Cisco

Security Risk Profile

/100

medium

Security Risk Score

Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from November 15, 2024 to present

1000

Total CVEs

283

Critical+High

Exploited

271

Unpatched

Threat Assessment

Avg CVSS

6.5

Base severity

Avg EPSS

Exploit probability

Unpatched

271

Critical/High

Risk Level

47/100

medium

⚠️ 92 Active Exploits⚡ 36 Zero-Days🆕 15Fresh (<7d)📈 79 in Last 30 Days

Severity Distribution

Critical

High

220

Medium

389

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

XSS

117

Input Validation

113

Command Injection

OS Command Injection

Path Traversal

Most Affected Products

1. Cisco IOS11165

2. Cisco IOS XE9299

3. Cisco Catalyst SD-WAN Manager2416

4. Cisco Unified Computing System1568

5. Cisco Adaptive Security Appliance Software1518

Recent Vulnerabilities

See more →

CVE-2026-20355

CVSS 5.9medium

Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

Sep 2, 2026🔧 No Patch

CVE-2026-20354

CVSS 5.9medium

Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

Sep 2, 2026🔧 No Patch

CVE-2026-20281

CVSS 7.5high

Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability

Sep 2, 2026🔧 No Patch

CVE-2026-20278

CVSS 8.8high