Is itCheck something

Attack list

Cisco

102 attacked bugs

Yes. Attackers are using Cisco bugs right now.

What to do

Ask whoever runs it (your web host or IT team) to install the vendor's latest security update now.

Attackers keep using these against anything that hasn't updated. Updating closes them.

BugConfirmed in attacks

  1. A crafted request can make Cisco firewalls restartCVE-2026-76418Oct 29, 2026
  2. Cisco email security gateways let attackers write filesCVE-2026-76519Oct 14, 2026
  3. Attackers can get admin access to Cisco SD-WAN ManagerCVE-2026-76504Sep 30, 2026
  4. Cisco Identity Services Engine bug: incorrect use of privileged apisCVE-2026-76460Sep 16, 2026
  5. Cisco Secure Email Gateway bug: gateway SQL injectionCVE-2026-76461Sep 14, 2026
  6. Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management bug: management center authentication bypass using an alternate path or channelCVE-2026-20079Sep 9, 2026
  7. Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) bug: firewall adaptive security appliance (asa) and secure firewall threat defense (ftd) heap inspectionCVE-2026-20349Aug 11, 2026
  8. Cisco Secure Firewall Management Center (FMC) bug: firewall management center use of hard-coded passwordCVE-2026-20316Jul 29, 2026
  9. Cisco IOS bug: cross-site request forgeryCVE-2008-4128Jul 13, 2026
  10. Cisco Unified Communications Manager bug: communications manager server-side request forgery (SSRF)CVE-2026-20230Jun 25, 2026
  11. Cisco Catalyst SD-WAN Manager bug: manager directory or path traversalCVE-2026-20262Jun 15, 2026
  12. Cisco Catalyst SD-WAN Manager bug: manager improper encoding or escaping of outputCVE-2026-20245Jun 9, 2026
  13. Cisco Catalyst SD-WAN bug: controller authentication bypassCVE-2026-20182May 14, 2026
  14. Cisco Catalyst SD-WAN Manger bug: manager incorrect use of privileged apisCVE-2026-20122Apr 20, 2026
  15. Cisco Catalyst SD-WAN Manager bug: manager exposure of sensitive information to an unauthorized actorCVE-2026-20133Apr 20, 2026
  16. Cisco Catalyst SD-WAN Manager bug: manager storing passwords in a recoverable formatCVE-2026-20128Apr 20, 2026
  17. Cisco Secure Firewall Management Center (FMC) bug: firewall management center (fmc) software and cisco security cloud control (scc) firewall management deserialization of untrusted dataCVE-2026-20131Mar 19, 2026
  18. Cisco SD-WAN bug: path traversalCVE-2022-20775Feb 25, 2026
  19. Cisco Catalyst SD-WAN Controller and Manager bug: controller and manager authentication bypassCVE-2026-20127Feb 25, 2026
  20. Cisco Unified Communications Manager bug: communications products code injectionCVE-2026-20045Jan 21, 2026
  21. Cisco bug: improper input validationCVE-2025-20393Dec 17, 2025
  22. Cisco IOS and IOS XE bug: and ios xe software snmp denial of service and remote code executionCVE-2025-20352Sep 29, 2025
  23. Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense bug: firewall adaptive security (asa) appliance and secure firewall threat defense (ftd) missing authorizationCVE-2025-20362Sep 25, 2025
  24. Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense bug: firewall adaptive security appliance (asa) and secure firewall threat defense (ftd) buffer overflowCVE-2025-20333Sep 25, 2025
  25. Cisco Identity Services Engine bug: injectionCVE-2025-20337Jul 28, 2025
  26. Cisco Identity Services Engine bug: injectionCVE-2025-20281Jul 28, 2025
  27. Cisco Smart Licensing Utility bug: licensing utility static credentialCVE-2024-20439Mar 31, 2025
  28. Cisco Small Business RV Series Routers bug: business rv series routers command injectionCVE-2023-20118Mar 3, 2025
  29. Cisco Adaptive Security Appliance (ASA) bug: security appliance (asa) cross-site scripting (XSS)CVE-2014-2120Nov 12, 2024
  30. Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) bug: asa and ftd denial-of-serviceCVE-2024-20481Oct 24, 2024
  31. Cisco NX-OS bug: nx-OS command injectionCVE-2024-20399Jul 2, 2024
  32. Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) bug: asa and ftd privilege escalationCVE-2024-20359Apr 24, 2024
  33. Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) bug: asa and ftd denial of serviceCVE-2024-20353Apr 24, 2024
  34. Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) bug: asa and ftd information disclosureCVE-2020-3259Feb 15, 2024
  35. Cisco IOS XE Web UI bug: xe web ui command injectionCVE-2023-20273Oct 23, 2023
  36. Cisco IOS XE Web UI bug: xe web ui privilege escalationCVE-2023-20198Oct 16, 2023
  37. Cisco IOS and IOS XE bug: and ios xe group encrypted transport VPN out-of-bounds writeCVE-2023-20109Oct 10, 2023
  38. Cisco Adaptive Security Appliance and Firepower Threat Defense bug: security appliance and firepower threat defense unauthorized accessCVE-2023-20269Sep 13, 2023
  39. Cisco IOS bug: denial-of-serviceCVE-2004-1464May 19, 2023
  40. Cisco IOS, IOS XR, and IOS XE bug: , ios xr, and ios xe ikev1 information disclosureCVE-2016-6415May 19, 2023
  41. Cisco IOS and IOS XE Software bug: and ios xe software snmp remote code executionCVE-2017-6742Apr 19, 2023
  42. Cisco AnyConnect Secure bug: mobility client for windows DLL hijackingCVE-2020-3433Oct 24, 2022
  43. Cisco AnyConnect Secure bug: mobility client for windows uncontrolled search pathCVE-2020-3153Oct 24, 2022
  44. Cisco RV Series Routers bug: rv series routers deserialization of untrusted dataCVE-2019-15271Jun 8, 2022
  45. Cisco Adaptive Security Appliance (ASA) bug: security appliance (asa) snmp buffer overflowCVE-2016-6366May 24, 2022
  46. Cisco Adaptive Security Appliance (ASA) bug: security appliance (asa) cli remote code executionCVE-2016-6367May 24, 2022
  47. Cisco IOS XR bug: xr open portCVE-2022-20821May 23, 2022
  48. Cisco Secure Access Control System (ACS) bug: access control system java deserializationCVE-2018-0147Mar 25, 2022
  49. Cisco VPN Routers bug: VPN routers remote code executionCVE-2018-0125Mar 25, 2022
  50. Cisco IOS and IOS XE bug: and ios xe remote code executionCVE-2017-3881Mar 25, 2022
  51. Cisco Prime Data Center Network Manager (DCNM) bug: center network manager (dcnm) directory traversalCVE-2015-0666Mar 25, 2022
  52. Cisco IOS XR bug: xr border gateway protocol (bgp) denial-of-serviceCVE-2010-3035Mar 25, 2022
  53. Cisco IOS XR bug: xr border gateway protocol (bgp) denial-of-serviceCVE-2009-2055Mar 25, 2022
  54. Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers bug: business rv series routers stack-based buffer overflowCVE-2022-20708Mar 3, 2022
  55. Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers bug: business rv series routers stack-based buffer overflowCVE-2022-20703Mar 3, 2022
  56. Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers bug: business rv series routers stack-based buffer overflowCVE-2022-20701Mar 3, 2022
  57. Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers bug: business rv series routers stack-based buffer overflowCVE-2022-20700Mar 3, 2022
  58. Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers bug: business rv series routers stack-based buffer overflowCVE-2022-20699Mar 3, 2022
  59. Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers bug: business routers improper input validationCVE-2019-1652Mar 3, 2022
  60. Cisco IOS Software bug: software denial-of-serviceCVE-2018-0180Mar 3, 2022
  61. Cisco IOS Software bug: software denial-of-serviceCVE-2018-0179Mar 3, 2022
  62. Cisco IOS, XR, and XE Software bug: ios, xr, and xe software buffer overflowCVE-2018-0175Mar 3, 2022
  63. Cisco IOS XE Software bug: software and cisco ios xe software improper input validationCVE-2018-0174Mar 3, 2022
  64. Cisco IOS and IOS XE Software bug: and ios xe software improper input validationCVE-2018-0173Mar 3, 2022
  65. Cisco IOS and IOS XE Software bug: and ios xe software improper input validationCVE-2018-0172Mar 3, 2022
  66. Cisco IOS, XR, and XE Software bug: ios, xr, and xe software buffer overflowCVE-2018-0167Mar 3, 2022
  67. Cisco IOS Software bug: software resource management errorsCVE-2018-0161Mar 3, 2022
  68. Cisco IOS Software and Cisco IOS XE Software bug: and xe software internet key exchange version 1 denial-of-serviceCVE-2018-0159Mar 3, 2022
  69. Cisco IOS Software and Cisco IOS XE Software bug: and xe software internet key exchange memory leakCVE-2018-0158Mar 3, 2022
  70. Cisco IOS Software and Cisco IOS XE Software bug: software and cisco ios xe software smart install denial-of-serviceCVE-2018-0156Mar 3, 2022
  71. Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches bug: bidirectional forwarding detection denial-of-serviceCVE-2018-0155Mar 3, 2022
  72. Cisco IOS Software bug: software integrated services module for VPN denial-of-serviceCVE-2018-0154Mar 3, 2022
  73. Cisco IOS and IOS XE Software bug: software and cisco ios xe software quality of service remote code executionCVE-2018-0151Mar 3, 2022
  74. Cisco IOS software bug: software snmp remote code executionCVE-2017-6744Mar 3, 2022
  75. Cisco IOS and IOS XE Software bug: and ios xe software snmp remote code executionCVE-2017-6743Mar 3, 2022
  76. Cisco IOS and IOS XE Software bug: and ios xe software snmp remote code executionCVE-2017-6740Mar 3, 2022
  77. Cisco IOS and IOS XE Software bug: and ios xe software snmp remote code executionCVE-2017-6739Mar 3, 2022
  78. Cisco IOS and IOS XE Software bug: and ios xe software snmp remote code executionCVE-2017-6738Mar 3, 2022
  79. Cisco IOS and IOS XE Software bug: and ios xe software snmp remote code executionCVE-2017-6737Mar 3, 2022
  80. Cisco IOS and IOS XE Software bug: and ios xe software snmp remote code executionCVE-2017-6736Mar 3, 2022
  81. Cisco IOS and IOS XE Software bug: software and cisco ios xe software denial-of-serviceCVE-2017-6663Mar 3, 2022
  82. Cisco IOS and IOS XE Software bug: software and cisco ios xe software udp packet processing denial-of-serviceCVE-2017-6627Mar 3, 2022
  83. Cisco IOS XE Software bug: xe software ethernet virtual private network border gateway protocol denial-of-serviceCVE-2017-12319Mar 3, 2022
  84. Cisco IOS and IOS XE Software bug: and ios xe software dhcp remote code executionCVE-2017-12240Mar 3, 2022
  85. Cisco Catalyst 6800 Series Switches bug: series switches vpls denial-of-serviceCVE-2017-12238Mar 3, 2022
  86. Cisco IOS and IOS XE Software bug: and ios xe software internet key exchange denial-of-serviceCVE-2017-12237Mar 3, 2022
  87. Cisco IOS software bug: software for cisco industrial ethernet switches profinet denial-of-serviceCVE-2017-12235Mar 3, 2022
  88. Cisco IOS software bug: software common industrial protocol request denial-of-serviceCVE-2017-12234Mar 3, 2022
  89. Cisco IOS software bug: software common industrial protocol request denial-of-serviceCVE-2017-12233Mar 3, 2022
  90. Cisco IOS software bug: software for cisco integrated services routers denial-of-serviceCVE-2017-12232Mar 3, 2022
  91. Cisco IOS software bug: software network address translation denial-of-serviceCVE-2017-12231Mar 3, 2022
  92. Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) bug: asa and ftd read-only path traversalCVE-2020-3452Nov 3, 2021
  93. Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) bug: asa and ftd cross-site scripting (XSS)CVE-2020-3580Nov 3, 2021
  94. Cisco HyperFlex HX bug: hx installer virtual machine command injectionCVE-2021-1497Nov 3, 2021
  95. Cisco HyperFlex HX bug: hx data platform command injectionCVE-2021-1498Nov 3, 2021
  96. Cisco IOS and IOS XE bug: and ios xe software smart install remote code executionCVE-2018-0171Nov 3, 2021
  97. Cisco IOS XR bug: xr software discovery protocol format stringCVE-2020-3118Nov 3, 2021
  98. Cisco IOS XR bug: xr software dvmrp memory exhaustionCVE-2020-3566Nov 3, 2021
  99. Cisco IOS XR bug: xr software dvmrp memory exhaustionCVE-2020-3569Nov 3, 2021
  100. Cisco IP Phones bug: ip phones web server remote code execution and denial-of-serviceCVE-2020-3161Nov 3, 2021
  101. Cisco Small Business RV320 and RV325 Routers bug: business rv320 and rv325 routers information disclosureCVE-2019-1653Nov 3, 2021
  102. Cisco Adaptive Security Appliance (ASA) bug: security appliance (asa) denial-of-serviceCVE-2018-0296Nov 3, 2021

From the US government's list of bugs confirmed in real attacks (CISA KEV). Check everything you use.