CVE Program partner

cisco

Cisco Systems, Inc.

API
CVEs, 365 days5526,732 all time, 149 rejected
Quality99%median 99%
CVSS by the CNA99%share of records
CWE100%share of records
Affected versions99%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationCisco Systems, Inc.
RoleCNA
TypeHosted Service, Open Source, Researcher, Vendor
Reports tomitre
ScopeAll Cisco products, and any third-party research targets that are not in another CNA’s scope. Cisco will not issue a CVE ID for issues reported on products that are past the Last Day of Support milestone, as defined on Cisco’s End-of-Life Policy, which is available at <a href='https://www.cisco.com/c/en/us/products/eos-eol-policy.html' target='_blank'>https://www.cisco.com/c/en/us/products/eos-eol-policy.html</a>.
Advisorieshttps://tools.cisco.com/security/center/resources/security_vulnerability_policy.html#sa

Latest CVEs · RSS

  • CVE-2026-76519 2026-10-14 · CVSS 9.8
    A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrar
  • CVE-2026-76286 2026-10-07 · CVSS 5.3
    In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom Application Program
  • CVE-2026-76285 2026-10-07
    As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resul
  • CVE-2026-76284 2026-10-07
    As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resul
  • CVE-2026-76283 2026-10-07
    As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resul
  • CVE-2026-76282 2026-10-07
    As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resul
  • CVE-2026-76281 2026-10-07
    As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resul
  • CVE-2026-76280 2026-10-07 · CVSS 6.3
    In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, an authenticated
  • CVE-2026-76279 2026-10-07 · CVSS 4.3
    In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search P
  • CVE-2026-76278 2026-10-07 · CVSS 4.3
    In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the edit_spl2_module_permissions capability could use the affecte
  • CVE-2026-76277 2026-10-07 · CVSS 4.1
    In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create a native Splunk use
  • CVE-2026-76276 2026-10-07 · CVSS 4.3
    In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could retrieve ori
  • CVE-2026-76275 2026-10-07 · CVSS 4.3
    In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could access search query
  • CVE-2026-76274 2026-10-07 · CVSS 6.5
    In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_content capability could redirect an outbound reque
  • CVE-2026-76273 2026-10-07 · CVSS 4.3
    In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search P
  • CVE-2026-76272 2026-10-07 · CVSS 4.3
    In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could cause Splunk Secure
  • CVE-2026-76271 2026-10-07 · CVSS 6.5
    In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause a deni
  • CVE-2026-76270 2026-10-07 · CVSS 6.5
    In Splunk Enterprise versions below 10.4.3, a user that holds a role with the list_spl2_modules capability could use SQL injection in SPL2 module filtering to a
  • CVE-2026-76269 2026-10-07 · CVSS 6.5
    In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could use a user-controlle
  • CVE-2026-76268 2026-10-07 · CVSS 9.8
    In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Applica
  • CVE-2026-76267 2026-10-07 · CVSS 4.3
    In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_content capability could inject forged entries into
  • CVE-2026-76266 2026-10-07 · CVSS 7.7
    In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterpris
  • CVE-2026-76265 2026-10-07 · CVSS 6.5
    In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, a user who does n
  • CVE-2026-76264 2026-10-07 · CVSS 4.3
    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could create or edit scrip
  • CVE-2026-76472 2026-10-07 · CVSS 8.8
    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal se

All CVE Program partners