Cisco

1931 CVEs tracked in the last 90 days

1931 Total CVEs

233 Critical

549 High

1118 Medium

31 Low

Severity Distribution

Critical 233 (12.1%)

High 549 (28.4%)

Medium 1118 (57.9%)

Low 31 (1.6%)

Top Affected Products

cisco unified communications manager 164

cisco webex meetings server 66

cisco adaptive security appliance software 60

cisco identity services engine software 41

cisco unified communications domain manager 37

cisco anyconnect secure mobility client 37

cisco prime infrastructure 35

cisco firesight system software 35

CVSS Score Distribution

Latest CVEs

CVE ID	Severity	CVSS	Description	Published	Modified
CVE-2026-20219	medium	5.4	A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker …	May 6, 2026	May 6, 2026
CVE-2026-20195	medium	5.3	A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthenticated, …	May 6, 2026	May 6, 2026
CVE-2026-20193	medium	4.3	A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, r…	May 6, 2026	May 6, 2026
CVE-2026-20189	medium	4.3	A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an&…	May 6, 2026	May 6, 2026
CVE-2026-20188	high	7.5	A vulnerability in the connection-handling mechanism of Cisco Crosswork Network Controller (CNC) and…	May 6, 2026	May 6, 2026
CVE-2026-20185	high	7.7	A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Series …	May 6, 2026	May 6, 2026
CVE-2026-20172	medium	4.3	A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could allow an au…	May 6, 2026	May 6, 2026
CVE-2026-20169	medium	6.4	A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allo…	May 6, 2026	May 6, 2026
CVE-2026-20168	medium	6.5	A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allo…	May 6, 2026	May 6, 2026
CVE-2026-20167	high	7.7	A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allo…	May 6, 2026	May 6, 2026
CVE-2026-20035	high	7.2	A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, re…	May 6, 2026	May 6, 2026
CVE-2026-20034	high	8.8	A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authe…	May 6, 2026	May 7, 2026
CVE-2026-5944	medium	6.7	An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix…	Apr 28, 2026	Apr 28, 2026
CVE-2026-20186	critical	9.9	A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacke…	Apr 15, 2026	Apr 17, 2026
CVE-2026-20184	critical	9.8	A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services …	Apr 15, 2026	Apr 17, 2026
CVE-2026-20180	critical	9.9	A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacke…	Apr 15, 2026	Apr 17, 2026
CVE-2026-20170	medium	6.1	A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed …	Apr 15, 2026	Apr 17, 2026
CVE-2026-20161	medium	5.5	A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, loca…	Apr 15, 2026	Apr 17, 2026
CVE-2026-20152	medium	5.3	A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web…	Apr 15, 2026	Apr 17, 2026
CVE-2026-20148	medium	4.9	A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to perf…	Apr 15, 2026	Apr 17, 2026
CVE-2026-20147	critical	9.9	A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to exec…	Apr 15, 2026	Apr 17, 2026
CVE-2026-20136	medium	6.0	A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identi…	Apr 15, 2026	Apr 17, 2026
CVE-2026-20132	medium	4.8	Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (IS…	Apr 15, 2026	Apr 17, 2026
CVE-2026-20081	medium	6.5	Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker&nbs…	Apr 15, 2026	Apr 28, 2026
CVE-2026-20078	medium	6.5	Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker&nbs…	Apr 15, 2026	Apr 28, 2026