Cisco: istismar edilen açıklar
- 101istismar edilen açık
- 7fidye yazılımlarınca kullanılıyor
- 14 Eki 2026son eklenen
- IOS and IOS XE Software 14
- Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) 6
- IOS XR 6
- IOS software 6
- Catalyst SD-WAN Manager 5
- Small Business RV160, RV260, RV340, and RV345 Series Routers 5
- IOS and IOS XE 4
- Adaptive Security Appliance (ASA) 4
- IOS Software 4
- Identity Services Engine 3
- IOS Software and Cisco IOS XE Software 3
- Secure Email Gateway 2
- Secure Firewall Management Center (FMC) 2
- IOS 2
- Unified Communications Manager 2
- Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense 2
- AnyConnect Secure 2
- IOS, XR, and XE Software 2
- IOS XE Software 2
- HyperFlex HX 2
- Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management 1
- Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) 1
- Catalyst SD-WAN 1
- Catalyst SD-WAN Manger 1
- Catalyst SD-WAN Controller and Manager 1
- SD-WAN 1
- Multiple Products 1
- Smart Licensing Utility 1
- Small Business RV Series Routers 1
- NX-OS 1
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 14 Eki 2026 | Relative Path Traversal | Secure Email Gateway | Kritik 9,8 | 2,2% |
| 30 Eyl 2026 | Hex Encoding | Catalyst SD-WAN Manager | Kritik 9,8 | 39% |
| 16 Eyl 2026 | Incorrect Use of Privileged APIs | Identity Services Engine | Kritik 10,0 | 76% |
| 14 Eyl 2026 | SQL Injection | Secure Email Gateway | Kritik 9,8 | 30% |
| 9 Eyl 2026 | Firewall Management Center Authentication Bypass Using an Alternate Path or Channel | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Kritik 10,0 | 88% |
| 11 Ağu 2026 | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Yüksek 8,6 | 1,0% |
| 29 Tem 2026 | Secure Firewall Management Center Use of Hard-coded Password | Secure Firewall Management Center (FMC) | Orta 5,3 | 35% |
| 13 Tem 2026 | Cross-Site Request Forgery | IOS | Yüksek 8,1 | 34% |
| 25 Haz 2026 | Server-Side Request Forgery (SSRF) | Unified Communications Manager | Yüksek 8,6 | 88% |
| 15 Haz 2026 | Directory or Path Traversal | Catalyst SD-WAN Manager | Orta 6,5 | 29% |
| 9 Haz 2026 | Improper Encoding or Escaping of Output | Catalyst SD-WAN Manager | Yüksek 7,8 | 25% |
| 14 May 2026 | Controller Authentication Bypass | Catalyst SD-WAN | Kritik 10,0 | 92% |
| 20 Nis 2026 | Exposure of Sensitive Information to an Unauthorized Actor | Catalyst SD-WAN Manager | Orta 6,5 | 31% |
| 20 Nis 2026 | Storing Passwords in a Recoverable Format | Catalyst SD-WAN Manager | Yüksek 7,5 | 7,3% |
| 20 Nis 2026 | Catalyst SD-WAN Manager Incorrect Use of Privileged APIs | Catalyst SD-WAN Manger | Orta 5,4 | 26% |
| 19 Mar 2026 | Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data | Secure Firewall Management Center (FMC) | Kritik 10,0 | 43% |
| 25 Şub 2026 | Authentication Bypass | Catalyst SD-WAN Controller and Manager | Kritik 10,0 | 89% |
| 25 Şub 2026 | Path Traversal | SD-WAN | Yüksek 7,8 | 12% |
| 21 Oca 2026 | Unified Communications Products Code Injection | Unified Communications Manager | Yüksek 8,2 | 4,5% |
| 17 Ara 2025 | Improper Input Validation | Multiple Products | Kritik 10,0 | 32% |
| 29 Eyl 2025 | Software SNMP Denial of Service and Remote Code Execution | IOS and IOS XE | Yüksek 7,7 | 42% |
| 25 Eyl 2025 | Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Orta 6,5 | 87% |
| 25 Eyl 2025 | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Kritik 9,9 | 71% |
| 28 Tem 2025 | Injection | Identity Services Engine | Kritik 10,0 | 74% |
| 28 Tem 2025 | Injection | Identity Services Engine | Kritik 10,0 | 98% |
| 31 Mar 2025 | Static Credential | Smart Licensing Utility | Kritik 9,8 | 97% |
| 3 Mar 2025 | Command Injection | Small Business RV Series Routers | Orta 6,5 | 54% |
| 12 Kas 2024 | Cross-Site Scripting (XSS) | Adaptive Security Appliance (ASA) | Orta 5,4 | 23% |
| 24 Eki 2024 | ASA and FTD Denial-of-Service | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Orta 5,8 | 16% |
| 2 Tem 2024 | Command Injection | NX-OS | Orta 6,0 | 4,3% |
| 24 Nis 2024 | ASA and FTD Privilege Escalation | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Orta 6,0 | 19% |
| 24 Nis 2024 | ASA and FTD Denial of Service | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Yüksek 8,6 | 70% |
| 15 Şub 2024 | ASA and FTD Information Disclosure | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Yüksek 7,5 | 72% |
| 23 Eki 2023 | IOS XE Web UI Command Injection | Cisco IOS XE Web UI | Yüksek 7,2 | 93% |
| 16 Eki 2023 | Privilege Escalation | IOS XE Web UI | Kritik 10,0 | 99,6% |
| 10 Eki 2023 | Group Encrypted Transport VPN Out-of-Bounds Write | IOS and IOS XE | Orta 6,6 | 2,5% |
| 13 Eyl 2023 | Unauthorized Access | Adaptive Security Appliance and Firepower Threat Defense | Orta 5,0 | 27% |
| 19 May 2023 | IKEv1 Information Disclosure | IOS, IOS XR, and IOS XE | Yüksek 7,5 | 88% |
| 19 May 2023 | Denial-of-Service | IOS | Orta 5,9 | 4,8% |
| 19 Nis 2023 | SNMP Remote Code Execution | IOS and IOS XE Software | Yüksek 8,8 | 21% |
| 24 Eki 2022 | Mobility Client for Windows DLL Hijacking | AnyConnect Secure | Yüksek 7,8 | 10% |
| 24 Eki 2022 | Mobility Client for Windows Uncontrolled Search Path | AnyConnect Secure | Orta 6,5 | 28% |
| 8 Haz 2022 | Deserialization of Untrusted Data | RV Series Routers | Yüksek 8,8 | 5,5% |
| 24 May 2022 | CLI Remote Code Execution | Adaptive Security Appliance (ASA) | Yüksek 7,8 | 23% |
| 24 May 2022 | SNMP Buffer Overflow | Adaptive Security Appliance (ASA) | Yüksek 8,8 | 88% |
| 23 May 2022 | Open Port | IOS XR | Orta 6,5 | 11% |
| 25 Mar 2022 | Secure Access Control System Java Deserialization | Secure Access Control System (ACS) | Kritik 9,8 | 18% |
| 25 Mar 2022 | Remote Code Execution | VPN Routers | Kritik 9,8 | 55% |
| 25 Mar 2022 | Remote Code Execution | IOS and IOS XE | Kritik 9,8 | 99% |
| 25 Mar 2022 | Directory Traversal | Prime Data Center Network Manager (DCNM) | Yüksek 7,5 | 40% |
| 25 Mar 2022 | Border Gateway Protocol (BGP) Denial-of-Service | IOS XR | Yüksek 7,5 | 5,7% |
| 25 Mar 2022 | Border Gateway Protocol (BGP) Denial-of-Service | IOS XR | Orta 5,9 | 3,3% |
| 3 Mar 2022 | Small Business RV Series Routers Stack-based Buffer Overflow | Small Business RV160, RV260, RV340, and RV345 Series Routers | Kritik 10,0 | 15% |
| 3 Mar 2022 | Small Business RV Series Routers Stack-based Buffer Overflow | Small Business RV160, RV260, RV340, and RV345 Series Routers | Kritik 10,0 | 9,2% |
| 3 Mar 2022 | Small Business RV Series Routers Stack-based Buffer Overflow | Small Business RV160, RV260, RV340, and RV345 Series Routers | Kritik 10,0 | 9,7% |
| 3 Mar 2022 | Small Business RV Series Routers Stack-based Buffer Overflow | Small Business RV160, RV260, RV340, and RV345 Series Routers | Kritik 10,0 | 5,7% |
| 3 Mar 2022 | Small Business RV Series Routers Stack-based Buffer Overflow | Small Business RV160, RV260, RV340, and RV345 Series Routers | Kritik 10,0 | 72% |
| 3 Mar 2022 | Small Business Routers Improper Input Validation | Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | Yüksek 7,2 | 96% |
| 3 Mar 2022 | Denial-of-Service | IOS Software | Orta 6,8 | 4,9% |
| 3 Mar 2022 | Denial-of-Service | IOS Software | Orta 6,8 | 4,9% |
| 3 Mar 2022 | Buffer Overflow | IOS, XR, and XE Software | Yüksek 8,0 | 3,5% |
| 3 Mar 2022 | IOS Software and Cisco IOS XE Software Improper Input Validation | IOS XE Software | Yüksek 8,6 | 7,6% |
| 3 Mar 2022 | Improper Input Validation | IOS and IOS XE Software | Yüksek 8,6 | 7,6% |
| 3 Mar 2022 | Improper Input Validation | IOS and IOS XE Software | Yüksek 8,6 | 7,8% |
| 3 Mar 2022 | Buffer Overflow | IOS, XR, and XE Software | Yüksek 8,8 | 3,4% |
| 3 Mar 2022 | Resource Management Errors | IOS Software | Orta 6,3 | 4,1% |
| 3 Mar 2022 | IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service | IOS Software and Cisco IOS XE Software | Yüksek 7,5 | 6,9% |
| 3 Mar 2022 | IOS and XE Software Internet Key Exchange Memory Leak | IOS Software and Cisco IOS XE Software | Yüksek 8,6 | 7,2% |
| 3 Mar 2022 | Smart Install Denial-of-Service | IOS Software and Cisco IOS XE Software | Yüksek 7,5 | 9,4% |
| 3 Mar 2022 | Catalyst Bidirectional Forwarding Detection Denial-of-Service | Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | Yüksek 8,6 | 7,7% |
| 3 Mar 2022 | Integrated Services Module for VPN Denial-of-Service | IOS Software | Yüksek 7,5 | 7,1% |
| 3 Mar 2022 | IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution | IOS and IOS XE Software | Kritik 9,8 | 14% |
| 3 Mar 2022 | SNMP Remote Code Execution | IOS software | Yüksek 8,8 | 7,3% |
| 3 Mar 2022 | SNMP Remote Code Execution | IOS and IOS XE Software | Yüksek 8,8 | 11% |
| 3 Mar 2022 | SNMP Remote Code Execution | IOS and IOS XE Software | Yüksek 8,8 | 11% |
| 3 Mar 2022 | SNMP Remote Code Execution | IOS and IOS XE Software | Yüksek 8,8 | 11% |
| 3 Mar 2022 | SNMP Remote Code Execution | IOS and IOS XE Software | Yüksek 8,8 | 11% |
| 3 Mar 2022 | SNMP Remote Code Execution | IOS and IOS XE Software | Yüksek 8,8 | 45% |
| 3 Mar 2022 | SNMP Remote Code Execution | IOS and IOS XE Software | Yüksek 8,8 | 70% |
| 3 Mar 2022 | IOS Software and Cisco IOS XE Software Denial-of-Service | IOS and IOS XE Software | Orta 6,5 | 2,1% |
| 3 Mar 2022 | IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service | IOS and IOS XE Software | Yüksek 7,5 | 6,2% |
| 3 Mar 2022 | Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service | IOS XE Software | Orta 5,9 | 5,2% |
| 3 Mar 2022 | DHCP Remote Code Execution | IOS and IOS XE Software | Kritik 9,8 | 14% |
| 3 Mar 2022 | VPLS Denial-of-Service | Catalyst 6800 Series Switches | Orta 6,5 | 2,0% |
| 3 Mar 2022 | Internet Key Exchange Denial-of-Service | IOS and IOS XE Software | Yüksek 7,5 | 7,1% |
| 3 Mar 2022 | for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service | IOS software | Yüksek 7,5 | 7,1% |
| 3 Mar 2022 | Common Industrial Protocol Request Denial-of-Service | IOS software | Yüksek 7,5 | 7,1% |
| 3 Mar 2022 | Common Industrial Protocol Request Denial-of-Service | IOS software | Yüksek 7,5 | 7,1% |
| 3 Mar 2022 | for Cisco Integrated Services Routers Denial-of-Service | IOS software | Orta 6,5 | 2,2% |
| 3 Mar 2022 | Network Address Translation Denial-of-Service | IOS software | Yüksek 7,5 | 7,1% |
| 3 Kas 2021 | Data Platform Command Injection | HyperFlex HX | Kritik 9,8 | >99,9% |
| 3 Kas 2021 | Installer Virtual Machine Command Injection | HyperFlex HX | Kritik 9,8 | 99,9% |
| 3 Kas 2021 | ASA and FTD Cross-Site Scripting (XSS) | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Orta 6,1 | 86% |
| 3 Kas 2021 | Software DVMRP Memory Exhaustion | IOS XR | Yüksek 8,6 | 3,3% |
| 3 Kas 2021 | Software DVMRP Memory Exhaustion | IOS XR | Yüksek 8,6 | 3,7% |
| 3 Kas 2021 | ASA and FTD Read-Only Path Traversal | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Yüksek 7,5 | >99,9% |
| 3 Kas 2021 | IP Phones Web Server Remote Code Execution and Denial-of-Service | Cisco IP Phones | Kritik 9,8 | 84% |
| 3 Kas 2021 | Software Discovery Protocol Format String | IOS XR | Yüksek 8,8 | 12% |
| 3 Kas 2021 | Information Disclosure | Small Business RV320 and RV325 Routers | Yüksek 7,5 | 99,9% |
| 3 Kas 2021 | Denial-of-Service | Adaptive Security Appliance (ASA) | Yüksek 7,5 | 99,9% |
| 3 Kas 2021 | Software Smart Install Remote Code Execution | IOS and IOS XE | Yüksek 7,5 | 99,5% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.