Complete index
Zero-Day Vulnerability Archive
Search all tracked zero-day vulnerabilities and narrow the results by year, vendor, software, weakness type, or presence in the CISA and ENISA known exploited vulnerability catalogs.
| CVE | Vendor / Product | Vulnerability | CWE | Discovered | KEV |
|---|---|---|---|---|---|
| CVE-2026-76504 | Cisco Systems, IncCatalyst SD-WAN Manager (formerly SD-WAN vManage) | Improper Handling of URL Encoding (Hex Encoding) in Catalyst SD-WAN Manager (formerly SD-WAN vManage) | CWE-177 | — | |
| CVE-2026-76460 | Cisco Systems, IncCisco Identity Services Engine (ISE) | Incorrect use of privileged APIs in Cisco Identity Services Engine (ISE) | CWE-648 | CISA KEV | |
| CVE-2026-76461 | Cisco Systems, IncSecure Email Gateway | SQL injection in Secure Email Gateway | CWE-89 | CISA KEV | |
| CVE-2026-20349 | Cisco Systems, IncCisco Secure Firewall Adaptive Security Appliance (ASA) | Heap Inspection in Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall Adaptive Security Appliance (ASA) | CWE-244 | CISA KEVENISA KEV | |
| CVE-2026-20316 | Cisco Systems, IncCisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) | Use of Hard-coded Password in Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) | CWE-259 | CISA KEVENISA KEV | |
| CVE-2026-20262 | Cisco Systems, IncCatalyst SD-WAN Manager (formerly SD-WAN vManage) | Path traversal in Catalyst SD-WAN Manager (formerly SD-WAN vManage) | CWE-22 | CISA KEVENISA KEV | |
| CVE-2026-20245 | Cisco Systems, IncCatalyst SD-WAN Manager (formerly SD-WAN vManage) | Improper Encoding or Escaping of Output in Catalyst SD-WAN Manager (formerly SD-WAN vManage) | CWE-116 | CISA KEVENISA KEV | |
| CVE-2026-20182 | Cisco Systems, IncCatalyst SD-WAN Controller (formerly SD-WAN vSmart) | Improper authentication in Cisco Systems, Inc products | CWE-287 | CISA KEVENISA KEV | |
| CVE-2026-20127 | Cisco Systems, IncCatalyst SD-WAN Controller (formerly SD-WAN vSmart) | Improper authentication in Catalyst SD-WAN Controller (formerly SD-WAN vSmart) and Catalyst SD-WAN Manager (formerly SD-WAN vManage) | CWE-287 | CISA KEVENISA KEV | |
| CVE-2026-20045 | Cisco Systems, IncCisco Unified Communications Manager | Code Injection in Cisco Systems, Inc products | CWE-94 | CISA KEV | |
| CVE-2025-20393 | Cisco Systems, IncSecure Email Gateway | Input validation error in Cisco Secure Email and Web Manager and Secure Email Gateway | CWE-20 | CISA KEVENISA KEV | |
| CVE-2025-20362 | Cisco Systems, IncCisco Secure Firewall Adaptive Security Appliance (ASA) | Missing authorization in Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) | CWE-862 | CISA KEVENISA KEV | |
| CVE-2025-20352 | Cisco Systems, IncCisco IOS XE | Stack-based buffer overflow in Cisco IOS XE | CWE-121 | CISA KEVENISA KEV | |
| CVE-2024-20481 | Cisco Systems, IncCisco Secure Firewall Adaptive Security Appliance (ASA) | Missing Release of Resource after Effective Lifetime in Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall Adaptive Security Appliance (ASA) | CWE-772 | CISA KEVENISA KEV | |
| CVE-2024-20399 | Cisco Systems, IncCisco NX-OS | OS Command Injection in Cisco NX-OS | CWE-78 | CISA KEVENISA KEV | |
| CVE-2024-20359 | Cisco Systems, IncCisco Secure Firewall Adaptive Security Appliance (ASA) | Code Injection in Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) | CWE-94 | CISA KEVENISA KEV | |
| CVE-2024-20353 | Cisco Systems, IncCisco Secure Firewall Adaptive Security Appliance (ASA) | Infinite loop in Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) | CWE-835 | CISA KEVENISA KEV | |
| CVE-2023-20198 | Cisco Systems, IncCisco IOS XE | Improper Privilege Management in Cisco IOS XE | CWE-269 | CISA KEVENISA KEV | |
| CVE-2023-20109 | Cisco Systems, IncCisco IOS | Out-of-bounds write in Cisco IOS and Cisco IOS XE | CWE-787 | CISA KEVENISA KEV | |
| CVE-2023-20269 | Cisco Systems, IncCisco Secure Firewall Adaptive Security Appliance (ASA) | Authentication bypass using an alternate path or channel in Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) | CWE-288 | CISA KEVENISA KEV |
Showing 1–20 of 29 results