Cisco — Security Activity Report

Networking, security, collaboration (Cisco PSIRT advisories)

Generated Aug 20, 2026Cohort: 9 vendors with ≥10 CVE advisoriesMethodology ↗

CVE Disclosure Volume

Total all-time: 211 CVEs with Cisco advisories. Source: NVD CVE records joined with vendor advisory publish dates.

Severity Composition

↓ -7.1 pp

46.4% of Cisco's 211 CVEs are CRITICAL or HIGH severity. Industry median: 53.6%. Source: NVD CVSS v3.1.

CRITICAL 28 (13.3%)HIGH 70 (33.2%)MEDIUM 112 (53.1%)NONE 1 (0.5%)

CISA KEV Listings

↑ +4.3 pp

11 of 211 Cisco CVEs in the last 3 years are on CISA's Known Exploited Vulnerabilities catalog (5.2%). Industry median: 0.9%.

Source: CISA Known Exploited Vulnerabilities catalog (current snapshot). KEV listing means CISA observed active in-the-wild exploitation.

Vendor Patch Velocity

Insufficient data to publish a reliable patch-velocity metric for Cisco(sample size: 0, minimum required: 10).

Top Recurring Weakness Classes

Most-frequently mapped CWEs across Cisco's last 3 years of CVE disclosures. Source: NVD — CWE mapping per MITRE taxonomy.

CWE-79Cross-site Scripting (XSS)20 CVEs
CWE-120Buffer Copy without Checking Size (Classic Buffer Overflow)10 CVEs
CWE-20Improper Input Validation7 CVEs
CWE-22Path Traversal7 CVEs
CWE-284Improper Access Control7 CVEs

Recent Security Advisories

Latest advisories published by Cisco, straight from the vendor's own feed. Severity labels are the vendor's — scales differ across vendors.

cisco-sa-ie1k-uxq86LnxMediumCVSS 5.3
Aug 19, 2026
Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability
CVE-2026-20177 vendor source ↗
cisco-sa-cuic-sql-inject-2qbfWSm5MediumCVSS 6.5
Aug 19, 2026
Cisco Unified Intelligence Center SQL Injection Vulnerability
CVE-2026-20327 vendor source ↗
cisco-sa-ucce-pcce-ssrf-TghHxDMediumCVSS 5.0
Aug 19, 2026
Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability
CVE-2026-20314 vendor source ↗
cisco-sa-ie1k-NgXUFF52MediumCVSS 5.4
Aug 19, 2026
Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability
CVE-2026-20232 vendor source ↗
cisco-sa-bworks-xxe-uwUd7CEtHighCVSS 7.5
Aug 19, 2026
Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
CVE-2026-20320 vendor source ↗
cisco-sa-roomos-bof-vTMANZguMediumCVSS 6.1
Aug 19, 2026
Cisco RoomOS Stack Overflow Vulnerability
CVE-2026-20302 vendor source ↗
cisco-sa-hardening-csw1-shSvndWPCriticalCVSS 10.0
Aug 19, 2026
Cisco Secure Workload Software Security Hardening Release: August 2026
CVE-2026-20231 CVE-2026-20315 CVE-2026-20317 CVE-2026-20318 CVE-2026-20319 vendor source ↗
cisco-sa-hardening-crosswork-UzDTU9VhCriticalCVSS 10.0
Aug 19, 2026
Cisco Crosswork Security Hardening Release: August 2026
CVE-2026-20030 CVE-2026-20357 CVE-2026-20358 CVE-2026-20359 vendor source ↗

Full advisory archive: /pulse/vendor-advisories →

Data sources & corrections

NVD National Vulnerability Database (nvd.nist.gov) — CVE records + CVSS v3.1 severity
MITRE cvelistV5 (github.com/CVEProject/cvelistV5) — CNA-published CVE timestamps
CISA Known Exploited Vulnerabilities catalog (cisa.gov/known-exploited-vulnerabilities-catalog)
Vendor security advisories (RHSA, USN, MSRC, GHSA, etc.) — published_at timestamps
MITRE CWE taxonomy (cwe.mitre.org) — weakness class mappings

Snapshot generated Aug 20, 2026. Industry medians refresh every 6 hours; raw vendor counts are queried live on each request.

Spot a factual error in this report?

Email [email protected] with the specific number you're disputing and a link to the authoritative source. We review every report and publish corrections on the methodology page.