vulnerability
9	CVE-2025-20281	97.6%	Cisco Identity Services Engine Injection Vulnerability
10	CVE-2024-20439	97.1%	Cisco Smart Licensing Utility Static Credential Vulnerability

By the Year

In 2026 there have been 402 vulnerabilities in Cisco with an average score of 7.3 out of ten. Last year, in 2025 Cisco had 218 security vulnerabilities published. That is, 184 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.60.

Year	Vulnerabilities	Average Score
2026	402	7.29
2025	218	6.69
2024	366	6.76
2023	271	6.83
2022	323	6.91
2021	620	6.84
2020	354	6.85
2019	524	6.78
2018	373	7.51

It may take a day or so for new Cisco vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Cisco Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-76506	Nov 04, 2026	CVE-2026-76506: RCE via Input Validation in Cisco UCS Central Web A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input in an HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected endpoint on an affected device. A successful exploit could allow the attacker to execute arbitrary commands, write arbitrary files to the filesystem, and obtain sensitive information. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. Cisco has released software updates that address this vulnerability There are no workarounds that address this vulnerability.	Unified Computing System Central Software
CVE-2026-76419	Nov 04, 2026	Cisco Unified CM XSS in Web UI A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.	Unified Communications Manager
CVE-2026-20241	Nov 04, 2026	Cisco ISE/ISE-PIC: Unauth Auth Bypass Grants Endpoint Cert A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to bypass authorization to obtain an endpoint certificate.	Identity Services Engine Software
CVE-2026-76418	Oct 28, 2026	Cisco ASA/FTD SSL VPN DoS via Unauth Reload A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.	Adaptive Security Appliance
CVE-2026-106069	Oct 23, 2026	Node.js TLS hostname verification leading-zero IP bug (pre-26/24/22) A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to, when the host is a non-canonical IPv4 literal with a leading zero, such as `0127.0.0.1`. `tls.checkServerIdentity()` normalizes the host following the WHATWG URL rules, which read a leading-zero octet as octal (`0127.0.0.1` becomes `87.0.0.1`), while the connection is made through the operating system resolver, which on some platforms such as macOS reads it as decimal (`127.0.0.1`). A server at the connected address can then be authenticated with a certificate issued for another IP address. This vulnerability affects Node.js 26.x, 24.x, and 22.x.
CVE-2026-105483	Oct 23, 2026	Node.js 24.x/26.x TLS hostname verification bypass (tls.checkServerIdentity) A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth digits (`.0.0.1`). `tls.checkServerIdentity()` did not recognize such hosts as IP addresses, even though they normalize and resolve to a regular IPv4 address, and matched them against the certificate DNS names and Common Name instead. A certificate containing `DNS:127.0.0.1` or `DNS:.0.0.1` could therefore be accepted for an IP endpoint it was not issued for. This is a regression introduced after the fix for CVE-2026-48618. This vulnerability affects Node.js 26.x* and 24.x.
CVE-2026-105482	Oct 23, 2026	Node.js DNS NUL-byte Truncation via dns.resolve* (CVE-2026-105482) A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve() functions and dns.reverse(). This is an incomplete fix of CVE-2026-48930, which only covered dns.lookup() and the net/tls host options. Because the name is passed to c-ares as a C string, resolving attacker.example\0.trusted.example queries attacker.example and returns its records without any error. Applications that validate a hostname, for example against a domain allowlist, and then resolve it with dns.resolve() can act on records for a different name than the one they validated. This vulnerability affects Node.js 26.x, 24.x, and 22.x.
CVE-2026-111497	Oct 22, 2026	node2shell Brotli Decoder Buffer Overflow (1.0.3-1.2.0) A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
CVE-2026-76497	Oct 21, 2026	Cisco Expressway Series CVE-2026-76497: Insecure Temp Files (CWE-377) As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76497 are related to issues concerning insecure temporary files that are grouped under the Common Weakness Enumeration (CWE) Base CWE-377.	Telepresence Video Communication Server
CVE-2026-76524	Oct 21, 2026	Local Auth Bypass in Snort 3 Control Channel Allows Command Exec A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to the Snort control channel socket. An attacker could exploit this vulnerability by connecting to the Snort 3 control channel socket as a local user. A successful exploit could allow the attacker to execute arbitrary commands as well as read and write Snort 3 process memory.
CVE-2026-76505	Oct 21, 2026	Cisco IOS XR NP Reset DoS via IPv4 Packet Processing A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network processor (NP) errors, resulting in a line card reset or shutdown and a denial of service (DoS) condition.  This vulnerability is due to the incorrect handling of crafted IPv4 packets that are received on an affected line card interface and processed as for-us traffic. The issue can result in an NP reset, causing traffic loss on the affected line card while it recovers. Under repeated reset conditions, the network processor may enter a persistent shutdown state, in which case an explicit line card reload may be required to restore traffic. The vulnerability is within the IPv4 packet-processing path. Transit IPv4 traffic does not trigger this issue and IPv6 traffic cannot trigger it.	Internetwork Operating System (IOS)
CVE-2026-76496	Oct 21, 2026	Improper Link Resolution (CWE-59) in Cisco Expressway Series As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76496 are related to issues concerning improper link resolutions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-59.	Telepresence Video Communication Server
CVE-2026-76495	Oct 21, 2026	Cisco Expressway Hardening for Incorrect Perm Assign (CWE-732) As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76495 are related to issues concerning incorrect permission assignments that are grouped under the Common Weakness Enumeration (CWE) Variant CWE-732.	Telepresence Video Communication Server
CVE-2026-76494	Oct 21, 2026	Cisco Exprwy Series Software: CWE94 Code Injection Vulnerability As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76494 are related to issues concerning code injections that are grouped under the Common Weakness Enumeration (CWE) Base CWE-94.	Telepresence Video Communication Server
CVE-2026-76493	Oct 21, 2026	Cisco Expressway CWE-248 uncaught exception vulnerability As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76493 are related to issues concerning uncaught exceptions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-248.	Telepresence Video Communication Server
CVE-2026-76490	Oct 21, 2026	Cisco Expressway OOB Write Vulnerability (CVE-2026-76490) As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76490 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787.	Telepresence Video Communication Server
CVE-2026-76489	Oct 21, 2026	Snort 3 Engine Reboot DoS via Unchecked Memory Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when Snort 3 processes files, which could cause unreleased memory. An attacker could exploit this vulnerability by sending a large number of files to be processed. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.
CVE-2026-76492	Oct 21, 2026	CWE-476 Null Pointer in Cisco Expressway As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76492 are related to issues concerning null pointers that are grouped under the Common Weakness Enumeration (CWE) Base CWE-476.	Telepresence Video Communication Server
CVE-2026-76491	Oct 21, 2026	Cisco Expressway Reachable Assertion CVE-2026-76491 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76491 are related to issues concerning reachable assertions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-617.	Telepresence Video Communication Server
CVE-2026-76481	Oct 21, 2026	Cisco Unified Communications Manager: Improper Exception Handling (CWE703) As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76481 are related to issues concerning improper handling of exceptional conditions that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-703.	Emergency Responder Unified Communications Manager Unified Communications Manager Im Presence Service And others...
CVE-2026-76487	Oct 21, 2026	Cisco Unified CM Access Control Bypass via Invalid HTTP Request A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access parts of the network that are beyond the scope of their intended access.	Unified Communications Manager
CVE-2026-76479	Oct 21, 2026	Cisco Unified Communications Manager Directory Traversal (CVE-2026-76479) As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76479 are related to issues concerning improper limitation of a pathname to a restricted directory that are grouped under the Common Weakness Enumeration (CWE) Base CWE-22.	Emergency Responder Unified Communications Manager Unified Communications Manager Im Presence Service And others...
CVE-2026-76478	Oct 21, 2026	Cisco Unified CM Improper Access Control Vulnerability (CWE-284) As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76478 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.	Emergency Responder Unified Communications Manager Unified Communications Manager Im Presence Service And others...
CVE-2026-76476	Oct 21, 2026	Cisco Unified Communications Manager Input Validation Flaw (CWE-20) As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76476 are related to issues concerning improper input validation that are grouped under the Common Weakness Enumeration (CWE) Class CWE-20.	Emergency Responder Unified Communications Manager Unified Communications Manager Im Presence Service And others...
CVE-2026-76477	Oct 21, 2026	Cisco Unified CM SQLi (CWE-89) CVE-2026-76477 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76477 are related to issues concerning improper neutralization of special elements used in an SQL command that are grouped under the Common Weakness Enumeration (CWE) Base CWE-89.	Emergency Responder Unified Communications Manager Unified Communications Manager Im Presence Service And others...
CVE-2026-76475	Oct 21, 2026	Cisco Unified CM XSS Vulnerability (CWE-79) As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76475 are related to issues concerning improper neutralization of input during web page generation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-79.	Emergency Responder Unified Communications Manager Unified Communications Manager Im Presence Service And others...
CVE-2026-76474	Oct 21, 2026	Cisco Unified Communications Manager Improper Auth Vulnerability CVE-2026-76474 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76474 are related to issues concerning improper authentication that are grouped under the Common Weakness Enumeration (CWE) Class CWE-287.	Emergency Responder Unified Communications Manager Unified Communications Manager Im Presence Service And others...
CVE-2026-76445	Oct 21, 2026	Cisco Snort 3 Detection Engine DoS via GTP Header Loop Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition. The vulnerability is due to a flaw in logic handling when General Packet Radio Service (GPRS) Tunneling Protocol (GTP) extension headers are processed within the codec. An attacker could exploit this vulnerability by sending a crafted, fragmented UDP datagram that contains these headers to the Snort 3 Detection Engine of an affected device. A successful exploit could allow the attacker to cause the detection engine to enter an infinite loop, resulting in a DoS condition.
CVE-2026-76473	Oct 21, 2026	Cisco Unified CM CVE-2026-76473 Improper Resource Control (CWE-74) As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76473 are related to issues concerning improper neutralization of special elements in output used by a downstream component that are grouped under the Common Weakness Enumeration (CWE) Class CWE-74.	Emergency Responder Unified Communications Manager Unified Communications Manager Im Presence Service And others...
CVE-2026-76466	Oct 21, 2026	Cisco Expressway remote root exec via DB RPC CVE-2026-76466 A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due to the use of persistent cookies. Additionally, there is insufficient validation of client certificates when the TLS Verify Mode is set to Enabled for clustering, which means that client certificates are not validated. An attacker with possession of the cookies could exploit this vulnerability by connecting to the database service and invoking specific remote procedure call (RPC) commands. A successful exploit could allow the attacker to execute arbitrary commands as root on the underlying operating system of an affected device. Note: Cisco Expressway Series refers to Cisco Expressway Core (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.	Telepresence Video Communication Server
CVE-2026-76462	Oct 21, 2026	Elevated Privileges via IPC in Cisco Secure Client's Firewall Posture Module A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a series of crafted IPC messages to a local socket. A successful exploit could allow the attacker to perform limited file write operations on the filesystem with SYSTEM or root privileges. Although this vulnerability affects the Secure Firewall Posture module in Cisco Secure Client on Windows, macOS, and Linux operating systems, this vulnerability could be used to obtain full root privileges on macOS and Linux. For that reason Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates.	Secure Client
CVE-2026-76435	Oct 21, 2026	Unauthenticated HTTP access in Cisco Expressway via MRA permits info disclosure A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to insufficient authorization checks of HTTP requests during Mobile and Remote Access (MRA) provisioning. An attacker could exploit this vulnerability by submitting a crafted URL request to an affected device. A successful exploit could allow the attacker to access sensitive information that they would otherwise not have authorization to access. Note: Cisco Expressway Series refers to Cisco Expressway Core (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.	Telepresence Video Communication Server
CVE-2026-20356	Oct 21, 2026	Cisco Snort 3 Uncontrolled Resource Consumption (CWE-400) As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20356 are related to issues concerning uncontrolled resource consumption that are grouped under the Common Weakness Enumeration (CWE) Base CWE-400.	Cyber Vision
CVE-2026-20236	Oct 21, 2026	Cisco Snort 3 CVE-2026-20236: Incorrect Calculation (CWE-682) As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20236 are related to issues concerning incorrect calculation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-682.	Cyber Vision
CVE-2026-20221	Oct 21, 2026	Cisco Snort 3 GRE Tunnel Decapsulation DoS via Nested GRE Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected restart of the Snort 3 Detection Engine. This vulnerability is due to improper handling of nested GRE traffic. An attacker could exploit this vulnerability by sending a crafted GRE payload through an affected device. A successful exploit could allow the attacker to trigger an unexpected reload of the Snort 3 Detection Engine, resulting in either a bypass or denial of service (DoS) condition, depending on device configuration. For more information, see the section of this advisory. The Snort 3 Detection Engine will restart automatically. No manual intervention is required.	Cyber Vision
CVE-2026-20291	Oct 21, 2026	Privilege Escalation in Cisco Snort 3 (CVE-2026-20291) As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20291 are related to issues concerning improper privilege management that are grouped under the Common Weakness Enumeration (CWE) Base CWE-269.	Cyber Vision
CVE-2026-20197	Oct 21, 2026	Cisco Snort 3 Teredo Detection Engine DoS via Crafted Packet Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when Snort 3 parses Teredo packets. An attacker could exploit this vulnerability by sending a crafted Teredo packet to a targeted device to be parsed by Snort. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.
CVE-2026-20218	Oct 21, 2026	Cisco Snort 3 VBA Decompression Engine DoS via Stack Overflow A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition.   This vulnerability is due to improper range checking when Snort 3 decompresses VBA data, which is user controlled. An attacker could exploit this vulnerability by sending crafted VBA data to the Snort 3 Detection Engine of a targeted device. A successful exploit could allow the attacker to cause an overflow of stack data, which could result in a DoS condition.
CVE-2026-20179	Oct 21, 2026	Cisco Snort 3 Gre Det Engine DoS via Crafted Packet Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when Snort 3 parses GRE packets. An attacker could exploit this vulnerability by sending a crafted GRE packet to a targeted device to be parsed by Snort. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.
CVE-2026-20043	Oct 21, 2026	CVE-2026-20043: Out-of-Bounds Write in Cisco Snort 3 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20043 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787.	Cyber Vision
CVE-2026-20019	Oct 21, 2026	Cisco Snort 3 NetFlow Engine DoS via UDP Packet Parsing Error Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when Snort 3 parses UDP Netflow Protocol packets. An attacker could exploit this vulnerability by sending a single crafted Netflow packet through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.
CVE-2026-20011	Oct 21, 2026	DoS via Unvalidated SMTP MIME in Cisco Snort 3 Detection Engine Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed. An attacker could exploit this vulnerability by sending crafted SMTP packets through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when the Snort 3 Detection Engine unexpectedly restarts.
CVE-2026-109619	Oct 21, 2026	PHP2shell: PHP RCE via stale global state PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
CVE-2026-109618	Oct 21, 2026	PHP2shell: PHP RCE via OOM corruption Oct 2026 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2026-76519	Oct 14, 2026	Cisco Secure Email Gateway AMP Write-Anything Remote File Write A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.
CVE-2026-76472	Oct 07, 2026	CWE-74 XSS Vulnerability in Cisco IOS As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-76472 are related to issues with improper neutralization of special elements that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.
CVE-2026-76467	Oct 07, 2026	Improper Resource Control (CWE-664) in Cisco Networking Devices As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76467 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.
CVE-2026-76470	Oct 07, 2026	Cisco Network SW Calc Error (CWE-682) CVE-2026-76470 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76470 are related to incorrect calculation issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-682.
CVE-2026-76469	Oct 07, 2026	Cisco Networking Devices: CWE-691 Control Flow Management Flaw (CVE-2026-76469) As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76469 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-691.
CVE-2026-76468	Oct 07, 2026	Cisco IOS Improper Input Validation (CVE-2026-76468) As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76468 are related to improper input validation that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-20.