Skip to content

Secure Remote Access / VPN · head-to-head

Cisco vs OpenVPN

SSL/IPsec VPN gateways and ZTNA appliances. Counts are scoped to this segment and the selected published-date window. Cisco carries 2.6× the disclosed CVE volume of OpenVPN. Volume reflects disclosure practice and install base as much as code quality — read it with the severity mix. Sourced from the NIST NVD; lower counts indicate a smaller disclosed vulnerability surface — not necessarily lower risk.

01

Disclosure record

Bars are normalized per row to the larger value; the leading count is emphasized.

Metric comparison: Cisco versus OpenVPN. Each row gives the metric, Cisco’s count on the left and OpenVPN’s count on the right.
CiscoMetricOpenVPN
90Total CVEs34
3Critical6
39High21
48Medium7
0Low0
230Open in latest29
02

Risk profile

Each severity band as a share of the vendor's own total — strips out raw volume so the profiles compare directly.

Cisco

3.3% critical
Critical
33.3%
High
3943.3%
Medium
4853.3%
Low
00.0%

OpenVPN

17.6% critical
Critical
617.6%
High
2161.8%
Medium
720.6%
Low
00.0%
03

Recent activity

Latest in-window disclosures per vendor, newest first. Each ID links to its NVD record.

Cisco

Recent CVEs affecting Cisco
CVESeverityCVSSPublished
CVE-2026-20349(opens NVD record)High
8.6
Aug 11, 2026
CVE-2026-20025(opens NVD record)Medium
6.8
Mar 4, 2026
CVE-2026-20024(opens NVD record)Medium
6.8
Mar 4, 2026
CVE-2026-20023(opens NVD record)Medium
6.1
Mar 4, 2026
CVE-2026-20022(opens NVD record)Medium
6.1
Mar 4, 2026
CVE-2026-20021(opens NVD record)Medium
4.3
Mar 4, 2026

OpenVPN

Recent CVEs affecting OpenVPN
CVESeverityCVSSPublished
CVE-2026-13379(opens NVD record)Critical
9.1
Jul 30, 2026
CVE-2026-13117(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-12996(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-12932(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-11771(opens NVD record)High
7.5
Jul 30, 2026
CVE-2025-3110(opens NVD record)High
7.5
Jul 8, 2026

Track new CVEs for these vendors

Get an email the moment a new vulnerability is disclosed for the products you rely on.

Get alerts