Skip to content

Secure Remote Access / VPN · head-to-head

Cisco vs OpenVPN

SSL/IPsec VPN gateways and ZTNA appliances. Counts are scoped to this segment and the selected published-date window. Cisco carries 2.5× the disclosed CVE volume of OpenVPN. Volume reflects disclosure practice and install base as much as code quality — read it with the severity mix. Sourced from the NIST NVD; lower counts indicate a smaller disclosed vulnerability surface — not necessarily lower risk.

01

Disclosure record

Bars are normalized per row to the larger value; the leading count is emphasized.

Metric comparison: Cisco versus OpenVPN. Each row gives the metric, Cisco’s count on the left and OpenVPN’s count on the right.
CiscoMetricOpenVPN
48Total CVEs19
3Critical3
18High12
27Medium4
0Low0
230Open in latest29
02

Risk profile

Each severity band as a share of the vendor's own total — strips out raw volume so the profiles compare directly.

Cisco

6.3% critical
Critical
36.3%
High
1837.5%
Medium
2756.3%
Low
00.0%

OpenVPN

15.8% critical
Critical
315.8%
High
1263.2%
Medium
421.1%
Low
00.0%
03

Recent activity

Latest in-window disclosures per vendor, newest first. Each ID links to its NVD record.

Cisco

Recent CVEs affecting Cisco
CVESeverityCVSSPublished
CVE-2026-20349(opens NVD record)High
8.6
Aug 11, 2026
CVE-2026-20025(opens NVD record)Medium
6.8
Mar 4, 2026
CVE-2026-20024(opens NVD record)Medium
6.8
Mar 4, 2026
CVE-2026-20023(opens NVD record)Medium
6.1
Mar 4, 2026
CVE-2026-20022(opens NVD record)Medium
6.1
Mar 4, 2026
CVE-2026-20021(opens NVD record)Medium
4.3
Mar 4, 2026

OpenVPN

Recent CVEs affecting OpenVPN
CVESeverityCVSSPublished
CVE-2026-13379(opens NVD record)Critical
9.1
Jul 30, 2026
CVE-2026-13117(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-12996(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-12932(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-11771(opens NVD record)High
7.5
Jul 30, 2026
CVE-2025-3110(opens NVD record)High
7.5
Jul 8, 2026

Track new CVEs for these vendors

Get an email the moment a new vulnerability is disclosed for the products you rely on.

Get alerts