CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 1:50 PM ET)

What this means for you

This week: 3,345 CVEs published, 273 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,345; Show in the list
Critical, last 7 days: 273; Show in the list
Healthcare-tagged, last 7 days: 10; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product cisco:ios. Show all products

43 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2026-20301	High 8.6	Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability Assigned by cisco	Aug 5, 2026
CVE-2026-20125	High 7.7	A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly,… Assigned by cisco	Mar 25, 2026
CVE-2026-20012	High 8.6	A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure… Assigned by cisco	Mar 25, 2026
CVE-2025-20363	Critical 9.0	A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software… Assigned by cisco	Sep 25, 2025
CVE-2025-20352 Known exploited	High 7.7	A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privil… Assigned by cisco	Sep 24, 2025
CVE-2023-20109 Known exploited	Medium 6.6	A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative contr… Assigned by cisco	Sep 27, 2023
CVE-2018-0180 Known exploited	Medium 6.8	Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in… Assigned by cisco	Mar 28, 2018
CVE-2018-0179 Known exploited	Medium 6.8	Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in… Assigned by cisco	Mar 28, 2018
CVE-2018-0175 Known exploited	High 8.0	Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent atta… Assigned by cisco	Mar 28, 2018
CVE-2018-0174 Known exploited	High 8.6	A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload… Assigned by cisco	Mar 28, 2018

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.