Cisco — Security Activity Report

Networking, security, collaboration (Cisco PSIRT advisories)

Generated Nov 2, 2026Cohort: 9 vendors with ≥10 CVE advisoriesMethodology ↗

CVE Disclosure Volume

Total all-time: 345 CVEs with Cisco advisories. Source: NVD CVE records joined with vendor advisory publish dates.

020220202312024220253422026

Severity Composition

↑ +2.1 pp

55.9% of Cisco's 345 CVEs are CRITICAL or HIGH severity. Industry median: 53.8%. Source: NVD CVSS v3.1.

CRITICAL 77 (22.3%)HIGH 116 (33.6%)MEDIUM 150 (43.5%)LOW 1 (0.3%)NONE 1 (0.3%)

CISA KEV Listings

↑ +3.7 pp

15 of 345 Cisco CVEs in the last 3 years are on CISA's Known Exploited Vulnerabilities catalog (4.3%). Industry median: 0.6%.

Source: CISA Known Exploited Vulnerabilities catalog (current snapshot). KEV listing means CISA observed active in-the-wild exploitation.

Vendor Patch Velocity

Insufficient data to publish a reliable patch-velocity metric for Cisco(sample size: 0, minimum required: 10).

Top Recurring Weakness Classes

Most-frequently mapped CWEs across Cisco's last 3 years of CVE disclosures. Source: NVD — CWE mapping per MITRE taxonomy.

  • CWE-79Cross-site Scripting (XSS)21 CVEs
  • CWE-284Improper Access Control18 CVEs
  • CWE-89SQL Injection18 CVEs
  • CWE-22Path Traversal12 CVEs
  • CWE-20Improper Input Validation11 CVEs

Recent Security Advisories

Latest advisories published by Cisco, straight from the vendor's own feed. Severity labels are the vendor's — scales differ across vendors.

  • cisco-sa-napi-rce-r2shwu2jCriticalCVSS 9.8
    Oct 7, 2026

    Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

    CVE-2026-76471vendor source ↗
  • cisco-sa-nxos-mppe-dhKZAFgbMediumCVSS 4.4
    Oct 7, 2026

    Cisco NX-OS Software Python Sandbox Escape Vulnerability

    CVE-2026-20032vendor source ↗
  • cisco-sa-aci-epgcbp-SfDU7NLfMediumCVSS 5.8
    Oct 7, 2026

    Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass Vulnerability

    CVE-2026-20038vendor source ↗
  • cisco-sa-moam-rce-uBTzYV7CriticalCVSS 9.8
    Oct 7, 2026

    Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

    CVE-2026-76465vendor source ↗
  • cisco-sa-apic-info-priv-enAdB5vDMediumCVSS 6.5
    Oct 7, 2026

    Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability

    CVE-2026-76488vendor source ↗
  • cisco-sa-apic-cmdinj-L6VR4E7MediumCVSS 6.5
    Oct 7, 2026

    Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability

    CVE-2026-20321vendor source ↗
  • cisco-sa-finesse-ssrf-mmSuyugSHighCVSS 7.2
    Oct 7, 2026

    Cisco Finesse Server-Side Request Forgery Vulnerability

    CVE-2026-20362vendor source ↗
  • cisco-sa-nxos-nscpdos-SnderkC7MediumCVSS 5.8
    Oct 7, 2026

    Cisco NX-OS Software Control Plane Denial of Service Vulnerability

    CVE-2026-20173vendor source ↗

Full advisory archive: /pulse/vendor-advisories →

Data sources & corrections

  • NVD National Vulnerability Database (nvd.nist.gov) — CVE records + CVSS v3.1 severity
  • MITRE cvelistV5 (github.com/CVEProject/cvelistV5) — CNA-published CVE timestamps
  • CISA Known Exploited Vulnerabilities catalog (cisa.gov/known-exploited-vulnerabilities-catalog)
  • Vendor security advisories (Red Hat RHSA, Ubuntu USN, Microsoft MSRC, Cisco PSIRT and other per-vendor feeds; the GitHub and OSV advisory databases are not used) — published_at timestamps
  • MITRE CWE taxonomy (cwe.mitre.org) — weakness class mappings

Snapshot generated Nov 2, 2026: when these counts and industry medians were computed. Vendors in the index are recomputed every 6 hours.

Spot a factual error in this report?

Email support@echelongraph.io with the specific number you're disputing and a link to the authoritative source. We review every report and publish corrections on the methodology page.