Skip to main content
← CVE Tracker

Vendor

Cisco

64 articles

Interlock Ransomware Targets Cisco Firewalls via CVE-2024-20481
HIGH
Threat Intel

Interlock Ransomware Targets Cisco Firewalls via CVE-2024-20481

Interlock ransomware operators exploited a critical Cisco ASA vulnerability before public disclosure. Learn how to detect and mitigate these targeted attacks.

Runtime Rebel Intel
4 min read · Mar 20, 2026
VU
CRITICAL
Vulnerabilities

CVE-2024-20481: Critical Cisco FMC RCE Exploited in the Wild

CISA mandates federal agencies patch CVE-2024-20481, a 9.8 CVSS RCE vulnerability in Cisco Secure Firewall Management Center, following active exploitation.

Runtime Rebel Intel
3 min read · Mar 20, 2026
CISA KEV Update: CVE-2025-66376 Zimbra and SharePoint Exploits
CRITICAL
Vulnerabilities

CISA KEV Update: CVE-2025-66376 Zimbra and SharePoint Exploits

CISA warns of active exploitation for Zimbra CVE-2025-66376, SharePoint flaws, and Cisco zero-days used in ransomware attacks. Secure your systems now.

Runtime Rebel Intel
4 min read · Mar 19, 2026
CVE-2026-20131: Interlock Ransomware Exploits Cisco FMC — Patch Now
HIGH
Malware

CVE-2026-20131: Interlock Ransomware Exploits Cisco FMC — Patch Now

Interlock ransomware actors are exploiting CVE-2026-20131, a critical 10.0 CVSS zero-day in Cisco FMC, to gain unauthenticated root access and deploy malware.

Runtime Rebel Intel
3 min read · Mar 18, 2026
Cisco SD-WAN vManage RCE: Fake PoCs & CVE-2023-20252 Exploitation
HIGH
Vulnerabilities

Cisco SD-WAN vManage RCE: Fake PoCs & CVE-2023-20252 Exploitation

Threat intelligence reveals fake PoCs for Cisco SD-WAN vManage CVE-2023-20252. Understand actual RCE risks and critical patching for affected systems.

Runtime Rebel Intel
4 min read · Mar 13, 2026
VU
HIGH
Vulnerabilities

Cisco IOS XR Software Vulnerabilities: CVE-2024-20320 Patch Guide

Cisco addresses high-severity vulnerabilities in IOS XR Software, including SSH privilege escalation and DoS flaws. Essential mitigation steps for network admins.

Runtime Rebel Intel
3 min read · Mar 12, 2026
VU
CRITICAL
Vulnerabilities

CVE-2026-20127: Cisco Catalyst SD-WAN Exploited — Patch Guide

WatchTowr reports widespread exploitation attempts targeting a recent CVE-2026-20127 vulnerability in Cisco Catalyst SD-WAN devices, urging immediate action.

Runtime Rebel Intel
4 min read · Mar 8, 2026
CVE-2026-20122: Cisco Catalyst SD-WAN Manager Exploited in the Wild
HIGH
Vulnerabilities

CVE-2026-20122: Cisco Catalyst SD-WAN Manager Exploited in the Wild

Cisco confirms active exploitation of CVE-2026-20122 in Catalyst SD-WAN Manager, allowing authenticated attackers to perform arbitrary file overwrites.

Runtime Rebel Intel
3 min read · Mar 5, 2026
VU
CRITICAL
Vulnerabilities

Cisco Catalyst SD-WAN Manager Exploitation: Patch CVE-2024-20437 Now

Cisco confirms active exploitation of two high-severity flaws in Catalyst SD-WAN Manager, involving hardcoded credentials and authentication bypass.

Runtime Rebel Intel
3 min read · Mar 5, 2026
VU
CRITICAL
Vulnerabilities

Cisco Catalyst SD-WAN Manager CVE-2023-20252 — Mitigation Guide

Cisco warns of active exploitation targeting Catalyst SD-WAN Manager vulnerabilities CVE-2023-20252 and CVE-2023-20253. Immediate patching is required.

Runtime Rebel Intel
3 min read · Mar 5, 2026
VU
CRITICAL
Vulnerabilities

Cisco Secure FMC Root Access & DoS Flaws Patched: Update Now

Cisco addresses two maximum-severity vulnerabilities in Secure Firewall Management Center (FMC) allowing unauthenticated root access and denial of service.

Runtime Rebel Intel
4 min read · Mar 4, 2026
Cisco SD-WAN Zero-Day Under Exploitation for 3 Years
CRITICAL
Vulnerabilities

Cisco SD-WAN Zero-Day Under Exploitation for 3 Years

A critical zero-day vulnerability, CVE-2026-20127, in Cisco SD-WAN has been actively exploited by a sophisticated threat actor for three years.

Runtime Rebel Intel
4 min read · Feb 27, 2026
Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited for Admin Access
CRITICAL
Vulnerabilities

Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited for Admin Access

CVE-2026-20127 is a critical CVSS 10.0 flaw in Cisco SD-WAN controllers exploited since 2023, allowing unauthenticated remote administrative access.

Runtime Rebel Intel
4 min read · Feb 26, 2026
TH
CRITICAL
Threat Intel

Cisco SD-WAN Exploitation: Critical Authentication Bypass & Escalation

CISA alerts on active global exploitation of Cisco SD-WAN, leveraging CVE-2026-20127 for initial access and CVE-2022-20775 for privilege escalation.

Runtime Rebel Intel
4 min read · Feb 25, 2026
VU
HIGH
Vulnerabilities

CISA Adds Two Cisco SD-WAN Exploits to KEV Catalog

CISA adds CVE-2022-20775 (Path Traversal) and CVE-2026-20127 (Auth Bypass) affecting Cisco SD-WAN to its Known Exploited Vulnerabilities Catalog.

Runtime Rebel Intel
4 min read · Feb 25, 2026
VU
CRITICAL
Vulnerabilities

Critical Cisco SD-WAN Zero-Day Exploited Since 2023

Cisco Catalyst SD-WAN critical authentication bypass (CVE-2026-20127) actively exploited since 2023, enabling remote compromise and rogue peer addition.

Runtime Rebel Intel
4 min read · Feb 25, 2026