Tracker · Cybersecurity
Exploited vulnerabilities
Every flaw the U.S. Cybersecurity and Infrastructure Security Agency has confirmed attackers are using, with the deadline federal agencies have to patch it.
Updated Nov 2, 2026, 3:37 a.m. ET from CISA catalog version 2026.10.30
In the catalog
1,766
Added in 2026
282
245 in all of 2025
Added in Nov so far
0
8 in the last 7 days
2026 entries tied to ransomware
27
*Nov through Nov 2, 2026. Source: CISA Known Exploited Vulnerabilities catalog.
Entries matching “Cisco”
102 entries match. Page 1 of 3.
| Added | CVE | Vendor | Product | Patch deadline | Ransomware use |
|---|---|---|---|---|---|
| Oct 29 | CVE-2026-76418 | Cisco | Secure Firewall ASA Software and Cisco Secure FTD Software | Nov 1 | Unknown |
| Oct 14 | CVE-2026-76519 | Cisco | Secure Email Gateway | Oct 17 | Unknown |
| Sep 30 | CVE-2026-76504 | Cisco | Catalyst SD-WAN Manager | Oct 3 | Unknown |
| Sep 16 | CVE-2026-76460 | Cisco | Identity Services Engine | Sep 19 | Unknown |
| Sep 14 | CVE-2026-76461 | Cisco | Secure Email Gateway | Sep 17 | Unknown |
| Sep 9 | CVE-2026-20079 | Cisco | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Sep 12 | Unknown |
| Aug 11 | CVE-2026-20349 | Cisco | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Aug 14 | Unknown |
| Jul 29 | CVE-2026-20316 | Cisco | Secure Firewall Management Center (FMC) | Aug 1 | Known |
| Jul 13 | CVE-2008-4128 | Cisco | IOS | Jul 16 | Unknown |
| Jun 25 | CVE-2026-20230 | Cisco | Unified Communications Manager | Jun 28 | Unknown |
| Jun 15 | CVE-2026-20262 | Cisco | Catalyst SD-WAN Manager | Jun 29 | Unknown |
| Jun 9 | CVE-2026-20245 | Cisco | Catalyst SD-WAN Manager | Jun 23 | Unknown |
| May 14 | CVE-2026-20182 | Cisco | Catalyst SD-WAN | May 17 | Unknown |
| Apr 20 | CVE-2026-20133 | Cisco | Catalyst SD-WAN Manager | Apr 23 | Unknown |
| Apr 20 | CVE-2026-20128 | Cisco | Catalyst SD-WAN Manager | Apr 23 | Unknown |
| Apr 20 | CVE-2026-20122 | Cisco | Catalyst SD-WAN Manger | Apr 23 | Unknown |
| Mar 19 | CVE-2026-20131 | Cisco | Secure Firewall Management Center (FMC) | Mar 22 | Known |
| Feb 25 | CVE-2026-20127 | Cisco | Catalyst SD-WAN Controller and Manager | Feb 27 | Unknown |
| Feb 25 | CVE-2022-20775 | Cisco | SD-WAN | Feb 27 | Unknown |
| Jan 21 | CVE-2026-20045 | Cisco | Unified Communications Manager | Feb 11 | Unknown |
| Dec 17, 2025 | CVE-2025-20393 | Cisco | Multiple Products | Dec 24, 2025 | Unknown |
| Sep 29, 2025 | CVE-2025-20352 | Cisco | IOS and IOS XE | Oct 20, 2025 | Unknown |
| Sep 25, 2025 | CVE-2025-20362 | Cisco | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Sep 26, 2025 | Unknown |
| Sep 25, 2025 | CVE-2025-20333 | Cisco | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Sep 26, 2025 | Unknown |
| Jul 28, 2025 | CVE-2025-20337 | Cisco | Identity Services Engine | Aug 18, 2025 | Unknown |
| Jul 28, 2025 | CVE-2025-20281 | Cisco | Identity Services Engine | Aug 18, 2025 | Unknown |
| Mar 31, 2025 | CVE-2024-20439 | Cisco | Smart Licensing Utility | Apr 21, 2025 | Unknown |
| Mar 3, 2025 | CVE-2023-20118 | Cisco | Small Business RV Series Routers | Mar 24, 2025 | Unknown |
| Nov 12, 2024 | CVE-2014-2120 | Cisco | Adaptive Security Appliance (ASA) | Dec 3, 2024 | Unknown |
| Oct 24, 2024 | CVE-2024-20481 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Nov 14, 2024 | Unknown |
| Jul 2, 2024 | CVE-2024-20399 | Cisco | NX-OS | Jul 23, 2024 | Unknown |
| Apr 24, 2024 | CVE-2024-20359 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | May 1, 2024 | Unknown |
| Apr 24, 2024 | CVE-2024-20353 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | May 1, 2024 | Unknown |
| Feb 15, 2024 | CVE-2020-3259 | Cisco | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Mar 7, 2024 | Known |
| Oct 23, 2023 | CVE-2023-20273 | Cisco | Cisco IOS XE Web UI | Oct 27, 2023 | Unknown |
| Oct 16, 2023 | CVE-2023-20198 | Cisco | IOS XE Web UI | Oct 20, 2023 | Unknown |
| Oct 10, 2023 | CVE-2023-20109 | Cisco | IOS and IOS XE | Oct 31, 2023 | Unknown |
| Sep 13, 2023 | CVE-2023-20269 | Cisco | Adaptive Security Appliance and Firepower Threat Defense | Oct 4, 2023 | Known |
| May 19, 2023 | CVE-2016-6415 | Cisco | IOS, IOS XR, and IOS XE | Jun 9, 2023 | Unknown |
| May 19, 2023 | CVE-2004-1464 | Cisco | IOS | Jun 9, 2023 | Unknown |
| Apr 19, 2023 | CVE-2017-6742 | Cisco | IOS and IOS XE Software | May 10, 2023 | Unknown |
| Oct 24, 2022 | CVE-2020-3433 | Cisco | AnyConnect Secure | Nov 14, 2022 | Known |
| Oct 24, 2022 | CVE-2020-3153 | Cisco | AnyConnect Secure | Nov 14, 2022 | Known |
| Jun 8, 2022 | CVE-2019-15271 | Cisco | RV Series Routers | Jun 22, 2022 | Unknown |
| May 24, 2022 | CVE-2016-6367 | Cisco | Adaptive Security Appliance (ASA) | Jun 14, 2022 | Unknown |
| May 24, 2022 | CVE-2016-6366 | Cisco | Adaptive Security Appliance (ASA) | Jun 14, 2022 | Unknown |
| May 23, 2022 | CVE-2022-20821 | Cisco | IOS XR | Jun 13, 2022 | Unknown |
| Mar 25, 2022 | CVE-2018-0147 | Cisco | Secure Access Control System (ACS) | Apr 15, 2022 | Unknown |
| Mar 25, 2022 | CVE-2018-0125 | Cisco | VPN Routers | Apr 15, 2022 | Unknown |
| Mar 25, 2022 | CVE-2017-3881 | Cisco | IOS and IOS XE | Apr 15, 2022 | Unknown |
How this tracker works
We read CISA’s Known Exploited Vulnerabilities catalog several times a day and count entries by the date CISA added them. The catalog lists flaws with reliable evidence of active exploitation. The patch deadline is the date CISA sets for U.S. federal civilian agencies; CISA urges every organization to treat listed flaws as a priority.
“Known” ransomware use means CISA has confirmed a ransomware campaign used the flaw. “Unknown” means not confirmed, not ruled out. Catalog published October 30, 2026. CISA’s catalog
Tool
Is my software on the list?
Look up any vendor or product in the full catalog.