Uniqcli
Build a Quote
Live PSIRT feed

Cisco Security Advisories & Vulnerabilities

The latest Cisco security advisories, straight from the Cisco PSIRT openVuln feed, with severity, CVSS, CVEs, and affected products. Search by product or CVE. As an authorized Cisco partner, Uniqcli helps you confirm exposure and remediate, patch, or refresh.

81 Critical362 Highin the latest 500 advisories

Latest Cisco advisories

Most recent first, by severity. Search any product or CVE.

  • Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

    Critical · CVSS 9.1
    CVE-2026-20181, CVE-2026-20190Published Jun 17, 2026cisco-sa-ise-multi-G5WP8vv

    Affected: Cisco Identity Services Engine Software , Cisco ISE Passive Identity Connector

  • Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

    Critical · CVSS 8.6
    CVE-2026-20230Published Jun 3, 2026cisco-sa-cucm-ssrf-cXPnHcW

    Affected: Cisco Unified Communications Manager

  • Cisco Secure Workload Unauthorized API Access Vulnerability

    Critical · CVSS 10
    CVE-2026-20223Published May 20, 2026cisco-sa-csw-pnbsa-g8WEnuy

    Affected: Cisco Secure Workload

  • Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    Critical · CVSS 10
    CVE-2026-20182Published May 14, 2026cisco-sa-sdwan-rpa2-v69WY2SW

    Affected: Cisco Catalyst SD-WAN Manager , Cisco Catalyst SD-WAN Controller

  • Cisco Catalyst SD-WAN Manager Vulnerabilities

    Critical · CVSS 8.6
    CVE-2026-20209, CVE-2026-20210, CVE-2026-20224Published May 14, 2026cisco-sa-sdwan-mltvnps2-JxpWm7R

    Affected: Cisco Catalyst SD-WAN Manager

  • Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities

    Critical · CVSS 9.9
    CVE-2026-20147, CVE-2026-20148Published Apr 15, 2026cisco-sa-ise-rce-traversal-8bYndVrZ

    Affected: Cisco Identity Services Engine Software , Cisco ISE Passive Identity Connector

  • Cisco Webex Services Certificate Validation Vulnerability

    Critical · CVSS 9.8
    CVE-2026-20184Published Apr 15, 2026cisco-sa-webex-cui-cert-8jSZYhWL

    Affected: Cisco Webex Meetings

  • Cisco Identity Services Engine Remote Code Execution Vulnerabilities

    Critical · CVSS 9.9
    CVE-2026-20180, CVE-2026-20186Published Apr 15, 2026cisco-sa-ise-rce-4fverepv

    Affected: Cisco Identity Services Engine Software

  • Cisco Integrated Management Controller Authentication Bypass Vulnerability

    Critical · CVSS 9.8
    CVE-2026-20093Published Apr 1, 2026cisco-sa-cimc-auth-bypass-AgG2BxTn

    Affected: Cisco Unified Computing System (Standalone) , Cisco Unified Computing System E-Series Software (UCSE) , Cisco Enterprise NFV Infrastructure Software

  • Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability

    Critical · CVSS 9.8
    CVE-2026-20160Published Apr 1, 2026cisco-sa-ssm-cli-execution-cHUcWuNr

    Affected: Cisco Smart Software Manager On-Prem

  • Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability

    Critical · CVSS 10
    CVE-2026-20079Published Mar 4, 2026cisco-sa-onprem-fmc-authbypass-5JPp45V2

    Affected: Cisco Secure Firewall Management Center (FMC) 7.0.0, Cisco Secure Firewall Management Center (FMC) 7.0.0.1, Cisco Secure Firewall Management Center (FMC) 7.0.1, Cisco Secure Firewall Management Center (FMC) 7.0.1.1, Cisco Secure Firewall Management Center (FMC) 7.0.2, Cisco Secure Firewall Management Center (FMC) 7.0.2.1, and 66 more

  • Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability

    Critical · CVSS 10
    CVE-2026-20131Published Mar 4, 2026cisco-sa-fmc-rce-NKhnULJh

    Affected: Cisco Secure Firewall Management Center (FMC) 6.4.0.13, Cisco Secure Firewall Management Center (FMC) 6.4.0.14, Cisco Secure Firewall Management Center (FMC) 6.4.0.15, Cisco Secure Firewall Management Center (FMC) 6.4.0.16, Cisco Secure Firewall Management Center (FMC) 6.4.0.17, Cisco Secure Firewall Management Center (FMC) 6.4.0.18, and 65 more

  • Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    Critical · CVSS 10
    CVE-2026-20127Published Feb 25, 2026cisco-sa-sdwan-rpa-EHchtZk

    Affected: Cisco Catalyst SD-WAN Manager

  • Cisco Catalyst SD-WAN Vulnerabilities

    Critical · CVSS 9.8
    CVE-2026-20122, CVE-2026-20126, CVE-2026-20128, CVE-2026-20129 +1Published Feb 25, 2026cisco-sa-sdwan-authbp-qwCX8D4v

    Affected: Cisco Catalyst SD-WAN Manager

  • Cisco Unified Communications Products Remote Code Execution Vulnerability

    Critical · CVSS 8.2
    CVE-2026-20045Published Jan 21, 2026cisco-sa-voice-rce-mORhqY4b

    Affected: Cisco Unity Connection , Cisco Unified Communications Manager , Cisco Unified Communications Manager IM and Presence Service

  • Reports About Cyberattacks Against Cisco Secure Email Gateway And Cisco Secure Email and Web Manager

    Critical · CVSS 10
    CVE-2025-20393Published Dec 17, 2025cisco-sa-sma-attack-N9bf4

    Affected: Cisco Secure Email , Cisco Secure Email and Web Manager

  • Remote Code Execution Vulnerability in React and Next.js Frameworks: December 2025

    Critical · CVSS 10
    CVE-2025-55182Published Dec 4, 2025cisco-sa-react-flight-TYw32Ddb

    Affected: NA

  • Cisco Unified Contact Center Express Remote Code Execution Vulnerabilities

    Critical · CVSS 9.8
    CVE-2025-20354, CVE-2025-20358Published Nov 5, 2025cisco-sa-cc-unauth-rce-QeN8h7mQ

    Affected: Cisco Unified Contact Center Express

  • Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability

    Critical · CVSS 9.9
    CVE-2025-20333Published Sep 25, 2025cisco-sa-asaftd-webvpn-z5xP8EUB

    Affected: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.8.1, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.8.1.5, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.8.1.7, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.8.2, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.8.2.8, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.8.2.14, and 293 more

  • Cisco Secure Firewall Adaptive Security Appliance Software, Secure Firewall Threat Defense Software, IOS Software, IOS XE Software, and IOS XR Software Web Services Remote Code Execution Vulnerability

    Critical · CVSS 9
    CVE-2025-20363Published Sep 25, 2025cisco-sa-http-code-exec-WmfP3h3O

    Affected: Cisco IOS XR Software , Cisco IOS 12.2(15)B, Cisco IOS 12.2(16)B1, Cisco IOS 12.2(16)B3, Cisco IOS 12.2(16)B2, Cisco IOS 12.2(15)B1, and 3236 more

  • Cisco Secure Firewall Management Center Software RADIUS Remote Code Execution Vulnerability

    Critical · CVSS 10
    CVE-2025-20265Published Aug 14, 2025cisco-sa-fmc-radius-rce-TNBKf79

    Affected: Cisco Firepower Management Center 7.0.7, Cisco Firepower Management Center 7.7.0

  • Cisco Unified Communications Manager Static SSH Credentials Vulnerability

    Critical · CVSS 10
    CVE-2025-20309Published Jul 2, 2025cisco-sa-cucm-ssh-m4UBdpE7

    Affected: Cisco Unified Communications Manager

  • Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities

    Critical · CVSS 10
    CVE-2025-20281, CVE-2025-20282, CVE-2025-20337Published Jun 25, 2025cisco-sa-ise-unauth-rce-ZAd2GnJ6

    Affected: Cisco Identity Services Engine Software , Cisco ISE Passive Identity Connector

  • Cisco Identity Services Engine on Cloud Platforms Static Credential Vulnerability

    Critical · CVSS 9.9
    CVE-2025-20286Published Jun 4, 2025cisco-sa-ise-aws-static-cred-FPMjUcm7

    Affected: Cisco Identity Services Engine Software

  • Cisco IOS XE Wireless Controller Software Arbitrary File Upload Vulnerability

    Critical · CVSS 10
    CVE-2025-20188Published May 7, 2025cisco-sa-wlc-file-uplpd-rHZG9UfC

    Affected: Cisco IOS XE Software 17.11.1, Cisco IOS XE Software 17.12.1, Cisco IOS XE Software 17.12.2, Cisco IOS XE Software 17.12.3, Cisco IOS XE Software 17.13.1, Cisco IOS XE Software 17.14.1, and 1 more

  • Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang/OTP SSH Server: April 2025

    Critical · CVSS 10
    CVE-2025-32433Published Apr 22, 2025cisco-sa-erlang-otp-ssh-xyZZy

    Affected: Cisco Small Business RV Series Router Firmware , Cisco Secure Web Appliance , Cisco ASR 5000 Series Software , Cisco Network Services Orchestrator , Cisco Enterprise NFV Infrastructure Software , Cisco Cloud Native Broadband Router , and 9 more

  • Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities

    Critical · CVSS 9.9
    CVE-2025-20124, CVE-2025-20125Published Feb 5, 2025cisco-sa-ise-multivuls-FTW9AOXF

    Affected: Cisco Identity Services Engine Software , Cisco ISE Passive Identity Connector

  • Cisco Meeting Management REST API Privilege Escalation Vulnerability

    Critical · CVSS 9.9
    CVE-2025-20156Published Jan 22, 2025cisco-sa-cmm-privesc-uy2Vf8pc

    Affected: Cisco Meeting Management

  • Cisco Unified Industrial Wireless Software for Ultra-Reliable Wireless Backhaul Access Point Command Injection Vulnerability

    Critical · CVSS 10
    CVE-2024-20418Published Nov 6, 2024cisco-sa-backhaul-ap-cmdinj-R7E28Ecs

    Affected: Cisco Aironet Access Point Software (IOS XE Controller)

  • Cisco Secure Firewall Management Center Software Command Injection Vulnerability

    Critical · CVSS 9.9
    CVE-2024-20424Published Oct 23, 2024cisco-sa-fmc-cmd-inj-v3AWDqN7

    Affected: Cisco Secure Firewall Management Center (FMC) 6.2.3, Cisco Secure Firewall Management Center (FMC) 6.2.3.1, Cisco Secure Firewall Management Center (FMC) 6.2.3.2, Cisco Secure Firewall Management Center (FMC) 6.2.3.3, Cisco Secure Firewall Management Center (FMC) 6.2.3.4, Cisco Secure Firewall Management Center (FMC) 6.2.3.5, and 82 more

  • Cisco Firepower Threat Defense Software for Firepower 1000, 2100, 3100, and 4200 Series Static Credential Vulnerability

    Critical · CVSS 9.3
    CVE-2024-20412Published Oct 23, 2024cisco-sa-ftd-statcred-dFC8tXT5

    Affected: Cisco Firepower Threat Defense Software 7.1.0, Cisco Firepower Threat Defense Software 7.1.0.1, Cisco Firepower Threat Defense Software 7.1.0.2, Cisco Firepower Threat Defense Software 7.1.0.3, Cisco Firepower Threat Defense Software 7.2.0, Cisco Firepower Threat Defense Software 7.2.0.1, and 17 more

  • Cisco Adaptive Security Appliance Software SSH Remote Command Injection Vulnerability

    Critical · CVSS 9.9
    CVE-2024-20329Published Oct 23, 2024cisco-sa-asa-ssh-rce-gRAuPEUF

    Affected: Cisco Adaptive Security Appliance (ASA) Software 9.17.1, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.7, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.9, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.10, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.11, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.13, and 21 more

  • Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability

    Critical · CVSS 9.9
    CVE-2024-20432Published Oct 2, 2024cisco-sa-ndfc-cmdinj-UvYZrKfr

    Affected: Cisco Data Center Network Manager

  • Cisco Smart Licensing Utility Vulnerabilities

    Critical · CVSS 9.8
    CVE-2024-20439, CVE-2024-20440Published Sep 4, 2024cisco-sa-cslu-7gHMzWmw

    Affected: Cisco Smart License Utility

  • Cisco Small Business SPA300 Series and SPA500 Series IP Phones Web UI Vulnerabilities

    Critical · CVSS 9.8
    CVE-2024-20450, CVE-2024-20451, CVE-2024-20452, CVE-2024-20453 +1Published Aug 7, 2024cisco-sa-spa-http-vulns-RJZmX2Xz

    Affected: Cisco Small Business IP Phones

  • Cisco Smart Software Manager On-Prem Password Change Vulnerability

    Critical · CVSS 10
    CVE-2024-20419Published Jul 17, 2024cisco-sa-cssm-auth-sLw3uhUy

    Affected: Cisco Smart Software Manager On-Prem

  • Cisco Secure Email Gateway Arbitrary File Write Vulnerability

    Critical · CVSS 9.8
    CVE-2024-20401Published Jul 17, 2024cisco-sa-esa-afw-bGG2UsjH

    Affected: Cisco Secure Email

  • Cisco Expressway Series Cross-Site Request Forgery Vulnerabilities

    Critical · CVSS 9.6
    CVE-2024-20252, CVE-2024-20254, CVE-2024-20255Published Feb 7, 2024cisco-sa-expressway-csrf-KnnZDMj3

    Affected: Cisco TelePresence Video Communication Server (VCS) Expressway

  • Cisco Unified Communications Products Remote Code Execution Vulnerability

    Critical · CVSS 9.9
    CVE-2024-20253Published Jan 24, 2024cisco-sa-cucm-rce-bWNzQcUm

    Affected: Cisco Unified Contact Center Enterprise , Cisco Unity Connection , Cisco Unified Communications Manager , Cisco Unified Contact Center Express , Cisco Unified Communications Manager IM and Presence Service , Cisco Virtualized Voice Browser , and 2 more

  • Cisco Unity Connection Unauthenticated Arbitrary File Upload Vulnerability

    Critical · CVSS 7.3
    CVE-2024-20272Published Jan 10, 2024cisco-sa-cuc-unauth-afu-FROYsCsD

    Affected: Cisco Unity Connection

Free exposure report

Find out which Cisco vulnerabilities affect your Cisco estate

Send your device list, PIDs, or serials and an authorized Cisco partner will map them to current PSIRT advisories, flag what is end-of-life, and return the patch or refresh path — GPC-payable, with TAA-compliant options. No cost, no obligation.

  • Affected CVEs & severity
  • Fixed release or replacement
  • End-of-life check
  • GPC-payable quote
Check end-of-life

Frequently asked questions

Where can I find the latest Cisco security advisories?

This page lists the most recent Cisco security advisories pulled directly from Cisco's PSIRT openVuln feed, with severity, CVSS score, CVEs, and affected products. Search by product or CVE, or browse by product family.

What is Cisco PSIRT?

The Cisco Product Security Incident Response Team (PSIRT) investigates and publishes security advisories for Cisco products. Uniqcli surfaces that feed and helps you determine which of your Cisco products are affected and how to remediate.

How do I know if my Cisco product is vulnerable?

Search this page by product name or CVE to see published advisories, then confirm the affected software versions against what you run. Uniqcli can review your install base and recommend the patch or refresh path.

What should I do about a critical Cisco vulnerability?

Critical advisories should be remediated quickly, usually by upgrading to a fixed software release or applying the documented mitigation. If the affected product is end-of-life, the fix is a refresh. Uniqcli scopes the patch or replacement and can quote it TAA-compliant and GPC-payable.

Advisory data is sourced from the Cisco PSIRT openVuln API and shown for reference; Cisco’s official advisories are authoritative. Cisco and PSIRT are trademarks of Cisco Systems, Inc.; Uniqcli LLC is an independent authorized Cisco partner.