Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
CVEs:CVE-2026-20182
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-271450 | affected | Cisco | — | — |
| CVRFPID-292518 | affected | Cisco | — | — |
Cisco Catalyst SD-WAN Manager Vulnerabilities
CVEs:CVE-2026-20209CVE-2026-20210CVE-2026-20224
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-271450 | affected | Cisco | — | — |
Cisco Secure Workload Unauthorized API Access Vulnerability
CVEs:CVE-2026-20223
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-284493 | affected | Cisco | — | — |
Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities
CVEs:CVE-2026-20034CVE-2026-20035
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-73608 | affected | Cisco | — | — |
Cisco Nexus 3000 and 9000 Series Switches Border Gateway Protocol Denial of Service Vulnerability
CVEs:CVE-2026-20171
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-284574:265091 | affected | Cisco | — | — |
| CVRFPID-284574:265096 | affected | Cisco | — | — |
| CVRFPID-284892:265096 | affected | Cisco | — | — |
| CVRFPID-286098:265091 | affected | Cisco | — | — |
| CVRFPID-286098:265096 | affected | Cisco | — | — |
| CVRFPID-286833:265091 | affected | Cisco | — | — |
| CVRFPID-286833:265096 | affected | Cisco | — | — |
| CVRFPID-287105:265096 | affected | Cisco | — | — |
| CVRFPID-289309:265091 | affected | Cisco | — | — |
| CVRFPID-289309:265096 | affected | Cisco | — | — |
| CVRFPID-290556:265091 | affected | Cisco | — | — |
| CVRFPID-290620:265091 | affected | Cisco | — | — |
| CVRFPID-290620:265096 | affected | Cisco | — | — |
| CVRFPID-292658:265091 | affected | Cisco | — | — |
| CVRFPID-292658:265096 | affected | Cisco | — | — |
| CVRFPID-294841:265091 | affected | Cisco | — | — |
| CVRFPID-294841:265096 | affected | Cisco | — | — |
| CVRFPID-295511:265091 | affected | Cisco | — | — |
| CVRFPID-295511:265096 | affected | Cisco | — | — |
| CVRFPID-299969:265096 | affected | Cisco | — | — |
| CVRFPID-300117:265091 | affected | Cisco | — | — |
| CVRFPID-300515:265091 | affected | Cisco | — | — |
| CVRFPID-300515:265096 | affected | Cisco | — | — |
| CVRFPID-300516:265096 | affected | Cisco | — | — |
| CVRFPID-300517:265096 | affected | Cisco | — | — |
| CVRFPID-300741:265096 | affected | Cisco | — | — |
| CVRFPID-300748:265091 | affected | Cisco | — | — |
| CVRFPID-300748:265096 | affected | Cisco | — | — |
| CVRFPID-300941:265091 | affected | Cisco | — | — |
| CVRFPID-300941:265096 | affected | Cisco | — | — |
| CVRFPID-300942:265096 | affected | Cisco | — | — |
| CVRFPID-301024:265091 | affected | Cisco | — | — |
| CVRFPID-301024:265096 | affected | Cisco | — | — |
| CVRFPID-301106:265096 | affected | Cisco | — | — |
| CVRFPID-301115:265091 | affected | Cisco | — | — |
| CVRFPID-301115:265096 | affected | Cisco | — | — |
| CVRFPID-301277:265091 | affected | Cisco | — | — |
| CVRFPID-301277:265096 | affected | Cisco | — | — |
| CVRFPID-301289:265096 | affected | Cisco | — | — |
| CVRFPID-301568:265091 | affected | Cisco | — | — |
| CVRFPID-301568:265096 | affected | Cisco | — | — |
| CVRFPID-301718:265091 | affected | Cisco | — | — |
| CVRFPID-301718:265096 | affected | Cisco | — | — |
| CVRFPID-301720:265096 | affected | Cisco | — | — |
| CVRFPID-302635:265091 | affected | Cisco | — | — |
| CVRFPID-302635:265096 | affected | Cisco | — | — |
| CVRFPID-302643:265096 | affected | Cisco | — | — |
| CVRFPID-302754:265091 | affected | Cisco | — | — |
| CVRFPID-302754:265096 | affected | Cisco | — | — |
| CVRFPID-302817:265091 | affected | Cisco | — | — |
| CVRFPID-302817:265096 | affected | Cisco | — | — |
| CVRFPID-302884:265096 | affected | Cisco | — | — |
| CVRFPID-303016:265091 | affected | Cisco | — | — |
| CVRFPID-303016:265096 | affected | Cisco | — | — |
| CVRFPID-303064:265091 | affected | Cisco | — | — |
| CVRFPID-303064:265096 | affected | Cisco | — | — |
| CVRFPID-303309:265091 | affected | Cisco | — | — |
| CVRFPID-303309:265096 | affected | Cisco | — | — |
| CVRFPID-303349:265091 | affected | Cisco | — | — |
| CVRFPID-303349:265096 | affected | Cisco | — | — |
| CVRFPID-303360:265091 | affected | Cisco | — | — |
| CVRFPID-303360:265096 | affected | Cisco | — | — |
| CVRFPID-303719:265096 | affected | Cisco | — | — |
| CVRFPID-304106:265091 | affected | Cisco | — | — |
| CVRFPID-304106:265096 | affected | Cisco | — | — |
| CVRFPID-305294:265096 | affected | Cisco | — | — |
| CVRFPID-306452:265091 | affected | Cisco | — | — |
| CVRFPID-306452:265096 | affected | Cisco | — | — |
| CVRFPID-306458:265096 | affected | Cisco | — | — |
| CVRFPID-306581:265091 | affected | Cisco | — | — |
| CVRFPID-306581:265096 | affected | Cisco | — | — |
| CVRFPID-306584:265096 | affected | Cisco | — | — |
| CVRFPID-306596:265091 | affected | Cisco | — | — |
| CVRFPID-306596:265096 | affected | Cisco | — | — |
| CVRFPID-306630:265096 | affected | Cisco | — | — |
| CVRFPID-306631:265096 | affected | Cisco | — | — |
| CVRFPID-306796:265096 | affected | Cisco | — | — |
Cisco ThousandEyes Virtual Appliance Authenticated Remote Code Execution Vulnerability
CVEs:CVE-2026-20199
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-305280 | affected | Cisco | — | — |
Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vulnerability
CVEs:CVE-2026-20185
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-278027 | affected | Cisco | — | — |
Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory
CVEs:CVE-2026-20188
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-227765 | affected | Cisco | — | — |
| CVRFPID-273559 | affected | Cisco | — | — |
Cisco IoT Field Network Director Vulnerabilities
CVEs:CVE-2026-20167CVE-2026-20168CVE-2026-20169
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-227605 | affected | Cisco | — | — |
Cisco ThousandEyes Enterprise Agent BrowserBot Command Injection Vulnerability
CVEs:CVE-2026-20206
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-305280 | affected | Cisco | — | — |
Cisco Identity Services Engine Authentication Bypass Vulnerabilities
CVEs:CVE-2026-20193CVE-2026-20195
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-111903 | affected | Cisco | — | — |
Cisco Prime Infrastructure Information Disclosure Vulnerability
CVEs:CVE-2026-20189
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-190324 | affected | Cisco | — | — |
Cisco Slido Insecure Direct Object Reference Vulnerability
CVEs:CVE-2026-20219
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-228295 | affected | Cisco | — | — |
| CVRFPID-308428 | affected | Cisco | — | — |
Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability
CVEs:CVE-2026-20172
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| CVRFPID-256410 | affected | Cisco | — | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.