Vendor scorecard
Cisco
Routing, switching, security and collaboration platforms — the broadest CVE surface in enterprise networking.
CPE: cisco
Product families
10
Open in latest
2,331
Inferred — see methodology
Last disclosure
Sep 30, 2026
01
Product categories
10 trackedCVE volume, severity mix and the inferred latest shipping version per category.
| Category | CVEs | Volume | Severity mix | Open | Inferred latest |
|---|---|---|---|---|---|
| Identity Services EngineIdentity & Access Managementidentity_services_engine | 39 | 193 | 3.3.0HIGH | ||
| ASA / FTD (Firewall)NGFW / Network Security · Secure Remote Access / VPN · Network Detection / IDS-IPSadaptive_security_appliance_software, firepower_threat_defense, asa | 26 | 232 | 6.6.1MED | ||
| RoutingRouting & Switchingios_xe, ios_xr, ios | 20 | 1,034 | 16.12.3HIGH | ||
| DNA / Catalyst Center + vManageNetwork Management & Monitoringcatalyst_center, catalyst_sd-wan_manager | 18 | 75 | 26.1.2.1HIGH | ||
| Firepower Management CenterNetwork Management & Monitoringfirepower_management_center, secure_firewall_management_center | 6 | 142 | 10.0.1HIGH | ||
| WirelessWireless LANmeraki_mx_firmware, meraki_mr_firmware, wireless_lan_controller… | 4 | 112 | 17.9.0.135MED | ||
| Collaborationunified_communications_manager, webex_meetings, webex_meetings_server… | 3 | 378 | 14.3.1HIGH | ||
| SD-WANSD-WAN & SASEios_xe_sd-wan | 1 | 23 | 17.3.1aMED | ||
| SwitchingRouting & Switchingnx-os, nxos | 0 | 275 | 14.2\(1j\)HIGH | ||
| Umbrellaumbrella | 0 | 0 | unknown |
Each count is distinct CVEs within that category. A CVE affecting more than one category is counted in each, so these can sum to more than the Cisco total above.
02
Disclosure trend
12 monthsCumulative CVEs published on or before each month-end over the last 12 months, stacked by CVSS severity. A fixed 12-month window — independent of the date filter above.
- Critical
- High
- Medium
- Low
03
Recent CVEs
12 shownMost recently published, newest first. Each ID links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-76504(opens NVD record) | Critical | 9.8 | A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling of URI encoding in an HTTP request, which allows the request to bypass an authentication rule that is intended to restrict access to a specific API endpoint. An attacker could exploit this vulnerability by sending a crafted HTTP request to the API of the affected system. A successful exploit could allow the attacker to bypass authentication and gain access to the API as the admin user. | Sep 30, 2026 |
| CVE-2026-76460(opens NVD record) | Critical | 10.0 | A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface. | Sep 16, 2026 |
| CVE-2026-76451(opens NVD record) | Medium | 4.9 | A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the affected APIs before it is used to build database queries. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to execute arbitrary SQL or HQL queries against the underlying database, which could allow the attacker to view or modify data that they are not authorized to access. To exploit this vulnerability, the attacker must have valid administrative credentials. | Sep 16, 2026 |
| CVE-2026-76450(opens NVD record) | Medium | 4.9 | A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the affected APIs before it is used to build database queries. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to execute arbitrary SQL or HQL queries against the underlying database, which could allow the attacker to view or modify data that they are not authorized to access. To exploit this vulnerability, the attacker must have valid administrative credentials. | Sep 16, 2026 |
| CVE-2026-76449(opens NVD record) | Medium | 4.9 | A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the affected APIs before it is used to build database queries. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to execute arbitrary SQL or HQL queries against the underlying database, which could allow the attacker to view or modify data that they are not authorized to access. To exploit this vulnerability, the attacker must have valid administrative credentials. | Sep 16, 2026 |
| CVE-2026-76448(opens NVD record) | Medium | 4.9 | A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the affected APIs before it is used to build database queries. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to execute arbitrary SQL or HQL queries against the underlying database, which could allow the attacker to view or modify data that they are not authorized to access. To exploit this vulnerability, the attacker must have valid administrative credentials. | Sep 16, 2026 |
| CVE-2026-76447(opens NVD record) | Medium | 5.3 | A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to cause an administrative reload of the OCSP responder certificate and key material. This vulnerability is due to missing authentication on a function of the OCSP responder. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to cause the OCSP responder to reload certificate and key material on demand. | Sep 16, 2026 |
| CVE-2026-76446(opens NVD record) | Medium | 4.9 | A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affected device. This vulnerability is due to improper restriction of XML external entity references. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to read specific files on the affected system that the underlying process has permission to access. | Sep 16, 2026 |
| CVE-2026-76444(opens NVD record) | Medium | 5.3 | A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from an affected device. This vulnerability is due to missing authentication on the Policy Runtime Repository Table (PRRT) service. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to obtain sensitive configuration information from the affected device. | Sep 16, 2026 |
| CVE-2026-76439(opens NVD record) | Medium | 5.3 | A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status events into the endpoint posture pipeline. This vulnerability is due to insufficient authentication on an internal interface that is exposed through the guest portal. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to manipulate the posture status on the affected system. | Sep 16, 2026 |
| CVE-2026-76434(opens NVD record) | Medium | 4.9 | A vulnerability in the certificate import functionality of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read arbitrary files from the affected system. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient validation of user-supplied input by the affected feature. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to read arbitrary files from the affected device, which could contain sensitive information. | Sep 16, 2026 |
| CVE-2026-76433(opens NVD record) | Medium | 5.3 | A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected files on an affected device. This vulnerability is due to insufficient validation of directory traversal character sequences in a user-supplied path when the software processes provisioning resource requests. An attacker could exploit this vulnerability by sending a crafted request to the provisioning download service. A successful exploit could allow the attacker to access protected files without authentication, potentially exposing sensitive information. | Sep 16, 2026 |
115 CVEs · 10 product families