Tracker · Cybersecurity
Exploited vulnerabilities
Every flaw the U.S. Cybersecurity and Infrastructure Security Agency has confirmed attackers are using, with the deadline federal agencies have to patch it.
Updated Nov 4, 2026, 3:39 p.m. ET from CISA catalog version 2026.11.04
In the catalog
1,768
Added in 2026
284
245 in all of 2025
Added in Nov so far
2
6 in the last 7 days
2026 entries tied to ransomware
27
*Nov through Nov 4, 2026. Source: CISA Known Exploited Vulnerabilities catalog.
Entries matching “Cisco”
102 entries match. Page 2 of 3.
| Added | CVE | Vendor | Product | Patch deadline | Ransomware use |
|---|---|---|---|---|---|
| Mar 25, 2022 | CVE-2015-0666 | Cisco | Prime Data Center Network Manager (DCNM) | Apr 15, 2022 | Unknown |
| Mar 25, 2022 | CVE-2010-3035 | Cisco | IOS XR | Apr 15, 2022 | Unknown |
| Mar 25, 2022 | CVE-2009-2055 | Cisco | IOS XR | Apr 15, 2022 | Unknown |
| Mar 3, 2022 | CVE-2022-20708 | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2022-20703 | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2022-20701 | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2022-20700 | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2022-20699 | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2019-1652 | Cisco | Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2018-0180 | Cisco | IOS Software | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2018-0179 | Cisco | IOS Software | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2018-0175 | Cisco | IOS, XR, and XE Software | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2018-0174 | Cisco | IOS XE Software | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2018-0173 | Cisco | IOS and IOS XE Software | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2018-0172 | Cisco | IOS and IOS XE Software | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2018-0167 | Cisco | IOS, XR, and XE Software | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2018-0161 | Cisco | IOS Software | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2018-0159 | Cisco | IOS Software and Cisco IOS XE Software | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2018-0158 | Cisco | IOS Software and Cisco IOS XE Software | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2018-0156 | Cisco | IOS Software and Cisco IOS XE Software | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2018-0155 | Cisco | Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2018-0154 | Cisco | IOS Software | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2018-0151 | Cisco | IOS and IOS XE Software | Mar 17, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-6744 | Cisco | IOS software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-6743 | Cisco | IOS and IOS XE Software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-6740 | Cisco | IOS and IOS XE Software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-6739 | Cisco | IOS and IOS XE Software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-6738 | Cisco | IOS and IOS XE Software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-6737 | Cisco | IOS and IOS XE Software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-6736 | Cisco | IOS and IOS XE Software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-6663 | Cisco | IOS and IOS XE Software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-6627 | Cisco | IOS and IOS XE Software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-12319 | Cisco | IOS XE Software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-12240 | Cisco | IOS and IOS XE Software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-12238 | Cisco | Catalyst 6800 Series Switches | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-12237 | Cisco | IOS and IOS XE Software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-12235 | Cisco | IOS software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-12234 | Cisco | IOS software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-12233 | Cisco | IOS software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-12232 | Cisco | IOS software | Mar 24, 2022 | Unknown |
| Mar 3, 2022 | CVE-2017-12231 | Cisco | IOS software | Mar 24, 2022 | Unknown |
| Nov 3, 2021 | CVE-2021-1498 | Cisco | HyperFlex HX | Nov 17, 2021 | Unknown |
| Nov 3, 2021 | CVE-2021-1497 | Cisco | HyperFlex HX | Nov 17, 2021 | Unknown |
| Nov 3, 2021 | CVE-2020-3580 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | May 3, 2022 | Known |
| Nov 3, 2021 | CVE-2020-3569 | Cisco | IOS XR | May 3, 2022 | Unknown |
| Nov 3, 2021 | CVE-2020-3566 | Cisco | IOS XR | May 3, 2022 | Unknown |
| Nov 3, 2021 | CVE-2020-3452 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | May 3, 2022 | Unknown |
| Nov 3, 2021 | CVE-2020-3161 | Cisco | Cisco IP Phones | May 3, 2022 | Unknown |
| Nov 3, 2021 | CVE-2020-3118 | Cisco | IOS XR | May 3, 2022 | Unknown |
| Nov 3, 2021 | CVE-2019-1653 | Cisco | Small Business RV320 and RV325 Routers | May 3, 2022 | Unknown |
How this tracker works
We read CISA’s Known Exploited Vulnerabilities catalog several times a day and count entries by the date CISA added them. The catalog lists flaws with reliable evidence of active exploitation. The patch deadline is the date CISA sets for U.S. federal civilian agencies; CISA urges every organization to treat listed flaws as a priority.
“Known” ransomware use means CISA has confirmed a ransomware campaign used the flaw. “Unknown” means not confirmed, not ruled out. Catalog published November 4, 2026. CISA’s catalog
Tool
Is my software on the list?
Look up any vendor or product in the full catalog.