SecAlerts
C

Cisco

Security Risk Profile

51
/100
medium

Security Risk Score

Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from February 26, 2025 to present

1000
Total CVEs
313
Critical+High
86
Exploited
302
Unpatched

Threat Assessment

Avg CVSS
6.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
302
Critical/High
Risk Level
51/100
medium
⚠️ 86 Active Exploits⚡ 33 Zero-Days🆕 10Fresh (<7d)📈 130 in Last 30 Days

Severity Distribution

Critical
89
High
224
Medium
352
Low
3

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
15

Age Distribution

Common Weaknesses (CWE)

1
Input Validation
98
2
XSS
94
3
Command Injection
38
4
OS Command Injection
31
5
Path Traversal
28

Most Affected Products

1. Cisco IOS XE7925
2. Cisco IOS2462
3. Cisco Adaptive Security Appliance Software1970
4. Cisco Catalyst SD-WAN Manager1625
5. Cisco Secure Firewall Threat Defense1563

Recent Vulnerabilities

See more →
https://reddit.com/r/sysadmin/comments/1wp9n8z/psa_cisco_ise_cvss_100_cve202676460_actively/
unknown

PSA: Cisco ISE CVSS 10.0 (CVE-2026-76460) — actively exploited, no workarounds

Sep 24, 2026🔧 No Patch
https://reddit.com/r/cybersecurity/comments/1wp9l25/cisco_ise_scores_a_perfect_cvss_100/
unknown

Cisco ISE scores a perfect CVSS 10.0 — unauthenticated API bypass to root (CVE-2026-76460)

Sep 24, 2026🔧 No Patch
ZDI-26-719
unknown

Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability

Sep 22, 2026🔧 No Patch
ZDI-CAN-31647
unknown

ZDI-26-719: Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability

Sep 22, 2026🔧 No Patch
ZDI-CAN-31320
unknown

ZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability

Sep 18, 2026🔧 No Patch
ZDI-26-717
unknown

Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability

Sep 18, 2026🔧 No Patch
ZDI-CAN-31322
unknown

ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure Vulnerability

Sep 18, 2026🔧 No Patch
ZDI-26-716
unknown

Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability

Sep 18, 2026🔧 No Patch
ZDI-26-718
unknown

Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure Vulnerability

Sep 18, 2026🔧 No Patch
ZDI-CAN-30945
unknown

ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability

Sep 18, 2026🔧 No Patch

Monitor Cisco in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.