Cisco
KEV profile: additions per year, time to addition and ransomware share.
100
KEV entries
1,074
Median days to addition
7 %
Ransomware share
KEV entries per year
Entries
| CVE | Product | Added | CVSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-76504 | Catalyst SD-WAN Manager | 2026-09-30 | 9.8 | – |
| CVE-2026-76460 | Identity Services Engine | 2026-09-16 | 10.0 | – |
| CVE-2026-76461 | Secure Email Gateway | 2026-09-14 | 9.8 | – |
| CVE-2026-20079 | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 2026-09-09 | 10.0 | – |
| CVE-2026-20349 | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 2026-08-11 | 8.6 | – |
| CVE-2026-20316 | Secure Firewall Management Center (FMC) | 2026-07-29 | 5.3 | Known |
| CVE-2008-4128 | IOS | 2026-07-13 | 8.1 | – |
| CVE-2026-20230 | Unified Communications Manager | 2026-06-25 | 8.6 | – |
| CVE-2026-20262 | Catalyst SD-WAN Manager | 2026-06-15 | 6.5 | – |
| CVE-2026-20245 | Catalyst SD-WAN Manager | 2026-06-09 | 7.8 | – |
| CVE-2026-20182 | Catalyst SD-WAN | 2026-05-14 | 10.0 | – |
| CVE-2026-20133 | Catalyst SD-WAN Manager | 2026-04-20 | 7.5 | – |
| CVE-2026-20128 | Catalyst SD-WAN Manager | 2026-04-20 | 7.5 | – |
| CVE-2026-20122 | Catalyst SD-WAN Manger | 2026-04-20 | 5.4 | – |
| CVE-2026-20131 | Secure Firewall Management Center (FMC) | 2026-03-19 | 10.0 | Known |
| CVE-2026-20127 | Catalyst SD-WAN Controller and Manager | 2026-02-25 | 10.0 | – |
| CVE-2022-20775 | SD-WAN | 2026-02-25 | 7.8 | – |
| CVE-2026-20045 | Unified Communications Manager | 2026-01-21 | 9.8 | – |
| CVE-2025-20393 | Multiple Products | 2025-12-17 | 10.0 | – |
| CVE-2025-20352 | IOS and IOS XE | 2025-09-29 | 7.7 | – |
| CVE-2025-20362 | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | 8.6 | – |
| CVE-2025-20333 | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | 9.9 | – |
| CVE-2025-20337 | Identity Services Engine | 2025-07-28 | 10.0 | – |
| CVE-2025-20281 | Identity Services Engine | 2025-07-28 | 10.0 | – |
| CVE-2024-20439 | Smart Licensing Utility | 2025-03-31 | 9.8 | – |
| CVE-2023-20118 | Small Business RV Series Routers | 2025-03-03 | 7.2 | – |
| CVE-2014-2120 | Adaptive Security Appliance (ASA) | 2024-11-12 | 6.1 | – |
| CVE-2024-20481 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-10-24 | 5.8 | – |
| CVE-2024-20399 | NX-OS | 2024-07-02 | 6.7 | – |
| CVE-2024-20359 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-04-24 | 6.0 | – |
| CVE-2024-20353 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-04-24 | 8.6 | – |
| CVE-2020-3259 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-02-15 | 7.5 | Known |
| CVE-2023-20273 | Cisco IOS XE Web UI | 2023-10-23 | 7.2 | – |
| CVE-2023-20198 | IOS XE Web UI | 2023-10-16 | 10.0 | – |
| CVE-2023-20109 | IOS and IOS XE | 2023-10-10 | 6.6 | – |
| CVE-2023-20269 | Adaptive Security Appliance and Firepower Threat Defense | 2023-09-13 | 9.1 | Known |
| CVE-2016-6415 | IOS, IOS XR, and IOS XE | 2023-05-19 | 7.5 | – |
| CVE-2004-1464 | IOS | 2023-05-19 | 5.9 | – |
| CVE-2017-6742 | IOS and IOS XE Software | 2023-04-19 | 8.8 | – |
| CVE-2020-3433 | AnyConnect Secure | 2022-10-24 | 7.8 | Known |
| CVE-2020-3153 | AnyConnect Secure | 2022-10-24 | 6.5 | Known |
| CVE-2019-15271 | RV Series Routers | 2022-06-08 | 8.8 | – |
| CVE-2016-6367 | Adaptive Security Appliance (ASA) | 2022-05-24 | 7.8 | – |
| CVE-2016-6366 | Adaptive Security Appliance (ASA) | 2022-05-24 | 8.8 | – |
| CVE-2022-20821 | IOS XR | 2022-05-23 | 6.5 | – |
| CVE-2018-0147 | Secure Access Control System (ACS) | 2022-03-25 | 9.8 | – |
| CVE-2018-0125 | VPN Routers | 2022-03-25 | 9.8 | – |
| CVE-2017-3881 | IOS and IOS XE | 2022-03-25 | 9.8 | – |
| CVE-2015-0666 | Prime Data Center Network Manager (DCNM) | 2022-03-25 | 7.5 | – |
| CVE-2010-3035 | IOS XR | 2022-03-25 | 7.5 | – |
| CVE-2009-2055 | IOS XR | 2022-03-25 | 5.9 | – |
| CVE-2022-20708 | Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 8.0 | – |
| CVE-2022-20703 | Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 8.0 | – |
| CVE-2022-20701 | Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 7.8 | – |
| CVE-2022-20700 | Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 9.8 | – |
| CVE-2022-20699 | Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 9.8 | – |
| CVE-2019-1652 | Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | 2022-03-03 | 7.2 | – |
| CVE-2018-0180 | IOS Software | 2022-03-03 | 5.9 | – |
| CVE-2018-0179 | IOS Software | 2022-03-03 | 5.9 | – |
| CVE-2018-0175 | IOS, XR, and XE Software | 2022-03-03 | 8.0 | – |
| CVE-2018-0174 | IOS XE Software | 2022-03-03 | 8.6 | – |
| CVE-2018-0173 | IOS and IOS XE Software | 2022-03-03 | 8.6 | – |
| CVE-2018-0172 | IOS and IOS XE Software | 2022-03-03 | 8.6 | – |
| CVE-2018-0167 | IOS, XR, and XE Software | 2022-03-03 | 8.8 | – |
| CVE-2018-0161 | IOS Software | 2022-03-03 | 6.3 | – |
| CVE-2018-0159 | IOS Software and Cisco IOS XE Software | 2022-03-03 | 7.5 | – |
| CVE-2018-0158 | IOS Software and Cisco IOS XE Software | 2022-03-03 | 8.6 | – |
| CVE-2018-0156 | IOS Software and Cisco IOS XE Software | 2022-03-03 | 7.5 | – |
| CVE-2018-0155 | Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | 2022-03-03 | 8.6 | – |
| CVE-2018-0154 | IOS Software | 2022-03-03 | 7.5 | – |
| CVE-2018-0151 | IOS and IOS XE Software | 2022-03-03 | 9.8 | – |
| CVE-2017-6744 | IOS software | 2022-03-03 | 8.8 | – |
| CVE-2017-6743 | IOS and IOS XE Software | 2022-03-03 | 8.8 | – |
| CVE-2017-6740 | IOS and IOS XE Software | 2022-03-03 | 8.8 | – |
| CVE-2017-6739 | IOS and IOS XE Software | 2022-03-03 | 8.8 | – |
| CVE-2017-6738 | IOS and IOS XE Software | 2022-03-03 | 8.8 | – |
| CVE-2017-6737 | IOS and IOS XE Software | 2022-03-03 | 8.8 | – |
| CVE-2017-6736 | IOS and IOS XE Software | 2022-03-03 | 8.8 | – |
| CVE-2017-6663 | IOS and IOS XE Software | 2022-03-03 | 6.5 | – |
| CVE-2017-6627 | IOS and IOS XE Software | 2022-03-03 | 7.5 | – |
| CVE-2017-12319 | IOS XE Software | 2022-03-03 | 5.9 | – |
| CVE-2017-12240 | IOS and IOS XE Software | 2022-03-03 | 9.8 | – |
| CVE-2017-12238 | Catalyst 6800 Series Switches | 2022-03-03 | 6.5 | – |
| CVE-2017-12237 | IOS and IOS XE Software | 2022-03-03 | 7.5 | – |
| CVE-2017-12235 | IOS software | 2022-03-03 | 7.5 | – |
| CVE-2017-12234 | IOS software | 2022-03-03 | 7.5 | – |
| CVE-2017-12233 | IOS software | 2022-03-03 | 7.5 | – |
| CVE-2017-12232 | IOS software | 2022-03-03 | 6.5 | – |
| CVE-2017-12231 | IOS software | 2022-03-03 | 7.5 | – |
| CVE-2021-1498 | HyperFlex HX | 2021-11-03 | 9.8 | – |
| CVE-2021-1497 | HyperFlex HX | 2021-11-03 | 9.8 | – |
| CVE-2020-3580 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2021-11-03 | 6.1 | Known |
| CVE-2020-3569 | IOS XR | 2021-11-03 | 8.6 | – |
| CVE-2020-3566 | IOS XR | 2021-11-03 | 8.6 | – |
| CVE-2020-3452 | Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2021-11-03 | 7.5 | – |
| CVE-2020-3161 | Cisco IP Phones | 2021-11-03 | 9.8 | – |
| CVE-2020-3118 | IOS XR | 2021-11-03 | 8.8 | – |
| CVE-2019-1653 | Small Business RV320 and RV325 Routers | 2021-11-03 | 7.5 | – |
| CVE-2018-0296 | Adaptive Security Appliance (ASA) | 2021-11-03 | 7.5 | – |
| CVE-2018-0171 | IOS and IOS XE | 2021-11-03 | 9.8 | – |