Patchfirst: Cisco vulnerabilities

Patchfirst: Cisco vulnerabilitieshttps://patchfirst.co/vendor/cisco/New and newly exploited Cisco CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMT[KEV] CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference…https://patchfirst.co/cve/CVE-2026-76418/CVE-2026-76418#kevThu, 29 Oct 2026 00:00:00 GMTCisco · Secure Firewall ASA Software and Cisco Secure FTD Software. In CISA KEV since 2026-10-29. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 59.9% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 64.4 of 100.kevT1190T1499.004CVE-2026-76473: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…https://patchfirst.co/cve/CVE-2026-76473/CVE-2026-76473Wed, 21 Oct 2026 00:00:00 GMTCisco · Cisco Emergency Responder. Not in CISA KEV. EPSS 0.5% (higher than 42.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 22.2 of 100.public-exploitCVE-2026-76474: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…https://patchfirst.co/cve/CVE-2026-76474/CVE-2026-76474Wed, 21 Oct 2026 00:00:00 GMTCisco · Cisco Emergency Responder. Not in CISA KEV. EPSS 0.5% (higher than 41% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 22.0 of 100.public-exploitCVE-2026-76466: A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote…https://patchfirst.co/cve/CVE-2026-76466/CVE-2026-76466Wed, 21 Oct 2026 00:00:00 GMTCisco · Cisco TelePresence Video Communication Server (VCS) Expressway. Not in CISA KEV. EPSS 0.4% (higher than 36% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 21.0 of 100.public-exploitCVE-2026-76475: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…https://patchfirst.co/cve/CVE-2026-76475/CVE-2026-76475Wed, 21 Oct 2026 00:00:00 GMTCisco · Cisco Emergency Responder. Not in CISA KEV. EPSS 0.3% (higher than 25.7% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. Priority 18.6 of 100.public-exploit[KEV] CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-76519/CVE-2026-76519#kevWed, 14 Oct 2026 00:00:00 GMTCisco · Secure Email Gateway. In CISA KEV since 2026-10-14. ENISA EUVD lists it as exploited. EPSS 2.2% (higher than 82.1% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Priority 76.3 of 100.kevpublic-exploitT1190T1059T1105CVE-2026-76455: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has…https://patchfirst.co/cve/CVE-2026-76455/CVE-2026-76455Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 3.6% (higher than 89.4% of CVEs). CVSS 9.8 CRITICAL. Priority 26.9 of 100.CVE-2026-76486: A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known…https://patchfirst.co/cve/CVE-2026-76486/CVE-2026-76486Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 0.5% (higher than 45.4% of CVEs). CVSS 9.8 CRITICAL. Priority 18.1 of 100.CVE-2026-76485: A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known…https://patchfirst.co/cve/CVE-2026-76485/CVE-2026-76485Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 0.5% (higher than 45.4% of CVEs). CVSS 9.8 CRITICAL. Priority 18.1 of 100.CVE-2026-76454: A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software…https://patchfirst.co/cve/CVE-2026-76454/CVE-2026-76454Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco License On-Prem. Not in CISA KEV. EPSS 0.6% (higher than 47.8% of CVEs). CVSS 9.1 CRITICAL. Priority 18.1 of 100.CVE-2026-76501: A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of…https://patchfirst.co/cve/CVE-2026-76501/CVE-2026-76501Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 0.5% (higher than 44.3% of CVEs). CVSS 9.8 CRITICAL. Priority 17.9 of 100.CVE-2026-76471: A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to…https://patchfirst.co/cve/CVE-2026-76471/CVE-2026-76471Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 0.5% (higher than 41.8% of CVEs). CVSS 9.8 CRITICAL. Priority 17.4 of 100.CVE-2026-20328: A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager…https://patchfirst.co/cve/CVE-2026-20328/CVE-2026-20328Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco License On-Prem. Not in CISA KEV. EPSS 0.5% (higher than 44.1% of CVEs). CVSS 9.1 CRITICAL. Priority 17.4 of 100.CVE-2026-76465: A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco…https://patchfirst.co/cve/CVE-2026-76465/CVE-2026-76465Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 0.5% (higher than 39.9% of CVEs). CVSS 9.8 CRITICAL. Priority 17.0 of 100.CVE-2026-76480: As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco…https://patchfirst.co/cve/CVE-2026-76480/CVE-2026-76480Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco License On-Prem. Not in CISA KEV. EPSS 0.4% (higher than 30.9% of CVEs). CVSS 9.8 CRITICAL. Priority 15.2 of 100.CVE-2026-76500: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy…https://patchfirst.co/cve/CVE-2026-76500/CVE-2026-76500Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco Application Policy Infrastructure Controller (APIC). Not in CISA KEV. EPSS 0.3% (higher than 25.6% of CVEs). CVSS 9.8 CRITICAL. Priority 14.1 of 100.CVE-2026-76499: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy…https://patchfirst.co/cve/CVE-2026-76499/CVE-2026-76499Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco Application Policy Infrastructure Controller (APIC). Not in CISA KEV. EPSS 0.3% (higher than 23.6% of CVEs). CVSS 9.8 CRITICAL. Priority 13.7 of 100.CVE-2026-76459: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has…https://patchfirst.co/cve/CVE-2026-76459/CVE-2026-76459Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 0.3% (higher than 23.5% of CVEs). CVSS 9.8 CRITICAL. Priority 13.7 of 100.CVE-2026-76498: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy…https://patchfirst.co/cve/CVE-2026-76498/CVE-2026-76498Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco Application Policy Infrastructure Controller (APIC). Not in CISA KEV. EPSS 0.3% (higher than 22.8% of CVEs). CVSS 9.8 CRITICAL. Priority 13.6 of 100.CVE-2026-76482: As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco…https://patchfirst.co/cve/CVE-2026-76482/CVE-2026-76482Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco License On-Prem. Not in CISA KEV. EPSS 0.2% (higher than 12.3% of CVEs). CVSS 10.0 CRITICAL. Priority 11.6 of 100.CVE-2026-76464: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team…https://patchfirst.co/cve/CVE-2026-76464/CVE-2026-76464Wed, 07 Oct 2026 00:00:00 GMTCisco · Cisco Campus Gateway Software. Not in CISA KEV. EPSS 0.2% (higher than 8.9% of CVEs). CVSS 9.6 CRITICAL. Priority 10.7 of 100.[KEV] CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-76504/CVE-2026-76504#kevWed, 30 Sep 2026 00:00:00 GMTCisco · Catalyst SD-WAN Manager. In CISA KEV since 2026-09-30. ENISA EUVD lists it as exploited. EPSS 38.9% (higher than 98.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 79.6 of 100.kevpublic-exploitT1190T1078[KEV] CVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-76460/CVE-2026-76460#kevWed, 16 Sep 2026 00:00:00 GMTCisco · Identity Services Engine. In CISA KEV since 2026-09-16. ENISA EUVD lists it as exploited. EPSS 75.6% (higher than 99.52% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 79.9 of 100.kevpublic-exploitT1190T1078[KEV] CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-76461/CVE-2026-76461#kevMon, 14 Sep 2026 00:00:00 GMTCisco · Secure Email Gateway. In CISA KEV since 2026-09-14. ENISA EUVD lists it as exploited. EPSS 29.5% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.5 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2026-20079: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-20079/CVE-2026-20079#kevWed, 09 Sep 2026 00:00:00 GMTCisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management. In CISA KEV since 2026-09-09. ENISA EUVD lists it as exploited. EPSS 88.7% (higher than 99.77% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Named in 1 threat report. Priority 83.8 of 100.kevpublic-exploitT1190[KEV] CVE-2026-20349: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection…https://patchfirst.co/cve/CVE-2026-20349/CVE-2026-20349#kevTue, 11 Aug 2026 00:00:00 GMTCisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) . In CISA KEV since 2026-08-11. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 63.1% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 71.6 of 100.kevpublic-exploitT1190T1499.004[KEV] CVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-20316/CVE-2026-20316#kevWed, 29 Jul 2026 00:00:00 GMTCisco · Secure Firewall Management Center (FMC). In CISA KEV since 2026-07-29, known ransomware use. ENISA EUVD lists it as exploited. EPSS 35.1% (higher than 98.4% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1078 Valid Accounts; T1005 Data from Local System. Named in 1 threat report. Priority 80.3 of 100.kevransomwareT1078T1005[KEV] CVE-2008-4128: Cisco IOS Cross-Site Request Forgery Vulnerabilityhttps://patchfirst.co/cve/CVE-2008-4128/CVE-2008-4128#kevMon, 13 Jul 2026 00:00:00 GMTCisco · IOS. In CISA KEV since 2026-07-13. ENISA EUVD lists it as exploited. EPSS 33.9% (higher than 98.4% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 73.3 of 100.kevpublic-exploitT1204.001T1059[KEV] CVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-20230/CVE-2026-20230#kevThu, 25 Jun 2026 00:00:00 GMTCisco · Unified Communications Manager. In CISA KEV since 2026-06-25. ENISA EUVD lists it as exploited. EPSS 88.5% (higher than 99.77% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 74.0 of 100.kevpublic-exploitT1190T1105[KEV] CVE-2026-20262: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-20262/CVE-2026-20262#kevMon, 15 Jun 2026 00:00:00 GMTCisco · Catalyst SD-WAN Manager. In CISA KEV since 2026-06-15. ENISA EUVD lists it as exploited. EPSS 29.1% (higher than 98.2% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1565.001 Stored Data Manipulation. Priority 72.2 of 100.kevpublic-exploitT1190T1565.001[KEV] CVE-2026-20245: Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-20245/CVE-2026-20245#kevTue, 09 Jun 2026 00:00:00 GMTCisco · Catalyst SD-WAN Manager. In CISA KEV since 2026-06-09. ENISA EUVD lists it as exploited. EPSS 25.3% (higher than 97.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 73.0 of 100.kevpublic-exploitT1068T1059[KEV] CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-20182/CVE-2026-20182#kevThu, 14 May 2026 00:00:00 GMTCisco · Catalyst SD-WAN. In CISA KEV since 2026-05-14. ENISA EUVD lists it as exploited. EPSS 91.8% (higher than 99.82% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Named in 4 threat reports. Priority 83.9 of 100.kevpublic-exploitT1190[KEV] CVE-2026-20133: Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-20133/CVE-2026-20133#kevMon, 20 Apr 2026 00:00:00 GMTCisco · Catalyst SD-WAN Manager. In CISA KEV since 2026-04-20. ENISA EUVD lists it as exploited. EPSS 31.5% (higher than 98.3% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 67.9 of 100.kevT1190T1005[KEV] CVE-2026-20128: Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-20128/CVE-2026-20128#kevMon, 20 Apr 2026 00:00:00 GMTCisco · Catalyst SD-WAN Manager. In CISA KEV since 2026-04-20. ENISA EUVD lists it as exploited. EPSS 7.3% (higher than 94.4% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1552 Unsecured Credentials. Priority 67.1 of 100.kevT1190T1552[KEV] CVE-2026-20122: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-20122/CVE-2026-20122#kevMon, 20 Apr 2026 00:00:00 GMTCisco · Catalyst SD-WAN Manger. In CISA KEV since 2026-04-20. ENISA EUVD lists it as exploited. EPSS 25.8% (higher than 98% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1565.001 Stored Data Manipulation. Priority 66.4 of 100.kevT1190T1565.001[KEV] CVE-2026-20131: Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management…https://patchfirst.co/cve/CVE-2026-20131/CVE-2026-20131#kevThu, 19 Mar 2026 00:00:00 GMTCisco · Secure Firewall Management Center (FMC). In CISA KEV since 2026-03-19, known ransomware use. ENISA EUVD lists it as exploited. EPSS 44.4% (higher than 98.8% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 84.8 of 100.kevransomwarepublic-exploitT1190T1059[KEV] CVE-2022-20775: Cisco SD-WAN Path Traversal Vulnerabilityhttps://patchfirst.co/cve/CVE-2022-20775/CVE-2022-20775#kevWed, 25 Feb 2026 00:00:00 GMTCisco · SD-WAN. In CISA KEV since 2026-02-25. ENISA EUVD lists it as exploited. EPSS 12.5% (higher than 96.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 76.6 of 100.kevpublic-exploitT1068T1059[KEV] CVE-2026-20127: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-20127/CVE-2026-20127#kevWed, 25 Feb 2026 00:00:00 GMTCisco · Catalyst SD-WAN Controller and Manager. In CISA KEV since 2026-02-25. ENISA EUVD lists it as exploited. EPSS 89.3% (higher than 99.78% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts; T1098 Account Manipulation. Priority 75.0 of 100.kevpublic-exploitT1190T1078T1098[KEV] CVE-2026-20045: Cisco Unified Communications Products Code Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-20045/CVE-2026-20045#kevWed, 21 Jan 2026 00:00:00 GMTCisco · Unified Communications Manager. In CISA KEV since 2026-01-21. ENISA EUVD lists it as exploited. EPSS 4.5% (higher than 91.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 73.2 of 100.kevpublic-exploitT1190T1059CVE-2026-20029: Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-20029/CVE-2026-20029Wed, 07 Jan 2026 00:00:00 GMTCisco · Cisco Identity Services Engine Software. Not in CISA KEV. EPSS 6.1% (higher than 93.4% of CVEs). CVSS 4.9 MEDIUM. Priority 63.2 of 100.[KEV] CVE-2025-20393: Cisco Multiple Products Improper Input Validation Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-20393/CVE-2025-20393#kevWed, 17 Dec 2025 00:00:00 GMTCisco · Multiple Products. In CISA KEV since 2025-12-17. ENISA EUVD lists it as exploited. EPSS 32.4% (higher than 98.3% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.7 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2025-20352: Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-20352/CVE-2025-20352#kevMon, 29 Sep 2025 00:00:00 GMTCisco · IOS and IOS XE. In CISA KEV since 2025-09-29. ENISA EUVD lists it as exploited. EPSS 41.5% (higher than 98.7% of CVEs). CVSS 7.7 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 68.1 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2025-20333: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow…https://patchfirst.co/cve/CVE-2025-20333/CVE-2025-20333#kevThu, 25 Sep 2025 00:00:00 GMTCisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense. In CISA KEV since 2025-09-25. ENISA EUVD lists it as exploited. EPSS 71.2% (higher than 99.41% of CVEs). CVSS 9.9 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Named in 5 threat reports. Priority 79.8 of 100.kevpublic-exploitT1133T1059[KEV] CVE-2025-20362: Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization…https://patchfirst.co/cve/CVE-2025-20362/CVE-2025-20362#kevThu, 25 Sep 2025 00:00:00 GMTCisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense. In CISA KEV since 2025-09-25. ENISA EUVD lists it as exploited. EPSS 87.1% (higher than 99.75% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Named in 5 threat reports. Priority 79.0 of 100.kevpublic-exploitT1190T1499.004CVE-2025-20363: A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure…https://patchfirst.co/cve/CVE-2025-20363/CVE-2025-20363Thu, 25 Sep 2025 00:00:00 GMTCisco · IOS. Not in CISA KEV. EPSS 6.9% (higher than 94.1% of CVEs). CVSS 9.0 CRITICAL. Named in 2 threat reports. Priority 67.3 of 100.[KEV] CVE-2025-20281: Cisco Identity Services Engine Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-20281/CVE-2025-20281#kevMon, 28 Jul 2025 00:00:00 GMTCisco · Identity Services Engine. In CISA KEV since 2025-07-28. ENISA EUVD lists it as exploited. EPSS 97.6% (higher than 99.9% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1106 Native API; T1059 Command and Scripting Interpreter. Priority 70.0 of 100.kevpublic-exploitT1106T1059[KEV] CVE-2025-20337: Cisco Identity Services Engine Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-20337/CVE-2025-20337#kevMon, 28 Jul 2025 00:00:00 GMTCisco · Identity Services Engine. In CISA KEV since 2025-07-28. ENISA EUVD lists it as exploited. EPSS 74.5% (higher than 99.49% of CVEs). CVSS 10.0 CRITICAL. ATT&CK: T1106 Native API; T1059 Command and Scripting Interpreter. Priority 64.9 of 100.kevT1106T1059CVE-2025-20282: Cisco ISE API Unauthenticated Remote Code Execution Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-20282/CVE-2025-20282Wed, 25 Jun 2025 00:00:00 GMTCisco · Cisco Identity Services Engine Software. Not in CISA KEV. EPSS 38.7% (higher than 98.6% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 73.5 of 100.public-exploitCVE-2025-20188: A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client…https://patchfirst.co/cve/CVE-2025-20188/CVE-2025-20188Wed, 07 May 2025 00:00:00 GMTCisco · Cisco IOS XE Software. Not in CISA KEV. EPSS 27.5% (higher than 98.1% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 68.0 of 100.public-exploit[KEV] CVE-2024-20439: Cisco Smart Licensing Utility Static Credential Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-20439/CVE-2024-20439#kevMon, 31 Mar 2025 00:00:00 GMTCisco · Smart Licensing Utility. In CISA KEV since 2025-03-31. ENISA EUVD lists it as exploited. EPSS 97.1% (higher than 99.89% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1552 Unsecured Credentials; T1106 Native API. Priority 69.8 of 100.kevpublic-exploitT1552T1106