Cisco Secure Client / AnyConnect Security Advisories & Vulnerabilities
Recent Cisco PSIRT advisories affecting Secure Client (formerly AnyConnect) endpoint VPN. Search, check severity and CVSS, and get a remediation or refresh quote from an authorized Cisco partner.
9 recent advisories affecting Cisco Secure Client / AnyConnect
Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability
High · CVSS 5.5CVE-2026-76462Published Oct 21, 2026cisco-sa-sec-client-priv-esc-muF8eZdmAffected: Cisco Secure Client 4.9.00086, Cisco Secure Client 4.9.01095, Cisco Secure Client 4.9.02028, Cisco Secure Client 4.9.03047, Cisco Secure Client 4.9.03049, Cisco Secure Client 4.9.04043, and 51 more
Cisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication Denial of Service Vulnerability
High · CVSS 8.6CVE-2025-20271Published Jun 18, 2025cisco-sa-meraki-mx-vpn-dos-sM5GCfm7Affected: Cisco Meraki MX Firmware
Cisco Meraki MX and Z Series AnyConnect VPN Denial of Service Vulnerability
High · CVSS 7.7CVE-2025-20212Published Apr 2, 2025cisco-sa-meraki-mx-vpn-dos-vNRpDvfbAffected: Cisco Meraki MX Firmware
Cisco Secure Client for Windows with Secure Firewall Posture Engine DLL Hijacking Vulnerability
High · CVSS 7.1CVE-2025-20206Published Mar 5, 2025cisco-sa-secure-dll-injection-AOyzEqSgAffected: Cisco Secure Client
Cisco Meraki MX and Z Series Teleworker Gateway AnyConnect VPN Denial of Service Vulnerabilities
High · CVSS 8.6CVE-2024-20498, CVE-2024-20499, CVE-2024-20500, CVE-2024-20501 +2Published Oct 2, 2024cisco-sa-meraki-mx-vpn-dos-QTRHzG2Affected: Cisco Meraki MX Firmware
Cisco Secure Client Carriage Return Line Feed Injection Vulnerability
High · CVSS 8.2CVE-2024-20337Published Mar 6, 2024cisco-sa-secure-client-crlf-W43V4G7Affected: Cisco Secure Client
Cisco Secure Client for Linux with ISE Posture Module Privilege Escalation Vulnerability
High · CVSS 7.3CVE-2024-20338Published Mar 6, 2024cisco-sa-secure-privesc-sYxQO6dsAffected: Cisco Secure Client
Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability
High · CVSS 7.8CVE-2023-20178Published Jun 7, 2023cisco-sa-ac-csc-privesc-wx4U4KwAffected: Cisco AnyConnect Secure Mobility Client
Cisco AnyConnect Secure Mobility Client for Linux and Mac OS with VPN Posture (HostScan) Module Shared Library Hijacking Vulnerability
High · CVSS 7CVE-2021-34788Published Oct 6, 2021cisco-sa-anyconnect-lib-hija-cAFB7x4qAffected: Cisco AnyConnect Secure Mobility Client
Find out which Cisco vulnerabilities affect your Cisco Secure Client / AnyConnect
Send your device list, PIDs, or serials and an authorized Cisco partner will map them to current PSIRT advisories, flag what is end-of-life, and return the patch or refresh path — GPC-payable, with TAA-compliant options. No cost, no obligation.
- Affected CVEs & severity
- Fixed release or replacement
- End-of-life check
- GPC-payable quote
Frequently asked questions
What are the latest Cisco Secure Client / AnyConnect security advisories?
This page lists recent Cisco security advisories affecting Cisco Secure Client / AnyConnect, from the Cisco PSIRT openVuln feed, with severity, CVSS, and CVEs. Confirm the affected software versions against what you run.
How do I fix a Cisco Secure Client / AnyConnect vulnerability?
Most Cisco vulnerabilities are fixed by upgrading to a patched software release or applying the documented mitigation. If the platform is end-of-life, the remedy is a refresh. Uniqcli, an authorized Cisco partner, scopes the patch or replacement and can quote it TAA-compliant and GPC-payable.
Is Cisco Secure Client / AnyConnect still supported?
Security fixes are only available while a product is supported. Check our Cisco end-of-life lookup to confirm the Last Date of Support, then patch (if supported) or plan a refresh with Uniqcli.
Data from the Cisco PSIRT openVuln API, shown for reference; Cisco’s official advisories are authoritative. Cisco and PSIRT are trademarks of Cisco Systems, Inc.; Uniqcli LLC is an independent authorized Cisco partner.
