Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities
CVEs:CVE-2026-20147CVE-2026-20148
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-111903 | affected | Cisco | — | — |
| CVRFPID-292424 | affected | Cisco | — | — |
Cisco Identity Services Engine Remote Code Execution Vulnerabilities
CVEs:CVE-2026-20180CVE-2026-20186
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-111903 | affected | Cisco | — | — |
Cisco Integrated Management Controller Command Injection and Remote Code Execution Vulnerabilities
CVEs:CVE-2026-20094CVE-2026-20095CVE-2026-20096CVE-2026-20097
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-191638 | affected | Cisco | — | — |
| CVRFPID-201970 | affected | Cisco | — | — |
| CVRFPID-235874 | affected | Cisco | — | — |
Cisco Integrated Management Controller Authentication Bypass Vulnerability
CVEs:CVE-2026-20093
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-191638 | affected | Cisco | — | — |
| CVRFPID-201970 | affected | Cisco | — | — |
| CVRFPID-235874 | affected | Cisco | — | — |
Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability
CVEs:CVE-2026-20160
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-274027 | affected | Cisco | — | — |
Cisco Webex Services Certificate Validation Vulnerability
CVEs:CVE-2026-20184
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-228295 | affected | Cisco | — | — |
Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability
CVEs:CVE-2026-20136
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-111903 | affected | Cisco | — | — |
Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability
CVEs:CVE-2026-20174
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-280977 | affected | Cisco | — | — |
| CVRFPID-284336 | affected | Cisco | — | — |
Cisco Unity Connection Arbitrary File Download Vulnerabilities
CVEs:CVE-2026-20078CVE-2026-20081
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-73608 | affected | Cisco | — | — |
Cisco Secure Web Appliance Authentication Bypass Vulnerability
CVEs:CVE-2026-20152
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-189789 | affected | Cisco | — | — |
Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability
CVEs:CVE-2026-20151
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-274027 | affected | Cisco | — | — |
Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability
CVEs:CVE-2026-20155
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-213688 | affected | Cisco | — | — |
Cisco Unity Connection Cross-Site Scripting, Open Redirect, and SQL Injection Vulnerabilities
CVEs:CVE-2026-20059CVE-2026-20060CVE-2026-20061
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-73608 | affected | Cisco | — | — |
Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities
CVEs:CVE-2026-20132
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-111903 | affected | Cisco | — | — |
Cisco ThousandEyes Enterprise Agent Arbitrary File Overwrite Vulnerability
CVEs:CVE-2026-20161
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-305280 | affected | Cisco | — | — |
Cisco Nexus Dashboard and Nexus Dashboard Insights Server-Side Request Forgery Vulnerability
CVEs:CVE-2026-20041
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-280977 | affected | Cisco | — | — |
| CVRFPID-284336 | affected | Cisco | — | — |
Cisco Nexus Dashboard Configuration Backup REST API Unauthorized Access Vulnerability
CVEs:CVE-2026-20042
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-280977 | affected | Cisco | — | — |
Cisco Integrated Management Controller Cross-Site Scripting Vulnerabilities
CVEs:CVE-2026-20087CVE-2026-20085CVE-2026-20088CVE-2026-20090CVE-2026-20089
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-191638 | affected | Cisco | — | — |
| CVRFPID-201970 | affected | Cisco | — | — |
| CVRFPID-235874 | affected | Cisco | — | — |
Cisco Webex Contact Center Cross-Site Scripting Vulnerability
CVEs:CVE-2026-20170
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-302888 | affected | Cisco | — | — |
Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.