Cisco

CVEs currently on EVULNABLE's Priority Feed for Cisco, and this vendor's own CISA KEV history.

CISA KEV additions over time

Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.

20 Apr – 12 Oct; busiest week: 3 added.

3

1

May

Jun

Jul

Aug

Sep

Oct

Not ransomware-linked
Ransomware-linked
This week (so far)

CISA KEV additions per week, last 26 weeks
Week of	Added to KEV	Ransomware-linked
2026-04-20	3	0
2026-04-27	0	0
2026-05-04	0	0
2026-05-11	1	0
2026-05-18	0	0
2026-05-25	0	0
2026-06-01	0	0
2026-06-08	1	0
2026-06-15	1	0
2026-06-22	1	0
2026-06-29	0	0
2026-07-06	0	0
2026-07-13	1	0
2026-07-20	0	0
2026-07-27	1	1
2026-08-03	0	0
2026-08-10	1	0
2026-08-17	0	0
2026-08-24	0	0
2026-08-31	0	0
2026-09-07	1	0
2026-09-14	2	0
2026-09-21	0	0
2026-09-28	1	0
2026-10-05	0	0
2026-10-12 (so far)	1	0

In EVULNABLE's ranked feed

Showing the top 100 of 101 Cisco CVEs in EVULNABLE's ranked feed.

Top 50 Top 100 Top 200

#1 89 Immediate CVE-2026-20079 CISA federal deadline · Overdue by 35 daysCISA KEV Cisco — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

EVRS 89/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS88.2% · 99.77th pctlKEV since2026-09-09

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.882.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#2 88 Immediate CVE-2025-20281 ExigentKEV since 2025 · listed over a yearCISA KEV Cisco — Cisco Identity Services Engine Injection Vulnerability

EVRS 88/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS97.6% · 99.9th pctlKEV since2025-07-28

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.976.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#3 88 Immediate CVE-2026-20182 ExigentCISA federal deadline · Overdue by 5 monthsCISA KEV Cisco — Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

EVRS 88/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS91.8% · 99.82nd pctlKEV since2026-05-14

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.918.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#4 87 Immediate CVE-2021-1498 ExigentKEV since 2021 · listed over a yearCISA KEV Cisco — Cisco HyperFlex HX Data Platform Command Injection Vulnerability

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.99th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE page NVD ↗CISA KEV ↗

#5 87 Immediate CVE-2021-1497 ExigentKEV since 2021 · listed over a yearCISA KEV Cisco — Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.97th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE page NVD ↗CISA KEV ↗

#6 87 Immediate CVE-2023-20198 ExigentKEV since 2023 · listed over a yearCISA KEV Cisco — Cisco IOS XE Web UI Privilege Escalation Vulnerability

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS99.6% · 99.95th pctlKEV since2023-10-16

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#7 87 Immediate CVE-2018-0171 ExigentKEV since 2021 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.5% · 99.94th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.

Full CVE page NVD ↗CISA KEV ↗

#8 87 Immediate CVE-2017-3881 ExigentKEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Remote Code Execution Vulnerability

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.0% · 99.93rd pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.990.

Full CVE page NVD ↗CISA KEV ↗

#9 87 Immediate CVE-2024-20439 ExigentKEV since 2025 · listed over a yearCISA KEV Cisco — Cisco Smart Licensing Utility Static Credential Vulnerability

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS97.1% · 99.89th pctlKEV since2025-03-31

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.971.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#10 87 Immediate CVE-2026-20127 CISA federal deadline · Overdue by 8 monthsCISA KEV Cisco — Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

EVRS 87/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS88.5% · 99.77th pctlKEV since2026-02-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.885.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#11 85 Immediate CVE-2026-20230 CISA federal deadline · Overdue by 4 monthsCISA KEV Cisco — Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

EVRS 85/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS88.2% · 99.77th pctlKEV since2026-06-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.882.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#12 85 Immediate CVE-2020-3580 KEV since 2021 · listed over a yearRansomwareCISA KEV Cisco — Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability

EVRS 85/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.1 (NVD)EPSS85.6% · 99.72nd pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE page NVD ↗CISA KEV ↗

#13 85 Immediate CVE-2026-20131 ExigentCISA federal deadline · Overdue by 7 monthsRansomwareCISA KEV Cisco — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS43.2% · 98.7th pctlKEV since2026-03-19

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#14 85 Immediate CVE-2023-20269 ExigentKEV since 2023 · listed over a yearRansomwareCISA KEV Cisco — Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.1 (NVD)EPSS25.5% · 97.9th pctlKEV since2023-09-13

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#15 85 Immediate CVE-2026-76519 ExigentCISA federal deadline in 0 daysCISA KEV Cisco — Cisco Secure Email Gateway Relative Path Traversal Vulnerability

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (Cisco)EPSS1.6% · 75th pctlKEV since2026-10-14

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.016.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#16 84 Urgent CVE-2020-3452 KEV since 2021 · listed over a yearCISA KEV Cisco — Cisco ASA and FTD Read-Only Path Traversal Vulnerability

EVRS 84/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS99.9% · 99.99th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE page NVD ↗CISA KEV ↗

#17 84 Urgent CVE-2018-0296 KEV since 2021 · listed over a yearCISA KEV Cisco — Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability

EVRS 84/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS99.9% · 99.97th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE page NVD ↗CISA KEV ↗

#18 84 Urgent CVE-2019-1653 KEV since 2021 · listed over a yearCISA KEV Cisco — Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

EVRS 84/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS99.9% · 99.96th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE page NVD ↗CISA KEV ↗

#19 83 Urgent CVE-2019-1652 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco Small Business Routers Improper Input Validation Vulnerability

EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS95.9% · 99.88th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.959.

Full CVE page NVD ↗CISA KEV ↗

#20 83 Urgent CVE-2025-20362 KEV since 2025 · listed over a yearCISA KEV Cisco — Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS87.1% · 99.75th pctlKEV since2025-09-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.871.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#21 83 Urgent CVE-2020-3161 KEV since 2021 · listed over a yearCISA KEV Cisco — Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability

EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS83.9% · 99.69th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.839.

Full CVE page NVD ↗CISA KEV ↗

#22 83 Urgent CVE-2020-3259 KEV since 2024 · listed over a yearRansomwareCISA KEV Cisco — Cisco ASA and FTD Information Disclosure Vulnerability

EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS71.8% · 99.42nd pctlKEV since2024-02-15

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#23 82 Urgent CVE-2016-6366 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability

EVRS 82/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS87.6% · 99.76th pctlKEV since2022-05-24

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.876.

Full CVE page NVD ↗CISA KEV ↗

#24 81 Urgent CVE-2023-20273 KEV since 2023 · listed over a yearCISA KEV Cisco — Cisco IOS XE Web UI Command Injection Vulnerability

EVRS 81/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS89.6% · 99.79th pctlKEV since2023-10-23

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.896.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#25 81 Urgent CVE-2016-6415 KEV since 2023 · listed over a yearCISA KEV Cisco — Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

EVRS 81/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS87.7% · 99.76th pctlKEV since2023-05-19

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.877.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#26 81 Urgent CVE-2025-20333 KEV since 2025 · listed over a yearCISA KEV Cisco — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

EVRS 81/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.9 (NVD)EPSS71.2% · 99.41st pctlKEV since2025-09-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.712.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#27 80 Urgent CVE-2022-20699 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

EVRS 80/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS72.5% · 99.44th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.725.

Full CVE page NVD ↗CISA KEV ↗

#28 80 Urgent CVE-2025-20337 KEV since 2025 · listed over a yearCISA KEV Cisco — Cisco Identity Services Engine Injection Vulnerability

EVRS 80/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS68.0% · 99.32nd pctlKEV since2025-07-28

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.680.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#29 78 Urgent CVE-2024-20353 KEV since 2024 · listed over a yearCISA KEV Cisco — Cisco ASA and FTD Denial of Service Vulnerability

EVRS 78/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS70.7% · 99.39th pctlKEV since2024-04-24

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.707.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#30 78 Urgent CVE-2017-6736 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

EVRS 78/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS70.4% · 99.38th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.704.

Full CVE page NVD ↗CISA KEV ↗

#31 75 Urgent CVE-2018-0125 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco VPN Routers Remote Code Execution Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS55.2% · 99.02nd pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.552.

Full CVE page NVD ↗CISA KEV ↗

#32 75 Urgent CVE-2023-20118 KEV since 2025 · listed over a yearCISA KEV Cisco — Cisco Small Business RV Series Routers Command Injection Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS54.1% · 99th pctlKEV since2025-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.541.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#33 75 Urgent CVE-2017-6737 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS45.2% · 98.8th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.452.

Full CVE page NVD ↗CISA KEV ↗

#34 75 Urgent CVE-2015-0666 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS40.4% · 98.6th pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.404.

Full CVE page NVD ↗CISA KEV ↗

#35 75 Urgent CVE-2025-20352 KEV since 2025 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.7 (NVD)EPSS40.2% · 98.6th pctlKEV since2025-09-29

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.402.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#36 75 Urgent CVE-2026-20316 CISA federal deadline · Overdue by 3 monthsRansomwareCISA KEV Cisco — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.3 (NVD)EPSS35.1% · 98.4th pctlKEV since2026-07-29

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#37 75 Urgent CVE-2008-4128 CISA federal deadline · Overdue by 3 monthsCISA KEV Cisco — Cisco IOS Cross-Site Request Forgery Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.1 (NVD)EPSS33.9% · 98.4th pctlKEV since2026-07-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.339.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#38 75 Urgent CVE-2026-20133 CISA federal deadline · Overdue by 6 monthsCISA KEV Cisco — Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS32.4% · 98.3rd pctlKEV since2026-04-20

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.324.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#39 75 Urgent CVE-2025-20393 CISA federal deadline · Overdue by 10 monthsCISA KEV Cisco — Cisco Multiple Products Improper Input Validation Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS32.4% · 98.3rd pctlKEV since2025-12-17

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.324.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#40 75 Urgent CVE-2026-76461 CISA federal deadline · Overdue by 30 daysCISA KEV Cisco — Cisco Secure Email Gateway SQL Injection Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS29.5% · 98.2nd pctlKEV since2026-09-14

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.295.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#41 75 Urgent CVE-2020-3153 KEV since 2022 · listed over a yearRansomwareCISA KEV Cisco — Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.5 (NVD)EPSS28.3% · 98.1st pctlKEV since2022-10-24

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#42 75 Urgent CVE-2026-20262 CISA federal deadline · Overdue by 4 monthsCISA KEV Cisco — Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.5 (NVD)EPSS28.2% · 98.1st pctlKEV since2026-06-15

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.282.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#43 75 Urgent CVE-2026-20122 CISA federal deadline · Overdue by 6 monthsCISA KEV Cisco — Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.4 (NVD)EPSS25.5% · 97.9th pctlKEV since2026-04-20

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.255.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#44 75 Urgent CVE-2026-20245 CISA federal deadline · Overdue by 4 monthsCISA KEV Cisco — Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS25.3% · 97.9th pctlKEV since2026-06-09

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.253.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#45 75 Urgent CVE-2016-6367 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS22.6% · 97.7th pctlKEV since2022-05-24

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.226.

Full CVE page NVD ↗CISA KEV ↗

#46 75 Urgent CVE-2014-2120 KEV since 2024 · listed over a yearCISA KEV Cisco — Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.1 (NVD)EPSS22.6% · 97.7th pctlKEV since2024-11-12

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.226.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#47 75 Urgent CVE-2017-6742 KEV since 2023 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS21.4% · 97.6th pctlKEV since2023-04-19

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.214.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#48 75 Urgent CVE-2024-20359 KEV since 2024 · listed over a yearCISA KEV Cisco — Cisco ASA and FTD Privilege Escalation Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.0 (NVD)EPSS19.4% · 97.3rd pctlKEV since2024-04-24

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.194.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#49 75 Urgent CVE-2018-0147 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco Secure Access Control System Java Deserialization Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS18.2% · 97.2nd pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.182.

Full CVE page NVD ↗CISA KEV ↗

#50 75 Urgent CVE-2024-20481 KEV since 2024 · listed over a yearCISA KEV Cisco — Cisco ASA and FTD Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.8 (NVD)EPSS15.9% · 96.9th pctlKEV since2024-10-24

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.159.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#51 75 Urgent CVE-2022-20708 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.0 (NVD)EPSS14.9% · 96.7th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.149.

Full CVE page NVD ↗CISA KEV ↗

#52 75 Urgent CVE-2018-0151 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS14.2% · 96.5th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.142.

Full CVE page NVD ↗CISA KEV ↗

#53 75 Urgent CVE-2026-76460 CISA federal deadline · Overdue by 28 daysCISA KEV Cisco — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS14.0% · 96.5th pctlKEV since2026-09-16

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.140.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#54 75 Urgent CVE-2017-12240 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS13.8% · 96.5th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.138.

Full CVE page NVD ↗CISA KEV ↗

#55 75 Urgent CVE-2022-20775 CISA federal deadline · Overdue by 8 monthsCISA KEV Cisco — Cisco SD-WAN Path Traversal Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS12.5% · 96.2nd pctlKEV since2026-02-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.125.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#56 75 Urgent CVE-2020-3118 KEV since 2021 · listed over a yearCISA KEV Cisco — Cisco IOS XR Software Discovery Protocol Format String Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS11.7% · 96th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.117.

Full CVE page NVD ↗CISA KEV ↗

#57 75 Urgent CVE-2022-20821 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS XR Open Port Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.5 (NVD)EPSS11.5% · 96th pctlKEV since2022-05-23

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.115.

Full CVE page NVD ↗CISA KEV ↗

#58 75 Urgent CVE-2017-6740 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS11.1% · 95.9th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.111.

Full CVE page NVD ↗CISA KEV ↗

#59 75 Urgent CVE-2017-6738 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS10.9% · 95.8th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.109.

Full CVE page NVD ↗CISA KEV ↗

#60 75 Urgent CVE-2017-6739 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS10.9% · 95.8th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.109.

Full CVE page NVD ↗CISA KEV ↗

#61 75 Urgent CVE-2017-6743 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS10.9% · 95.8th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.109.

Full CVE page NVD ↗CISA KEV ↗

#62 75 Urgent CVE-2020-3433 KEV since 2022 · listed over a yearRansomwareCISA KEV Cisco — Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS10.0% · 95.6th pctlKEV since2022-10-24

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#63 75 Urgent CVE-2022-20701 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS9.7% · 95.5th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.097.

Full CVE page NVD ↗CISA KEV ↗

#64 75 Urgent CVE-2018-0156 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS9.4% · 95.3rd pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.094.

Full CVE page NVD ↗CISA KEV ↗

#65 75 Urgent CVE-2022-20703 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.0 (NVD)EPSS9.2% · 95.3rd pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.092.

Full CVE page NVD ↗CISA KEV ↗

#66 75 Urgent CVE-2018-0172 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS7.8% · 94.6th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.078.

Full CVE page NVD ↗CISA KEV ↗

#67 75 Urgent CVE-2018-0155 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS7.7% · 94.6th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.077.

Full CVE page NVD ↗CISA KEV ↗

#68 75 Urgent CVE-2018-0173 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS7.6% · 94.5th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.076.

Full CVE page NVD ↗CISA KEV ↗

#69 75 Urgent CVE-2018-0174 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS7.6% · 94.5th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.076.

Full CVE page NVD ↗CISA KEV ↗

#70 75 Urgent CVE-2017-6744 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software SNMP Remote Code Execution Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS7.3% · 94.3rd pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.073.

Full CVE page NVD ↗CISA KEV ↗

#71 75 Urgent CVE-2026-20128 CISA federal deadline · Overdue by 6 monthsCISA KEV Cisco — Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS7.2% · 94.2nd pctlKEV since2026-04-20

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.072.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#72 75 Urgent CVE-2018-0158 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS7.2% · 94.2nd pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.072.

Full CVE page NVD ↗CISA KEV ↗

#73 75 Urgent CVE-2017-12231 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS7.1% · 94.1st pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.071.

Full CVE page NVD ↗CISA KEV ↗

#74 75 Urgent CVE-2017-12233 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS7.1% · 94.1st pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.071.

Full CVE page NVD ↗CISA KEV ↗

#75 75 Urgent CVE-2017-12234 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS7.1% · 94.1st pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.071.

Full CVE page NVD ↗CISA KEV ↗

#76 75 Urgent CVE-2017-12235 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS7.1% · 94.1st pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.071.

Full CVE page NVD ↗CISA KEV ↗

#77 75 Urgent CVE-2017-12237 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS7.1% · 94.1st pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.071.

Full CVE page NVD ↗CISA KEV ↗

#78 75 Urgent CVE-2018-0154 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS7.1% · 94.1st pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.071.

Full CVE page NVD ↗CISA KEV ↗

#79 75 Urgent CVE-2018-0159 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS6.9% · 94th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.069.

Full CVE page NVD ↗CISA KEV ↗

#80 75 Urgent CVE-2017-6627 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS6.2% · 93.4th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.062.

Full CVE page NVD ↗CISA KEV ↗

#81 75 Urgent CVE-2010-3035 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS5.7% · 92.9th pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.057.

Full CVE page NVD ↗CISA KEV ↗

#82 75 Urgent CVE-2022-20700 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS5.7% · 92.9th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.057.

Full CVE page NVD ↗CISA KEV ↗

#83 75 Urgent CVE-2019-15271 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS5.5% · 92.7th pctlKEV since2022-06-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.055.

Full CVE page NVD ↗CISA KEV ↗

#84 75 Urgent CVE-2017-12319 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.9 (NVD)EPSS5.2% · 92.4th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.052.

Full CVE page NVD ↗CISA KEV ↗

#85 75 Urgent CVE-2018-0179 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.9 (NVD)EPSS4.9% · 92nd pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.049.

Full CVE page NVD ↗CISA KEV ↗

#86 75 Urgent CVE-2018-0180 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.9 (NVD)EPSS4.9% · 92nd pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.049.

Full CVE page NVD ↗CISA KEV ↗

#87 75 Urgent CVE-2004-1464 KEV since 2023 · listed over a yearCISA KEV Cisco — Cisco IOS Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.9 (NVD)EPSS4.8% · 91.9th pctlKEV since2023-05-19

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.048.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#88 75 Urgent CVE-2026-20045 CISA federal deadline · Overdue by 8 monthsCISA KEV Cisco — Cisco Unified Communications Products Code Injection Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS4.5% · 91.4th pctlKEV since2026-01-21

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.045.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#89 75 Urgent CVE-2024-20399 KEV since 2024 · listed over a yearCISA KEV Cisco — Cisco NX-OS Command Injection Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.7 (NVD)EPSS4.3% · 91st pctlKEV since2024-07-02

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.043.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#90 75 Urgent CVE-2018-0161 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software Resource Management Errors Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.3 (NVD)EPSS4.1% · 90.6th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.041.

Full CVE page NVD ↗CISA KEV ↗

#91 75 Urgent CVE-2020-3566 KEV since 2021 · listed over a yearCISA KEV Cisco — Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS3.7% · 89.6th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.037.

Full CVE page NVD ↗CISA KEV ↗

#92 75 Urgent CVE-2018-0175 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.0 (NVD)EPSS3.5% · 88.9th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.035.

Full CVE page NVD ↗CISA KEV ↗

#93 75 Urgent CVE-2018-0167 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS3.4% · 88.5th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.034.

Full CVE page NVD ↗CISA KEV ↗

#94 75 Urgent CVE-2020-3569 KEV since 2021 · listed over a yearCISA KEV Cisco — Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS3.3% · 88.4th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.033.

Full CVE page NVD ↗CISA KEV ↗

#95 75 Urgent CVE-2009-2055 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.9 (NVD)EPSS3.3% · 88.4th pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.033.

Full CVE page NVD ↗CISA KEV ↗

#96 75 Urgent CVE-2023-20109 KEV since 2023 · listed over a yearCISA KEV Cisco — Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.6 (NVD)EPSS2.5% · 84.3rd pctlKEV since2023-10-10

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.025.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#97 75 Urgent CVE-2017-12232 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.5 (NVD)EPSS2.2% · 81.8th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.022.

Full CVE page NVD ↗CISA KEV ↗

#98 75 Urgent CVE-2017-6663 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.5 (NVD)EPSS2.1% · 81.5th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.021.

Full CVE page NVD ↗CISA KEV ↗

#99 75 Urgent CVE-2017-12238 KEV since 2022 · listed over a yearCISA KEV Cisco — Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.5 (NVD)EPSS2.0% · 80.6th pctlKEV since2022-03-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.020.

Full CVE page NVD ↗CISA KEV ↗

#100 75 Urgent CVE-2026-76504 CISA federal deadline · Overdue by 14 daysCISA KEV Cisco — Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (Cisco)EPSS1.8% · 78.4th pctlKEV since2026-09-30

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.018.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗