Search CVEs, research… / diras.sa

VENDOR

Cisco vulnerabilities: CVEs, exploitation and patches

Every Cisco CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

  1. CVE-2026-76420
    Cisco Secure FMC AJP connector pre-auth remote root execution Cisco Cisco Secure Firewall Management Center (FMC) ·
    CRITICAL 9
  2. CVE-2026-20212
    Cisco NX-OS Silicon One integration unauthenticated remote code execution Cisco Cisco NX-OS Software ·
    • PoC PUBLIC
    CRITICAL 9.8
  3. CVE-2026-20353
    Cisco Secure Email pre-auth remote compromise via resource-lifetime bug Cisco Cisco Secure Email ·
    CRITICAL 9.8
  4. CVE-2026-76443
    Cisco Secure Email remote code execution via improper neutralization Cisco Cisco Secure Email ·
    CRITICAL 9.8
  5. CVE-2026-76441
    Cisco Secure Email and Web Manager improper access control allows remote takeover Cisco Cisco Secure Email and Web Manager ·
    CRITICAL 9.8
  6. CVE-2026-76440
    Cisco Secure Email path traversal vulnerability, unauthenticated remote impact Cisco Cisco Secure Email ·
    CRITICAL 9.8
  7. CVE-2026-20242
    Cisco Secure Firewall Management Center insecure deserialization remote root execution Cisco Cisco Secure Firewall Management Center (FMC) ·
    CRITICAL 9.8
  8. CVE-2026-20326
    Cisco Nexus Dashboard missing authentication for critical functions Cisco Cisco Nexus Dashboard ·
    CRITICAL 9.8
  9. CVE-2026-20130
    Cisco Identity Services Engine pre-auth remote code execution Cisco Cisco Identity Services Engine Software ·
    CRITICAL 10
  10. CVE-2026-20192
    Cisco Identity Services Engine improper access control vulnerability Cisco Cisco Identity Services Engine Software ·
    CRITICAL 10
  11. CVE-2026-76423
    Cisco Identity Services Engine unauthenticated admin access via REST API Cisco Cisco Identity Services Engine Software ·
    CRITICAL 10
  12. CVE-2026-20272
    Cisco IOS XE improper neutralization (CWE-74) pre-auth remote code execution Cisco Cisco IOS XE Software ·
    CRITICAL 9.8
  13. CVE-2026-20274
    Cisco IOS XR Software improper resource control vulnerability Cisco Cisco IOS XR Software ·
    CRITICAL 9.8
  14. CVE-2026-20279
    Cisco IOS XR Software improper access control pre-auth remote code execution Cisco Cisco IOS XR Software ·
    CRITICAL 9.8
  15. CVE-2026-20200
    Cisco Unified Computing System (Standalone) authenticated remote code execution Cisco Cisco Unified Computing System (Standalone) ·
    • PoC PUBLIC
    HIGH 8.8
  16. CVE-2026-20303
    Cisco Catalyst SD-WAN Controller improper input validation remote code execution Cisco Cisco Catalyst SD-WAN Controller ·
    • PoC PUBLIC
    CRITICAL 9.9
  17. CVE-2026-20217
    Cisco Secure Endpoint ClamAV PESpin parser remote denial-of-service Cisco Cisco Secure Endpoint ·
    • PoC PUBLIC
    HIGH 7.5
  18. CVE-2008-4128
    Cisco IOS cross-site request forgery lets remote attackers run commands Cisco IOS ·
    • CISA KEV
    • EXPLOITED
    HIGH 8.1
  19. CVE-2026-76461
    Cisco Secure Email Gateway SQL injection leads to pre-auth remote code execution Cisco Secure Email Gateway ·
    • CISA KEV
    • EXPLOITED
    • PoC PUBLIC
    CRITICAL 9.8
  20. CVE-2026-20079
    Cisco Secure Firewall Management Center authentication bypass and RCE Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management ·
    • CISA KEV
    • EXPLOITED
    • PoC PUBLIC
    CRITICAL 10
20 CVEs · page 1 of 2