Cisco Cloud vulnerabilities

• cisco cloud Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177 CVE-2026-96376 Fix available 6.4 MediumSeptember 23, 2026
• cisco cloud Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176 CVE-2026-96375 Fix available 4.8 MediumSeptember 23, 2026
• cisco talos intelligence for enterprise security cloud, splunk cisco talos intelligence for enterprise security cloud +1 more Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud CVE-2026-76390 5.3 MediumAugust 19, 2026
• cisco talos intelligence for enterprise security cloud, splunk cisco talos intelligence for enterprise security cloud +1 more Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security Cloud CVE-2026-76389 8.8 HighAugust 19, 2026
• cisco roomos, roomos software, roomos cloud +2 more Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability CVE-2026-20289 5.7 MediumAugust 5, 2026
• cisco roomos, roomos software, roomos cloud +2 more Cisco RoomOS Security Hardening Release - Exceptional Conditions Handling Vulnerabilities CVE-2026-20187 7.5 HighJuly 15, 2026
• cisco roomos, roomos software, roomos cloud +2 more Cisco RoomOS Security Hardening Release - Resource Lifetime Management Vulnerabilities CVE-2026-20158 7.5 HighJuly 15, 2026
• cisco roomos, roomos software, roomos cloud +2 more Cisco RoomOS Security Hardening Release - Input Validation Vulnerabilities CVE-2026-20153 7.5 HighJuly 15, 2026
• cisco roomos, roomos software, roomos cloud +2 more Cisco RoomOS Security Hardening Release - Missing Encryption Vulnerabilities CVE-2026-20157 7.5 HighJuly 15, 2026
• cisco roomos, roomos software, roomos cloud +2 more Cisco RoomOS Security Hardening Release - Buffer Management Vulnerabilities CVE-2026-20156 8.1 HighJuly 15, 2026
• cisco roomos, roomos software, roomos cloud +2 more Cisco RoomOS Security Hardening Release - Access Control Vulnerabilities CVE-2026-20150 8.8 HighJuly 15, 2026
• cisco cloud Unprotected temporary directories in Wolfram Cloud may result in privilege escalation CVE-2025-11919 9.6 CriticalJune 26, 2026
• cisco secure firewall management center (fmc), secure firewall management center, secure firewall management center (fmc) and security cloud control (scc) firewall management +2 more Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability CVE-2026-20079 In KEVPublic exploit EPSS 88.7% 10.0 CriticalMarch 4, 2026
• cisco sd-wan vedge cloud, sd-wan vedge router +1 more Cisco SD-WAN vEdge Software Access Control List Bypass Vulnerability CVE-2025-20339 5.8 MediumSeptember 24, 2025
• clamav, cisco secure endpoint, secure endpoint private cloud +2 more ClamAV UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2025-20234 Fix available 5.3 MediumJune 18, 2025
• erlang erlang/otp, otp, cisco cloud native broadband network gateway +22 more +24 more Erlang/OTP SSH Vulnerable to Pre-Authentication RCE CVE-2025-32433 In KEVPublic exploitFix available EPSS 98.9% 10.0 CriticalApril 16, 2025
• clamav, cisco secure endpoint, secure endpoint private cloud +2 more ClamAV OLE2 File Format Decryption Denial of Service Vulnerability CVE-2025-20128 Fix available 5.3 MediumJanuary 22, 2025
• cisco catalyst sd-wan manager, sd-wan vcontainer, sd-wan vedge cloud +1 more +3 more Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability CVE-2020-26071 8.4 HighNovember 18, 2024
• cisco sd-wan vedge router, sd-wan vedge cloud +1 more Cisco SD-WAN vEdge Routers Denial of Service Vulnerability CVE-2024-20496 6.1 MediumSeptember 25, 2024
• cisco secure endpoint, secure endpoint private cloud administration portal, secure endpoint private cloud console +2 more +4 more A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote... CVE-2024-20290 Fix available EPSS 33.3% 7.5 HighFebruary 7, 2024
• cisco secure endpoint, secure endpoint private cloud +1 more A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an... CVE-2023-20084 5.0 MediumNovember 22, 2023
• cisco secure endpoint, secure endpoint private cloud +1 more A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to... CVE-2023-20212 Fix available 7.5 HighAugust 18, 2023
• cisco secure endpoint, secure endpoint private cloud console, secure endpoint private cloud +1 more +3 more A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV... CVE-2023-20197 Fix available 7.5 HighAugust 16, 2023
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• cisco staros, asr 5000 series software, ultra cloud core - user plane function +2 more A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is du… CVE-2023-20046 8.8 HighMay 9, 2023
• cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud network controller +2 more Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability CVE-2023-20011 8.8 HighFebruary 23, 2023
• clamav, cisco secure endpoint, secure endpoint private cloud +1 more +3 more On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A... CVE-2023-20052 Public exploitFix available 5.3 MediumFebruary 16, 2023
• clamav, cisco secure endpoint, secure endpoint private cloud administration portal +4 more +6 more CVE-2023-20032 affecting package clamav for versions less than 0.105.2-1 CVE-2023-20032 Fix available EPSS 30.1% 9.8 CriticalFebruary 16, 2023
• cisco cx cloud agent A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to... CVE-2023-20044 6.7 MediumJanuary 19, 2023
• cisco cx cloud agent A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to... CVE-2023-20043 6.7 MediumJanuary 19, 2023
• cisco sd-wan, catalyst sd-wan manager, catalyst sd-wan +5 more +7 more Cisco SD-WAN Software Privilege Escalation Vulnerability CVE-2022-20775 In KEV EPSS 12.0% 7.8 HighSeptember 30, 2022
• cisco sd-wan solution, sd-wan, catalyst sd-wan manager +4 more +6 more Cisco SD-WAN Solution Improper Access Control Vulnerability CVE-2022-20716 7.8 HighApril 15, 2022
• cisco ultra cloud core - subscriber microservices infrastructure Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability CVE-2022-20762 7.8 HighApril 6, 2022
• vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 more Remote Code Execution in Spring Framework CVE-2022-22965 In KEVPublic exploitFix available EPSS 99.6% 9.8 CriticalMarch 31, 2022
• apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 more Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration CVE-2021-44832 Public exploitFix available EPSS 97.9% 6.6 MediumDecember 28, 2021
• apache log4j, log4j2, apple xcode +141 more +143 more Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints CVE-2021-44228 In KEVPublic exploitFix available EPSS 100.0% 10.0 CriticalDecember 10, 2021
• cisco ios xe software, ios xe, ios xe sd-wan +144 more +146 more Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability CVE-2021-1619 9.8 CriticalSeptember 23, 2021
• cisco catalyst sd-wan manager, sd-wan solution, sd-wan vbond orchestrator +10 more +12 more Cisco SD-WAN Software Information Disclosure Vulnerability CVE-2021-1546 5.5 MediumSeptember 23, 2021
• cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud application policy infrastructure controller +2 more Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability CVE-2021-1582 5.4 MediumAugust 25, 2021
• cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud application policy infrastructure controller +2 more Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities CVE-2021-1581 6.5 MediumAugust 25, 2021
• cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud application policy infrastructure controller +2 more Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities CVE-2021-1580 6.5 MediumAugust 25, 2021
• cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud application policy infrastructure controller +2 more Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability CVE-2021-1579 8.1 HighAugust 25, 2021
• cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud application policy infrastructure controller +2 more Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability CVE-2021-1578 8.8 HighAugust 25, 2021
• cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud application policy infrastructure controller +2 more Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability CVE-2021-1577 9.1 CriticalAugust 25, 2021
• cisco catalyst sd-wan manager, sd-wan solution, sd-wan vbond orchestrator +9 more +11 more Cisco SD-WAN Software Privilege Escalation Vulnerability CVE-2021-1528 7.8 HighJune 4, 2021
• cisco catalyst sd-wan manager, sd-wan solution, sd-wan vbond orchestrator +11 more +13 more Cisco SD-WAN Software Privilege Escalation Vulnerability CVE-2021-1514 4.4 MediumMay 6, 2021
• cisco catalyst sd-wan manager, sd-wan solution, sd-wan vbond orchestrator +10 more +12 more Cisco SD-WAN Software vDaemon Denial of Service Vulnerability CVE-2021-1513 7.5 HighMay 6, 2021
• cisco catalyst sd-wan manager, sd-wan solution, sd-wan vbond orchestrator +11 more +13 more Cisco SD-WAN Software Arbitrary File Corruption Vulnerability CVE-2021-1512 4.4 MediumMay 6, 2021
• cisco sd-wan vedge router, vedge 1000 firmware, vedge 100 firmware +6 more +8 more Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities CVE-2021-1511 7.5 HighMay 6, 2021
• cisco sd-wan vedge router, vedge 1000 firmware, vedge 100 firmware +6 more +8 more Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities CVE-2021-1510 7.5 HighMay 6, 2021
• Show olderLoading…