SecAlerts
Cisco logo

Cisco

Security Risk Profile

45
/100
medium

Security Risk Score

Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from November 6, 2024 to present

1000
Total CVEs
275
Critical+High
93
Exploited
264
Unpatched

Threat Assessment

Avg CVSS
6.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
264
Critical/High
Risk Level
45/100
medium
⚠️ 93 Active Exploits 36 Zero-Days🆕 14Fresh (<7d)📈 49 in Last 30 Days

Severity Distribution

Critical
59
High
216
Medium
405
Low
1

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
21

Age Distribution

Common Weaknesses (CWE)

1
XSS
125
2
Input Validation
111
3
Command Injection
35
4
Path Traversal
29
5
OS Command Injection
29

Most Affected Products

1. Cisco IOS11165
2. Cisco IOS XE9032
3. Cisco Catalyst SD-WAN Manager2416
4. Cisco Adaptive Security Appliance Software1518
5. Cisco Secure Firewall Threat Defense994

Recent Vulnerabilities

See more →
ZDI-26-581
unknown

Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution Vulnerability

8/13/2026🔧 No Patch
ZDI-26-579
unknown

Cisco Identity Services Engine zipFiles Directory Traversal Remote Code Execution Vulnerability

8/13/2026🔧 No Patch
ZDI-CAN-28709
unknown

ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution Vulnerability

8/13/2026🔧 No Patch
ZDI-CAN-29197
unknown

ZDI-26-579: Cisco Identity Services Engine zipFiles Directory Traversal Remote Code Execution Vulnerability

8/13/2026🔧 No Patch
ZDI-26-582
unknown

Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure Vulnerability

8/13/2026🔧 No Patch
ZDI-CAN-28708
unknown

ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure Vulnerability

8/13/2026🔧 No Patch
ZDI-CAN-29246
unknown

ZDI-26-580: Cisco Identity Services Engine Missing Authentication for Critical Function Information Disclosure Vulnerability

8/13/2026🔧 No Patch
ZDI-26-580
unknown

Cisco Identity Services Engine Missing Authentication for Critical Function Information Disclosure Vulnerability

8/13/2026🔧 No Patch
bleepingcomputer-20260811194531
unknown

Cisco warns of ASA and FTD VPN flaw exploited to crash devices

8/11/2026⚠ Exploited🔧 No Patch
cisco-sa-asaftd-vpn-dos-dzv4mQFF
unknown

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

8/11/2026🔧 No Patch

Monitor Cisco in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.