Cisco Security Advisories · June 2026 — Cisco Security Advisories
10 advisories 10 CVEs 3 EXPLOITED

PSIRT bulletins (cisco-sa-*) and cross-source CVEs naming Cisco for 2026-06. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 3 are already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

cisco-sa-sdwan-privesc-4uxFrdzx

Cisco PSIRTExploitedCISA KEV listed2026-06-04

Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability

CVEs:CVE-2026-20245

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-271450 affected Cisco
CVRFPID-292518 affected Cisco
Upstream advisory

cisco-sa-cnc-inj-QNMeEmxk

Cisco PSIRTCoalition ESS < 30%HIGH2026-06-17

Cisco Crosswork Network Controller Server-Side Template Injection Vulnerability

CVEs:CVE-2026-20220

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-273559 affected Cisco
Upstream advisory

cisco-sa-notice-vwL7b0S7

Cisco PSIRTAll remainingCRITICAL2026-06-24

Cisco Advance Notification for Publication of July 1, 2026, Security Advisories

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-221075 affected Cisco
CVRFPID-233151 affected Cisco
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.