boxscore/security
VENDOR · referenceVendors · latest edition

Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

Cisco

Vendor reference — Cisco · sector: Network & Infrastructure. Cumulative disclosure record across the archive.

Follow Cisco — Atom feed

Career totals

Disclosures & known-exploited
All-timeYTD
CVEs267219
KEV entries6118
Rate & severity
KEV/100Med CVSSMed EPSSCHML
22.88.6.004786107731

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over all disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▂▄█▄

Last 12 months (new CVEs by first-seen day)
MonthNew CVEs
2025-110
2025-121
2026-011
2026-024
2026-032
2026-040
2026-055
2026-0610
2026-0716
2026-0846
2026-0998
2026-1037

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2021-14989.8100.0CRITICALYES2021-05-06
CVE-2020-34527.5100.0HIGHYES2020-07-22
CVE-2021-14979.8100.0CRITICALYES2021-05-06
CVE-2019-16537.5100.0HIGHYES2019-01-24
CVE-2023-2019810.099.9CRITICALYES2023-10-16
CVE-2025-2028110.099.9CRITICALYES2025-06-25
CVE-2024-204399.899.9CRITICALYES2024-09-04
CVE-2019-16527.299.9HIGHYES2019-01-24
CVE-2023-202737.299.8HIGHYES2023-10-24
CVE-2026-2018210.099.8CRITICALYES2026-05-14
CVE-2026-2012710.099.8CRITICALYES2026-02-25
CVE-2026-202308.699.8HIGHYES2026-06-25
CVE-2026-2007910.099.8CRITICALYES2026-03-04
CVE-2025-203628.699.8HIGHYES2025-09-25
CVE-2020-35806.199.7MEDIUMYES2020-10-21

Recent CVEs

Most recently seen
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2026-765199.875.0CRITICALYES2026-10-14
CVE-2026-764728.82.0HIGH—2026-10-07
CVE-2026-764708.87.4HIGH—2026-10-07
CVE-2026-764697.43.7HIGH—2026-10-07
CVE-2026-764688.212.6HIGH—2026-10-07
CVE-2026-764677.515.5HIGH—2026-10-07
CVE-2026-764649.68.3CRITICAL—2026-10-07
CVE-2026-764638.82.9HIGH—2026-10-07
CVE-2026-1018865.13.0MEDIUM—2026-10-07
CVE-2026-764599.822.0CRITICAL—2026-10-07
CVE-2026-765019.842.2CRITICAL—2026-10-07
CVE-2026-764886.519.7MEDIUM—2026-10-07
CVE-2026-764869.842.2CRITICAL—2026-10-07
CVE-2026-764848.818.7HIGH—2026-10-07
CVE-2026-764839.111.9CRITICAL—2026-10-07

Products

This vendor's products with a reference page (≥2 disclosures), by CVE count. A monolithic vendor total dilutes signal; product pages sharpen it.

Products (by CVE count)
ProductCVEsKEV
Cisco Identity Services Engine Software493
Cisco ISE Passive Identity Connector302
Cisco Secure Firewall Management Center (FMC)233
Cisco Secure Firewall Threat Defense (FTD) Software233
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software193
Cisco IOS XE Software186
Cisco NX-OS Software161
Cisco Catalyst SD-WAN Manager159
Cisco Secure Endpoint140
Cisco IOS XR Software114
Cisco Secure Email93
Cisco Small Business RV Series Router Firmware99
IOS98
Cisco License On-Prem80
Cisco RoomOS Software80
Cisco Unified Computing System (Managed)80
Cisco Adaptive Security Appliance (ASA) Software77
Cisco Campus Gateway Software70
Cisco Catalyst SD-WAN Controller72
Cisco Meraki MR Wireless Access Points Software70
Cisco Meraki MV Firmware70
Cisco Meraki MX Firmware70
Cisco NX-OS System Software In ACI Mode70
Cisco Nexus Dashboard60
Cisco Secure Workload60
Cisco Application Policy Infrastructure Controller (APIC)50
Cisco Secure Email And Web Manager51
Cisco Crosswork Planning40
Cisco Firepower Threat Defense Software44
Cisco Unified Computing System (Standalone)40
Cisco Enterprise NFV Infrastructure Software30
Cisco ThousandEyes Enterprise Agent30
Cisco Unified Computing System E-Series Software (UCSE)30
Cisco AnyConnect Secure Mobility Client22
Cisco BroadWorks20
Cisco Finesse20
Cisco HyperFlex HX Data Platform22
Cisco Industrial Ethernet Switches20
Cisco Unified Communications Manager22

KEV entries

CISA Known Exploited Vulnerabilities (newest addition first)
CVEKEV addedCVSSEPSS %ileSeverity
CVE-2026-765192026-10-149.875.0CRITICAL
CVE-2026-765042026-09-309.878.4CRITICAL
CVE-2026-764602026-09-1610.096.5CRITICAL
CVE-2026-764612026-09-149.898.2CRITICAL
CVE-2026-200792026-09-0910.099.8CRITICAL
CVE-2026-203492026-08-118.662.5HIGH
CVE-2026-203162026-07-295.398.4MEDIUM
CVE-2026-202302026-06-258.699.8HIGH
CVE-2026-202622026-06-156.598.1MEDIUM
CVE-2026-202452026-06-097.897.9HIGH
CVE-2026-201822026-05-1410.099.8CRITICAL
CVE-2026-201282026-04-207.594.3HIGH
CVE-2026-201332026-04-206.598.3MEDIUM
CVE-2026-201222026-04-205.497.9MEDIUM
CVE-2026-201312026-03-1910.098.7CRITICAL
CVE-2026-201272026-02-2510.099.8CRITICAL
CVE-2022-207752026-02-257.896.2HIGH
CVE-2026-200452026-01-218.291.5HIGH
CVE-2025-203932025-12-1710.098.3CRITICAL
CVE-2025-203522025-09-297.798.7HIGH
CVE-2025-203332025-09-259.999.4CRITICAL
CVE-2025-203622025-09-258.699.8HIGH
CVE-2025-202812025-07-2810.099.9CRITICAL
CVE-2025-203372025-07-2810.099.5CRITICAL
CVE-2024-204392025-03-319.899.9CRITICAL

KEV timing

Fastest to KEV
CVEDays
CVE-2020-31530
CVE-2020-32590
CVE-2020-34330
CVE-2023-201980
CVE-2023-202690
CVE-2024-203530
CVE-2024-203590
CVE-2025-203330
CVE-2025-203620
CVE-2025-203930
Longest unpatched (KEV due date passed)
CVEDueDays over
CVE-2021-14972021-11-171797
CVE-2021-14982021-11-171797
CVE-2022-207082022-03-171677
CVE-2022-207032022-03-171677
CVE-2022-207012022-03-171677
CVE-2022-207002022-03-171677
CVE-2022-206992022-03-171677
CVE-2019-16522022-03-171677
CVE-2017-67442022-03-241670
CVE-2017-67432022-03-241670

Methodology

Rate statistics are arithmetic over published figures: KEV/100 = KEV entries ÷ CVEs × 100; medians are taken over this vendor's disclosures. Vendor names are normalized (case, punctuation, common aliases) before aggregation; monthly counts are keyed to first-seen day, the day this archive first observed the record, not the upstream publication date.

Raw counts are not comparable across vendors: disclosure practices, product breadth, and CNA conventions differ widely, so a larger number here does not mean less secure software. This is a reference page assembled from the public record — not a record of its own, and not a ranking of vendors by our judgment.

Sources. CVE records from the CVE Program (cvelistV5); enrichment from NVD (NIST); known-exploited status from the CISA KEV catalog; exploit probability from FIRST EPSS.