Firewalls, VPNs and routers

Cisco security incident history

Updated Oct 26, 2026. Data gathered daily from official public sources.

As of Oct 26, 2026, Vendor History found 1 state breach notice and 101 actively exploited security flaws for Cisco, dated Oct 25, 2016 to Oct 14, 2026. The most recent breach notice or SEC filing was on Oct 25, 2016. Sources checked: the California and Washington Attorney General breach lists, SEC EDGAR (Form 8-K, Item 1.05) and CISA's Known Exploited Vulnerabilities catalog.

Breach notices and SEC cyber filings

1. Oct 25, 2016Breach notice

   Cisco Systems, Inc. filed a data breach notice with the California Attorney General. Breach date(s) listed: 08/18/2016.

   Source: California Attorney General

Got a breach letter from Cisco? What to do when a vendor has a data breach.

Actively exploited security flaws

Flaws in Cisco products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.

1. Oct 14, 2026Exploited flaw

   Cisco Secure Email Gateway Relative Path Traversal Vulnerability (CVE-2026-76519). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

2. Sep 30, 2026Exploited flaw

   Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability (CVE-2026-76504). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

3. Sep 16, 2026Exploited flaw

   Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability (CVE-2026-76460). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

4. Sep 14, 2026Exploited flaw

   Cisco Secure Email Gateway SQL Injection Vulnerability (CVE-2026-76461). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

5. Sep 9, 2026Exploited flaw

   Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-20079). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

6. Aug 11, 2026Exploited flaw

   Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability (CVE-2026-20349). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

7. Jul 29, 2026Exploited flaw

   Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability (CVE-2026-20316). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

   Source: CISA Known Exploited Vulnerabilities catalog

8. Jul 13, 2026Exploited flaw

   Cisco IOS Cross-Site Request Forgery Vulnerability (CVE-2008-4128). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

9. Jun 25, 2026Exploited flaw

   Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-20230). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

10. Jun 15, 2026Exploited flaw

    Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability (CVE-2026-20262). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

11. Jun 9, 2026Exploited flaw

    Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability (CVE-2026-20245). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

12. May 14, 2026Exploited flaw

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability (CVE-2026-20182). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

13. Apr 20, 2026Exploited flaw

    Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability (CVE-2026-20122). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

14. Apr 20, 2026Exploited flaw

    Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability (CVE-2026-20128). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

15. Apr 20, 2026Exploited flaw

    Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-20133). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

16. Mar 19, 2026Exploited flaw

    Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability (CVE-2026-20131). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

17. Feb 25, 2026Exploited flaw

    Cisco SD-WAN Path Traversal Vulnerability (CVE-2022-20775). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

18. Feb 25, 2026Exploited flaw

    Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability (CVE-2026-20127). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

19. Jan 21, 2026Exploited flaw

    Cisco Unified Communications Products Code Injection Vulnerability (CVE-2026-20045). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

20. Dec 17, 2025Exploited flaw

    Cisco Multiple Products Improper Input Validation Vulnerability (CVE-2025-20393). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

21. Sep 29, 2025Exploited flaw

    Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability (CVE-2025-20352). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

22. Sep 25, 2025Exploited flaw

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability (CVE-2025-20333). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

23. Sep 25, 2025Exploited flaw

    Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability (CVE-2025-20362). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

24. Jul 28, 2025Exploited flaw

    Cisco Identity Services Engine Injection Vulnerability (CVE-2025-20281). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

25. Jul 28, 2025Exploited flaw

    Cisco Identity Services Engine Injection Vulnerability (CVE-2025-20337). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

26. Mar 31, 2025Exploited flaw

    Cisco Smart Licensing Utility Static Credential Vulnerability (CVE-2024-20439). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

27. Mar 3, 2025Exploited flaw

    Cisco Small Business RV Series Routers Command Injection Vulnerability (CVE-2023-20118). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

28. Nov 12, 2024Exploited flaw

    Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability (CVE-2014-2120). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

29. Oct 24, 2024Exploited flaw

    Cisco ASA and FTD Denial-of-Service Vulnerability (CVE-2024-20481). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

30. Jul 2, 2024Exploited flaw

    Cisco NX-OS Command Injection Vulnerability (CVE-2024-20399). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

31. Apr 24, 2024Exploited flaw

    Cisco ASA and FTD Denial of Service Vulnerability (CVE-2024-20353). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

32. Apr 24, 2024Exploited flaw

    Cisco ASA and FTD Privilege Escalation Vulnerability (CVE-2024-20359). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

33. Feb 15, 2024Exploited flaw

    Cisco ASA and FTD Information Disclosure Vulnerability (CVE-2020-3259). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

34. Oct 23, 2023Exploited flaw

    Cisco IOS XE Web UI Command Injection Vulnerability (CVE-2023-20273). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

35. Oct 16, 2023Exploited flaw

    Cisco IOS XE Web UI Privilege Escalation Vulnerability (CVE-2023-20198). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

36. Oct 10, 2023Exploited flaw

    Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability (CVE-2023-20109). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

37. Sep 13, 2023Exploited flaw

    Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability (CVE-2023-20269). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

38. May 19, 2023Exploited flaw

    Cisco IOS Denial-of-Service Vulnerability (CVE-2004-1464). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

39. May 19, 2023Exploited flaw

    Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability (CVE-2016-6415). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

40. Apr 19, 2023Exploited flaw

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability (CVE-2017-6742). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

41. Oct 24, 2022Exploited flaw

    Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability (CVE-2020-3153). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

42. Oct 24, 2022Exploited flaw

    Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability (CVE-2020-3433). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

43. Jun 8, 2022Exploited flaw

    Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability (CVE-2019-15271). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

44. May 24, 2022Exploited flaw

    Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability (CVE-2016-6366). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

45. May 24, 2022Exploited flaw

    Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability (CVE-2016-6367). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

46. May 23, 2022Exploited flaw

    Cisco IOS XR Open Port Vulnerability (CVE-2022-20821). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

47. Mar 25, 2022Exploited flaw

    Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability (CVE-2009-2055). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

48. Mar 25, 2022Exploited flaw

    Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability (CVE-2010-3035). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

49. Mar 25, 2022Exploited flaw

    Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability (CVE-2015-0666). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

50. Mar 25, 2022Exploited flaw

    Cisco IOS and IOS XE Remote Code Execution Vulnerability (CVE-2017-3881). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

51. Mar 25, 2022Exploited flaw

    Cisco VPN Routers Remote Code Execution Vulnerability (CVE-2018-0125). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

52. Mar 25, 2022Exploited flaw

    Cisco Secure Access Control System Java Deserialization Vulnerability (CVE-2018-0147). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

53. Mar 3, 2022Exploited flaw

    Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability (CVE-2017-12231). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

54. Mar 3, 2022Exploited flaw

    Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability (CVE-2017-12232). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

55. Mar 3, 2022Exploited flaw

    Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability (CVE-2017-12233). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

56. Mar 3, 2022Exploited flaw

    Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability (CVE-2017-12234). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

57. Mar 3, 2022Exploited flaw

    Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability (CVE-2017-12235). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

58. Mar 3, 2022Exploited flaw

    Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability (CVE-2017-12237). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

59. Mar 3, 2022Exploited flaw

    Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability (CVE-2017-12238). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

60. Mar 3, 2022Exploited flaw

    Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability (CVE-2017-12240). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

61. Mar 3, 2022Exploited flaw

    Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability (CVE-2017-12319). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

62. Mar 3, 2022Exploited flaw

    Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability (CVE-2017-6627). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

63. Mar 3, 2022Exploited flaw

    Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability (CVE-2017-6663). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

64. Mar 3, 2022Exploited flaw

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability (CVE-2017-6736). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

65. Mar 3, 2022Exploited flaw

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability (CVE-2017-6737). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

66. Mar 3, 2022Exploited flaw

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability (CVE-2017-6738). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

67. Mar 3, 2022Exploited flaw

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability (CVE-2017-6739). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

68. Mar 3, 2022Exploited flaw

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability (CVE-2017-6740). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

69. Mar 3, 2022Exploited flaw

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability (CVE-2017-6743). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

70. Mar 3, 2022Exploited flaw

    Cisco IOS Software SNMP Remote Code Execution Vulnerability (CVE-2017-6744). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

71. Mar 3, 2022Exploited flaw

    Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability (CVE-2018-0151). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

72. Mar 3, 2022Exploited flaw

    Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability (CVE-2018-0154). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

73. Mar 3, 2022Exploited flaw

    Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability (CVE-2018-0155). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

74. Mar 3, 2022Exploited flaw

    Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability (CVE-2018-0156). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

75. Mar 3, 2022Exploited flaw

    Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability (CVE-2018-0158). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

76. Mar 3, 2022Exploited flaw

    Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability (CVE-2018-0159). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

77. Mar 3, 2022Exploited flaw

    Cisco IOS Software Resource Management Errors Vulnerability (CVE-2018-0161). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

78. Mar 3, 2022Exploited flaw

    Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability (CVE-2018-0167). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

79. Mar 3, 2022Exploited flaw

    Cisco IOS and IOS XE Software Improper Input Validation Vulnerability (CVE-2018-0172). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

80. Mar 3, 2022Exploited flaw

    Cisco IOS and IOS XE Software Improper Input Validation Vulnerability (CVE-2018-0173). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

81. Mar 3, 2022Exploited flaw

    Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability (CVE-2018-0174). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

82. Mar 3, 2022Exploited flaw

    Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability (CVE-2018-0175). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

83. Mar 3, 2022Exploited flaw

    Cisco IOS Software Denial-of-Service Vulnerability (CVE-2018-0179). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

84. Mar 3, 2022Exploited flaw

    Cisco IOS Software Denial-of-Service Vulnerability (CVE-2018-0180). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

85. Mar 3, 2022Exploited flaw

    Cisco Small Business Routers Improper Input Validation Vulnerability (CVE-2019-1652). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

86. Mar 3, 2022Exploited flaw

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability (CVE-2022-20699). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

87. Mar 3, 2022Exploited flaw

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability (CVE-2022-20700). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

88. Mar 3, 2022Exploited flaw

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability (CVE-2022-20701). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

89. Mar 3, 2022Exploited flaw

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability (CVE-2022-20703). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

90. Mar 3, 2022Exploited flaw

    Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability (CVE-2022-20708). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

91. Nov 3, 2021Exploited flaw

    Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability (CVE-2018-0171). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

92. Nov 3, 2021Exploited flaw

    Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability (CVE-2018-0296). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

93. Nov 3, 2021Exploited flaw

    Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability (CVE-2019-1653). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

94. Nov 3, 2021Exploited flaw

    Cisco IOS XR Software Discovery Protocol Format String Vulnerability (CVE-2020-3118). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

95. Nov 3, 2021Exploited flaw

    Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability (CVE-2020-3161). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

96. Nov 3, 2021Exploited flaw

    Cisco ASA and FTD Read-Only Path Traversal Vulnerability (CVE-2020-3452). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

97. Nov 3, 2021Exploited flaw

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability (CVE-2020-3566). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

98. Nov 3, 2021Exploited flaw

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability (CVE-2020-3569). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

99. Nov 3, 2021Exploited flaw

    Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability (CVE-2020-3580). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

100. Nov 3, 2021Exploited flaw

     Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability (CVE-2021-1497). Added to CISA's list of security flaws known to be exploited by attackers.

     Source: CISA Known Exploited Vulnerabilities catalog

101. Nov 3, 2021Exploited flaw

     Cisco HyperFlex HX Data Platform Command Injection Vulnerability (CVE-2021-1498). Added to CISA's list of security flaws known to be exploited by attackers.

     Source: CISA Known Exploited Vulnerabilities catalog

We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works

To cite: Vendor History, "Cisco security incident history," vendorhistory.com/vendor/cisco, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.