{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Cisco vulnerabilities","home_page_url":"https://patchfirst.co/vendor/cisco/","feed_url":"https://patchfirst.co/feed/vendor/cisco.json","description":"New and newly exploited Cisco CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-76418#kev","url":"https://patchfirst.co/cve/CVE-2026-76418/","title":"[KEV] CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference…","content_text":"Cisco · Secure Firewall ASA Software and Cisco Secure FTD Software. In CISA KEV since 2026-10-29. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 59.9% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 64.4 of 100.","summary":"Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference…","date_published":"2026-10-29T00:00:00.000Z","date_modified":"2026-10-30T10:36:01.000Z","tags":["kev","T1190","T1499.004"],"_patchfirst":{"reason":"kev","priority":64.4,"kev":{"dateAdded":"2026-10-29","ransomware":false},"epss":{"score":0.0091,"percentile":0.59949},"cvss":{"score":8.6,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"Secure Firewall ASA Software and Cisco Secure FTD Software","techniqueIds":["T1190","T1499.004"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2026-76473","url":"https://patchfirst.co/cve/CVE-2026-76473/","title":"CVE-2026-76473: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…","content_text":"Cisco · Cisco Emergency Responder. Not in CISA KEV. EPSS 0.5% (higher than 42.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 22.2 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-27T18:17:37.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":22.2,"kev":null,"epss":{"score":0.0049,"percentile":0.4216},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco Emergency Responder","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-76474","url":"https://patchfirst.co/cve/CVE-2026-76474/","title":"CVE-2026-76474: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…","content_text":"Cisco · Cisco Emergency Responder. Not in CISA KEV. EPSS 0.5% (higher than 41% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 22.0 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-22T23:19:07.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":22,"kev":null,"epss":{"score":0.00474,"percentile":0.41018},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco Emergency Responder","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-76466","url":"https://patchfirst.co/cve/CVE-2026-76466/","title":"CVE-2026-76466: A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote…","content_text":"Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway. Not in CISA KEV. EPSS 0.4% (higher than 36% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 21.0 of 100.","summary":"A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote…","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-22T23:19:07.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":21,"kev":null,"epss":{"score":0.00417,"percentile":0.35956},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-76475","url":"https://patchfirst.co/cve/CVE-2026-76475/","title":"CVE-2026-76475: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…","content_text":"Cisco · Cisco Emergency Responder. Not in CISA KEV. EPSS 0.3% (higher than 25.7% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. Priority 18.6 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-22T14:17:46.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":18.6,"kev":null,"epss":{"score":0.00326,"percentile":0.25694},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco Emergency Responder","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-76519#kev","url":"https://patchfirst.co/cve/CVE-2026-76519/","title":"[KEV] CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability","content_text":"Cisco · Secure Email Gateway. In CISA KEV since 2026-10-14. ENISA EUVD lists it as exploited. EPSS 2.2% (higher than 82.1% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Priority 76.3 of 100.","summary":"Cisco Secure Email Gateway Relative Path Traversal Vulnerability","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-15T13:47:19.000Z","tags":["kev","public-exploit","T1190","T1059","T1105"],"_patchfirst":{"reason":"kev","priority":76.3,"kev":{"dateAdded":"2026-10-14","ransomware":false},"epss":{"score":0.02152,"percentile":0.82127},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Secure Email Gateway","techniqueIds":["T1190","T1059","T1105"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-76455","url":"https://patchfirst.co/cve/CVE-2026-76455/","title":"CVE-2026-76455: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has…","content_text":"Cisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 3.6% (higher than 89.4% of CVEs). CVSS 9.8 CRITICAL. Priority 26.9 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T20:08:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":26.9,"kev":null,"epss":{"score":0.03593,"percentile":0.89426},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco NX-OS Software","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76486","url":"https://patchfirst.co/cve/CVE-2026-76486/","title":"CVE-2026-76486: A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known…","content_text":"Cisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 0.5% (higher than 45.4% of CVEs). CVSS 9.8 CRITICAL. Priority 18.1 of 100.","summary":"A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T20:08:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.1,"kev":null,"epss":{"score":0.0054,"percentile":0.45406},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco NX-OS Software","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76485","url":"https://patchfirst.co/cve/CVE-2026-76485/","title":"CVE-2026-76485: A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known…","content_text":"Cisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 0.5% (higher than 45.4% of CVEs). CVSS 9.8 CRITICAL. Priority 18.1 of 100.","summary":"A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T20:08:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.1,"kev":null,"epss":{"score":0.0054,"percentile":0.45406},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco NX-OS Software","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76454","url":"https://patchfirst.co/cve/CVE-2026-76454/","title":"CVE-2026-76454: A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software…","content_text":"Cisco · Cisco License On-Prem. Not in CISA KEV. EPSS 0.6% (higher than 47.8% of CVEs). CVSS 9.1 CRITICAL. Priority 18.1 of 100.","summary":"A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T20:08:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.1,"kev":null,"epss":{"score":0.00582,"percentile":0.47799},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco License On-Prem","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76501","url":"https://patchfirst.co/cve/CVE-2026-76501/","title":"CVE-2026-76501: A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of…","content_text":"Cisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 0.5% (higher than 44.3% of CVEs). CVSS 9.8 CRITICAL. Priority 17.9 of 100.","summary":"A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T20:08:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.9,"kev":null,"epss":{"score":0.00522,"percentile":0.44309},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco NX-OS Software","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76471","url":"https://patchfirst.co/cve/CVE-2026-76471/","title":"CVE-2026-76471: A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to…","content_text":"Cisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 0.5% (higher than 41.8% of CVEs). CVSS 9.8 CRITICAL. Priority 17.4 of 100.","summary":"A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T20:08:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.4,"kev":null,"epss":{"score":0.00486,"percentile":0.41848},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco NX-OS Software","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-20328","url":"https://patchfirst.co/cve/CVE-2026-20328/","title":"CVE-2026-20328: A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager…","content_text":"Cisco · Cisco License On-Prem. Not in CISA KEV. EPSS 0.5% (higher than 44.1% of CVEs). CVSS 9.1 CRITICAL. Priority 17.4 of 100.","summary":"A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T20:08:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.4,"kev":null,"epss":{"score":0.00519,"percentile":0.44093},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco License On-Prem","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76465","url":"https://patchfirst.co/cve/CVE-2026-76465/","title":"CVE-2026-76465: A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco…","content_text":"Cisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 0.5% (higher than 39.9% of CVEs). CVSS 9.8 CRITICAL. Priority 17.0 of 100.","summary":"A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T20:08:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17,"kev":null,"epss":{"score":0.0046,"percentile":0.39853},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco NX-OS Software","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76480","url":"https://patchfirst.co/cve/CVE-2026-76480/","title":"CVE-2026-76480: As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco…","content_text":"Cisco · Cisco License On-Prem. Not in CISA KEV. EPSS 0.4% (higher than 30.9% of CVEs). CVSS 9.8 CRITICAL. Priority 15.2 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T20:08:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.2,"kev":null,"epss":{"score":0.0037,"percentile":0.30879},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco License On-Prem","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76500","url":"https://patchfirst.co/cve/CVE-2026-76500/","title":"CVE-2026-76500: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy…","content_text":"Cisco · Cisco Application Policy Infrastructure Controller (APIC). Not in CISA KEV. EPSS 0.3% (higher than 25.6% of CVEs). CVSS 9.8 CRITICAL. Priority 14.1 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T20:08:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.1,"kev":null,"epss":{"score":0.00325,"percentile":0.25572},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco Application Policy Infrastructure Controller (APIC)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76499","url":"https://patchfirst.co/cve/CVE-2026-76499/","title":"CVE-2026-76499: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy…","content_text":"Cisco · Cisco Application Policy Infrastructure Controller (APIC). Not in CISA KEV. EPSS 0.3% (higher than 23.6% of CVEs). CVSS 9.8 CRITICAL. Priority 13.7 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T20:08:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.7,"kev":null,"epss":{"score":0.00307,"percentile":0.23581},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco Application Policy Infrastructure Controller (APIC)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76459","url":"https://patchfirst.co/cve/CVE-2026-76459/","title":"CVE-2026-76459: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has…","content_text":"Cisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 0.3% (higher than 23.5% of CVEs). CVSS 9.8 CRITICAL. Priority 13.7 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-09T14:17:22.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.7,"kev":null,"epss":{"score":0.00307,"percentile":0.23541},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco NX-OS Software","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76498","url":"https://patchfirst.co/cve/CVE-2026-76498/","title":"CVE-2026-76498: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy…","content_text":"Cisco · Cisco Application Policy Infrastructure Controller (APIC). Not in CISA KEV. EPSS 0.3% (higher than 22.8% of CVEs). CVSS 9.8 CRITICAL. Priority 13.6 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T20:08:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.6,"kev":null,"epss":{"score":0.00301,"percentile":0.22811},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco Application Policy Infrastructure Controller (APIC)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76482","url":"https://patchfirst.co/cve/CVE-2026-76482/","title":"CVE-2026-76482: As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco…","content_text":"Cisco · Cisco License On-Prem. Not in CISA KEV. EPSS 0.2% (higher than 12.3% of CVEs). CVSS 10.0 CRITICAL. Priority 11.6 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T20:08:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":11.6,"kev":null,"epss":{"score":0.00218,"percentile":0.12343},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco License On-Prem","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76464","url":"https://patchfirst.co/cve/CVE-2026-76464/","title":"CVE-2026-76464: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team…","content_text":"Cisco · Cisco Campus Gateway Software. Not in CISA KEV. EPSS 0.2% (higher than 8.9% of CVEs). CVSS 9.6 CRITICAL. Priority 10.7 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T20:08:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":10.7,"kev":null,"epss":{"score":0.00192,"percentile":0.08899},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco Campus Gateway Software","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76504#kev","url":"https://patchfirst.co/cve/CVE-2026-76504/","title":"[KEV] CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability","content_text":"Cisco · Catalyst SD-WAN Manager. In CISA KEV since 2026-09-30. ENISA EUVD lists it as exploited. EPSS 38.9% (higher than 98.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 79.6 of 100.","summary":"Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability","date_published":"2026-09-30T00:00:00.000Z","date_modified":"2026-10-03T00:16:39.000Z","tags":["kev","public-exploit","T1190","T1078"],"_patchfirst":{"reason":"kev","priority":79.6,"kev":{"dateAdded":"2026-09-30","ransomware":false},"epss":{"score":0.38928,"percentile":0.98587},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Catalyst SD-WAN Manager","techniqueIds":["T1190","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-76460#kev","url":"https://patchfirst.co/cve/CVE-2026-76460/","title":"[KEV] CVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability","content_text":"Cisco · Identity Services Engine. In CISA KEV since 2026-09-16. ENISA EUVD lists it as exploited. EPSS 75.6% (higher than 99.52% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 79.9 of 100.","summary":"Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability","date_published":"2026-09-16T00:00:00.000Z","date_modified":"2026-10-07T19:17:40.000Z","tags":["kev","public-exploit","T1190","T1078"],"_patchfirst":{"reason":"kev","priority":79.9,"kev":{"dateAdded":"2026-09-16","ransomware":false},"epss":{"score":0.75599,"percentile":0.99519},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Identity Services Engine","techniqueIds":["T1190","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-76461#kev","url":"https://patchfirst.co/cve/CVE-2026-76461/","title":"[KEV] CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability","content_text":"Cisco · Secure Email Gateway. In CISA KEV since 2026-09-14. ENISA EUVD lists it as exploited. EPSS 29.5% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.5 of 100.","summary":"Cisco Secure Email Gateway SQL Injection Vulnerability","date_published":"2026-09-14T00:00:00.000Z","date_modified":"2026-09-15T12:47:32.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":79.5,"kev":{"dateAdded":"2026-09-14","ransomware":false},"epss":{"score":0.29543,"percentile":0.98185},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Secure Email Gateway","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-20079#kev","url":"https://patchfirst.co/cve/CVE-2026-20079/","title":"[KEV] CVE-2026-20079: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability","content_text":"Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management. In CISA KEV since 2026-09-09. ENISA EUVD lists it as exploited. EPSS 88.7% (higher than 99.77% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Named in 1 threat report. Priority 83.8 of 100.","summary":"Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability","date_published":"2026-09-09T00:00:00.000Z","date_modified":"2026-09-16T17:17:16.000Z","tags":["kev","public-exploit","T1190"],"_patchfirst":{"reason":"kev","priority":83.8,"kev":{"dateAdded":"2026-09-09","ransomware":false},"epss":{"score":0.88658,"percentile":0.99774},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management","techniqueIds":["T1190"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-20349#kev","url":"https://patchfirst.co/cve/CVE-2026-20349/","title":"[KEV] CVE-2026-20349: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection…","content_text":"Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) . In CISA KEV since 2026-08-11. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 63.1% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 71.6 of 100.","summary":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection…","date_published":"2026-08-11T00:00:00.000Z","date_modified":"2026-10-26T13:10:00.000Z","tags":["kev","public-exploit","T1190","T1499.004"],"_patchfirst":{"reason":"kev","priority":71.6,"kev":{"dateAdded":"2026-08-11","ransomware":false},"epss":{"score":0.0101,"percentile":0.63113},"cvss":{"score":8.6,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ","techniqueIds":["T1190","T1499.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-20316#kev","url":"https://patchfirst.co/cve/CVE-2026-20316/","title":"[KEV] CVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability","content_text":"Cisco · Secure Firewall Management Center (FMC). In CISA KEV since 2026-07-29, known ransomware use. ENISA EUVD lists it as exploited. EPSS 35.1% (higher than 98.4% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1078 Valid Accounts; T1005 Data from Local System. Named in 1 threat report. Priority 80.3 of 100.","summary":"Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability","date_published":"2026-07-29T00:00:00.000Z","date_modified":"2026-10-24T13:10:00.000Z","tags":["kev","ransomware","T1078","T1005"],"_patchfirst":{"reason":"kev","priority":80.3,"kev":{"dateAdded":"2026-07-29","ransomware":true},"epss":{"score":0.35096,"percentile":0.98435},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Cisco","product":"Secure Firewall Management Center (FMC)","techniqueIds":["T1078","T1005"],"reportCount":1,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2008-4128#kev","url":"https://patchfirst.co/cve/CVE-2008-4128/","title":"[KEV] CVE-2008-4128: Cisco IOS Cross-Site Request Forgery Vulnerability","content_text":"Cisco · IOS. In CISA KEV since 2026-07-13. ENISA EUVD lists it as exploited. EPSS 33.9% (higher than 98.4% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 73.3 of 100.","summary":"Cisco IOS Cross-Site Request Forgery Vulnerability","date_published":"2026-07-13T00:00:00.000Z","date_modified":"2026-09-24T12:52:19.000Z","tags":["kev","public-exploit","T1204.001","T1059"],"_patchfirst":{"reason":"kev","priority":73.3,"kev":{"dateAdded":"2026-07-13","ransomware":false},"epss":{"score":0.33871,"percentile":0.98388},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"IOS","techniqueIds":["T1204.001","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-20230#kev","url":"https://patchfirst.co/cve/CVE-2026-20230/","title":"[KEV] CVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability","content_text":"Cisco · Unified Communications Manager. In CISA KEV since 2026-06-25. ENISA EUVD lists it as exploited. EPSS 88.5% (higher than 99.77% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 74.0 of 100.","summary":"Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability","date_published":"2026-06-25T00:00:00.000Z","date_modified":"2026-10-07T19:17:37.000Z","tags":["kev","public-exploit","T1190","T1105"],"_patchfirst":{"reason":"kev","priority":74,"kev":{"dateAdded":"2026-06-25","ransomware":false},"epss":{"score":0.88528,"percentile":0.99771},"cvss":{"score":8.6,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"Unified Communications Manager","techniqueIds":["T1190","T1105"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-20262#kev","url":"https://patchfirst.co/cve/CVE-2026-20262/","title":"[KEV] CVE-2026-20262: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability","content_text":"Cisco · Catalyst SD-WAN Manager. In CISA KEV since 2026-06-15. ENISA EUVD lists it as exploited. EPSS 29.1% (higher than 98.2% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1565.001 Stored Data Manipulation. Priority 72.2 of 100.","summary":"Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability","date_published":"2026-06-15T00:00:00.000Z","date_modified":"2026-07-24T19:10:00.000Z","tags":["kev","public-exploit","T1190","T1565.001"],"_patchfirst":{"reason":"kev","priority":72.2,"kev":{"dateAdded":"2026-06-15","ransomware":false},"epss":{"score":0.29116,"percentile":0.98163},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Cisco","product":"Catalyst SD-WAN Manager","techniqueIds":["T1190","T1565.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-20245#kev","url":"https://patchfirst.co/cve/CVE-2026-20245/","title":"[KEV] CVE-2026-20245: Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability","content_text":"Cisco · Catalyst SD-WAN Manager. In CISA KEV since 2026-06-09. ENISA EUVD lists it as exploited. EPSS 25.3% (higher than 97.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 73.0 of 100.","summary":"Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability","date_published":"2026-06-09T00:00:00.000Z","date_modified":"2026-07-23T07:10:00.000Z","tags":["kev","public-exploit","T1068","T1059"],"_patchfirst":{"reason":"kev","priority":73,"kev":{"dateAdded":"2026-06-09","ransomware":false},"epss":{"score":0.25323,"percentile":0.9794},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"Catalyst SD-WAN Manager","techniqueIds":["T1068","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-20182#kev","url":"https://patchfirst.co/cve/CVE-2026-20182/","title":"[KEV] CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability","content_text":"Cisco · Catalyst SD-WAN. In CISA KEV since 2026-05-14. ENISA EUVD lists it as exploited. EPSS 91.8% (higher than 99.82% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Named in 4 threat reports. Priority 83.9 of 100.","summary":"Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability","date_published":"2026-05-14T00:00:00.000Z","date_modified":"2026-10-26T14:10:00.000Z","tags":["kev","public-exploit","T1190"],"_patchfirst":{"reason":"kev","priority":83.9,"kev":{"dateAdded":"2026-05-14","ransomware":false},"epss":{"score":0.91817,"percentile":0.99816},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Catalyst SD-WAN","techniqueIds":["T1190"],"reportCount":4,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-20133#kev","url":"https://patchfirst.co/cve/CVE-2026-20133/","title":"[KEV] CVE-2026-20133: Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","content_text":"Cisco · Catalyst SD-WAN Manager. In CISA KEV since 2026-04-20. ENISA EUVD lists it as exploited. EPSS 31.5% (higher than 98.3% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 67.9 of 100.","summary":"Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","date_published":"2026-04-20T00:00:00.000Z","date_modified":"2026-06-17T10:17:11.000Z","tags":["kev","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":67.9,"kev":{"dateAdded":"2026-04-20","ransomware":false},"epss":{"score":0.31479,"percentile":0.98282},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"Catalyst SD-WAN Manager","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2026-20128#kev","url":"https://patchfirst.co/cve/CVE-2026-20128/","title":"[KEV] CVE-2026-20128: Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability","content_text":"Cisco · Catalyst SD-WAN Manager. In CISA KEV since 2026-04-20. ENISA EUVD lists it as exploited. EPSS 7.3% (higher than 94.4% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1552 Unsecured Credentials. Priority 67.1 of 100.","summary":"Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability","date_published":"2026-04-20T00:00:00.000Z","date_modified":"2026-06-17T10:17:10.000Z","tags":["kev","T1190","T1552"],"_patchfirst":{"reason":"kev","priority":67.1,"kev":{"dateAdded":"2026-04-20","ransomware":false},"epss":{"score":0.07317,"percentile":0.94374},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"Catalyst SD-WAN Manager","techniqueIds":["T1190","T1552"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2026-20122#kev","url":"https://patchfirst.co/cve/CVE-2026-20122/","title":"[KEV] CVE-2026-20122: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability","content_text":"Cisco · Catalyst SD-WAN Manger. In CISA KEV since 2026-04-20. ENISA EUVD lists it as exploited. EPSS 25.8% (higher than 98% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1565.001 Stored Data Manipulation. Priority 66.4 of 100.","summary":"Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability","date_published":"2026-04-20T00:00:00.000Z","date_modified":"2026-06-17T10:17:09.000Z","tags":["kev","T1190","T1565.001"],"_patchfirst":{"reason":"kev","priority":66.4,"kev":{"dateAdded":"2026-04-20","ransomware":false},"epss":{"score":0.25801,"percentile":0.97972},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Cisco","product":"Catalyst SD-WAN Manger","techniqueIds":["T1190","T1565.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2026-20131#kev","url":"https://patchfirst.co/cve/CVE-2026-20131/","title":"[KEV] CVE-2026-20131: Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management…","content_text":"Cisco · Secure Firewall Management Center (FMC). In CISA KEV since 2026-03-19, known ransomware use. ENISA EUVD lists it as exploited. EPSS 44.4% (higher than 98.8% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 84.8 of 100.","summary":"Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management…","date_published":"2026-03-19T00:00:00.000Z","date_modified":"2026-06-17T10:17:10.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":84.8,"kev":{"dateAdded":"2026-03-19","ransomware":true},"epss":{"score":0.44431,"percentile":0.98762},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Secure Firewall Management Center (FMC)","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-20775#kev","url":"https://patchfirst.co/cve/CVE-2022-20775/","title":"[KEV] CVE-2022-20775: Cisco SD-WAN Path Traversal Vulnerability","content_text":"Cisco · SD-WAN. In CISA KEV since 2026-02-25. ENISA EUVD lists it as exploited. EPSS 12.5% (higher than 96.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 76.6 of 100.","summary":"Cisco SD-WAN Path Traversal Vulnerability","date_published":"2026-02-25T00:00:00.000Z","date_modified":"2026-06-17T04:25:04.000Z","tags":["kev","public-exploit","T1068","T1059"],"_patchfirst":{"reason":"kev","priority":76.6,"kev":{"dateAdded":"2026-02-25","ransomware":false},"epss":{"score":0.12475,"percentile":0.96214},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"SD-WAN","techniqueIds":["T1068","T1059"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-20127#kev","url":"https://patchfirst.co/cve/CVE-2026-20127/","title":"[KEV] CVE-2026-20127: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability","content_text":"Cisco · Catalyst SD-WAN Controller and Manager. In CISA KEV since 2026-02-25. ENISA EUVD lists it as exploited. EPSS 89.3% (higher than 99.78% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts; T1098 Account Manipulation. Priority 75.0 of 100.","summary":"Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability","date_published":"2026-02-25T00:00:00.000Z","date_modified":"2026-06-17T15:06:12.000Z","tags":["kev","public-exploit","T1190","T1078","T1098"],"_patchfirst":{"reason":"kev","priority":75,"kev":{"dateAdded":"2026-02-25","ransomware":false},"epss":{"score":0.89294,"percentile":0.99782},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Catalyst SD-WAN Controller and Manager","techniqueIds":["T1190","T1078","T1098"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-20045#kev","url":"https://patchfirst.co/cve/CVE-2026-20045/","title":"[KEV] CVE-2026-20045: Cisco Unified Communications Products Code Injection Vulnerability","content_text":"Cisco · Unified Communications Manager. In CISA KEV since 2026-01-21. ENISA EUVD lists it as exploited. EPSS 4.5% (higher than 91.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 73.2 of 100.","summary":"Cisco Unified Communications Products Code Injection Vulnerability","date_published":"2026-01-21T00:00:00.000Z","date_modified":"2026-06-17T10:16:58.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":73.2,"kev":{"dateAdded":"2026-01-21","ransomware":false},"epss":{"score":0.04541,"percentile":0.91558},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Unified Communications Manager","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-20029","url":"https://patchfirst.co/cve/CVE-2026-20029/","title":"CVE-2026-20029: Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability","content_text":"Cisco · Cisco Identity Services Engine Software. Not in CISA KEV. EPSS 6.1% (higher than 93.4% of CVEs). CVSS 4.9 MEDIUM. Priority 63.2 of 100.","summary":"Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability","date_published":"2026-01-07T00:00:00.000Z","date_modified":"2026-01-07T16:40:58.000Z","tags":[],"_patchfirst":{"reason":"published","priority":63.2,"kev":null,"epss":{"score":0.06084,"percentile":0.93404},"cvss":{"score":4.9,"severity":"MEDIUM","version":"3.1"},"vendor":"Cisco","product":"Cisco Identity Services Engine Software","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-20393#kev","url":"https://patchfirst.co/cve/CVE-2025-20393/","title":"[KEV] CVE-2025-20393: Cisco Multiple Products Improper Input Validation Vulnerability","content_text":"Cisco · Multiple Products. In CISA KEV since 2025-12-17. ENISA EUVD lists it as exploited. EPSS 32.4% (higher than 98.3% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.7 of 100.","summary":"Cisco Multiple Products Improper Input Validation Vulnerability","date_published":"2025-12-17T00:00:00.000Z","date_modified":"2026-06-17T08:41:39.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":74.7,"kev":{"dateAdded":"2025-12-17","ransomware":false},"epss":{"score":0.32392,"percentile":0.98328},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Multiple Products","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-20352#kev","url":"https://patchfirst.co/cve/CVE-2025-20352/","title":"[KEV] CVE-2025-20352: Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability","content_text":"Cisco · IOS and IOS XE. In CISA KEV since 2025-09-29. ENISA EUVD lists it as exploited. EPSS 41.5% (higher than 98.7% of CVEs). CVSS 7.7 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 68.1 of 100.","summary":"Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability","date_published":"2025-09-29T00:00:00.000Z","date_modified":"2026-09-26T00:10:00.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":68.1,"kev":{"dateAdded":"2025-09-29","ransomware":false},"epss":{"score":0.41502,"percentile":0.98677},"cvss":{"score":7.7,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"IOS and IOS XE","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-20333#kev","url":"https://patchfirst.co/cve/CVE-2025-20333/","title":"[KEV] CVE-2025-20333: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow…","content_text":"Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense. In CISA KEV since 2025-09-25. ENISA EUVD lists it as exploited. EPSS 71.2% (higher than 99.41% of CVEs). CVSS 9.9 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Named in 5 threat reports. Priority 79.8 of 100.","summary":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow…","date_published":"2025-09-25T00:00:00.000Z","date_modified":"2026-10-18T21:10:00.000Z","tags":["kev","public-exploit","T1133","T1059"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2025-09-25","ransomware":false},"epss":{"score":0.71207,"percentile":0.99408},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","techniqueIds":["T1133","T1059"],"reportCount":5,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-20362#kev","url":"https://patchfirst.co/cve/CVE-2025-20362/","title":"[KEV] CVE-2025-20362: Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization…","content_text":"Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense. In CISA KEV since 2025-09-25. ENISA EUVD lists it as exploited. EPSS 87.1% (higher than 99.75% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Named in 5 threat reports. Priority 79.0 of 100.","summary":"Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization…","date_published":"2025-09-25T00:00:00.000Z","date_modified":"2026-10-18T21:10:00.000Z","tags":["kev","public-exploit","T1190","T1499.004"],"_patchfirst":{"reason":"kev","priority":79,"kev":{"dateAdded":"2025-09-25","ransomware":false},"epss":{"score":0.87085,"percentile":0.99749},"cvss":{"score":8.6,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","techniqueIds":["T1190","T1499.004"],"reportCount":5,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-20363","url":"https://patchfirst.co/cve/CVE-2025-20363/","title":"CVE-2025-20363: A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure…","content_text":"Cisco · IOS. Not in CISA KEV. EPSS 6.9% (higher than 94.1% of CVEs). CVSS 9.0 CRITICAL. Named in 2 threat reports. Priority 67.3 of 100.","summary":"A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure…","date_published":"2025-09-25T00:00:00.000Z","date_modified":"2026-02-26T17:47:56.000Z","tags":[],"_patchfirst":{"reason":"published","priority":67.3,"kev":null,"epss":{"score":0.06917,"percentile":0.94088},"cvss":{"score":9,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"IOS","techniqueIds":[],"reportCount":2,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-20281#kev","url":"https://patchfirst.co/cve/CVE-2025-20281/","title":"[KEV] CVE-2025-20281: Cisco Identity Services Engine Injection Vulnerability","content_text":"Cisco · Identity Services Engine. In CISA KEV since 2025-07-28. ENISA EUVD lists it as exploited. EPSS 97.6% (higher than 99.9% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1106 Native API; T1059 Command and Scripting Interpreter. Priority 70.0 of 100.","summary":"Cisco Identity Services Engine Injection Vulnerability","date_published":"2025-07-28T00:00:00.000Z","date_modified":"2026-06-17T08:41:19.000Z","tags":["kev","public-exploit","T1106","T1059"],"_patchfirst":{"reason":"kev","priority":70,"kev":{"dateAdded":"2025-07-28","ransomware":false},"epss":{"score":0.97601,"percentile":0.99902},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Identity Services Engine","techniqueIds":["T1106","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-20337#kev","url":"https://patchfirst.co/cve/CVE-2025-20337/","title":"[KEV] CVE-2025-20337: Cisco Identity Services Engine Injection Vulnerability","content_text":"Cisco · Identity Services Engine. In CISA KEV since 2025-07-28. ENISA EUVD lists it as exploited. EPSS 74.5% (higher than 99.49% of CVEs). CVSS 10.0 CRITICAL. ATT&CK: T1106 Native API; T1059 Command and Scripting Interpreter. Priority 64.9 of 100.","summary":"Cisco Identity Services Engine Injection Vulnerability","date_published":"2025-07-28T00:00:00.000Z","date_modified":"2026-06-17T08:41:29.000Z","tags":["kev","T1106","T1059"],"_patchfirst":{"reason":"kev","priority":64.9,"kev":{"dateAdded":"2025-07-28","ransomware":false},"epss":{"score":0.74499,"percentile":0.99494},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Identity Services Engine","techniqueIds":["T1106","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-20282","url":"https://patchfirst.co/cve/CVE-2025-20282/","title":"CVE-2025-20282: Cisco ISE API Unauthenticated Remote Code Execution Vulnerability","content_text":"Cisco · Cisco Identity Services Engine Software. Not in CISA KEV. EPSS 38.7% (higher than 98.6% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 73.5 of 100.","summary":"Cisco ISE API Unauthenticated Remote Code Execution Vulnerability","date_published":"2025-06-25T00:00:00.000Z","date_modified":"2026-02-26T17:50:23.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":73.5,"kev":null,"epss":{"score":0.38719,"percentile":0.9858},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco Identity Services Engine Software","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-20188","url":"https://patchfirst.co/cve/CVE-2025-20188/","title":"CVE-2025-20188: A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client…","content_text":"Cisco · Cisco IOS XE Software. Not in CISA KEV. EPSS 27.5% (higher than 98.1% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 68.0 of 100.","summary":"A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client…","date_published":"2025-05-07T00:00:00.000Z","date_modified":"2025-06-06T16:24:05.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":68,"kev":null,"epss":{"score":0.27488,"percentile":0.9807},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Cisco IOS XE Software","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-20439#kev","url":"https://patchfirst.co/cve/CVE-2024-20439/","title":"[KEV] CVE-2024-20439: Cisco Smart Licensing Utility Static Credential Vulnerability","content_text":"Cisco · Smart Licensing Utility. In CISA KEV since 2025-03-31. ENISA EUVD lists it as exploited. EPSS 97.1% (higher than 99.89% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1552 Unsecured Credentials; T1106 Native API. Priority 69.8 of 100.","summary":"Cisco Smart Licensing Utility Static Credential Vulnerability","date_published":"2025-03-31T00:00:00.000Z","date_modified":"2026-06-17T07:07:06.000Z","tags":["kev","public-exploit","T1552","T1106"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2025-03-31","ransomware":false},"epss":{"score":0.9709,"percentile":0.99892},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"Smart Licensing Utility","techniqueIds":["T1552","T1106"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}