Cisco 厂商相关 3442 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
思科是全球领先的网络设备与软件供应商,核心业务涵盖企业级路由、交换、无线及安全解决方案。其历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本,常因配置错误或协议解析缺陷引发。值得关注的是,其安全架构持续演进,但近年来因供应链攻击及固件更新中的高危漏洞频发,引发业界对设备全生命周期管理的重视,凸显了复杂网络环境下的防御挑战。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-20183 | ISE 授权绕过漏洞 — Cisco Identity Services Engine Software CWE-285 | 4.3 | Medium | 2026-11-10 |
| CVE-2026-20241 | Cisco ISE 授权绕过漏洞 — Cisco Identity Services Engine Software CWE-285 | 5.3 | Medium | 2026-11-04 |
| CVE-2026-76506 | Cisco UCS Central 远程代码执行漏洞 — Cisco Unified Computing System Central Software CWE-22 | 7.6 | High | 2026-11-04 |
| CVE-2026-76419 | Cisco Unified Communications Manager 跨站脚本漏洞 — Cisco Unified Communications Manager CWE-79 | 6.1 | Medium | 2026-11-04 |
| CVE-2026-76418 | Cisco 防火墙远程访问 SSL VPN 隧道拒绝服务漏洞 — Cisco Secure Firewall Adaptive Security Appliance (ASA) Software CWE-690 | 8.6 | High | 2026-10-28 |
| CVE-2026-76497 | Cisco Expressway 不安全临时文件漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-377 | 6.6 | Medium | 2026-10-21 |
| CVE-2026-76524 | Snort 3 控制通道任意命令执行漏洞 — Cisco Open Source Snort3 CWE-306 | 7.8 | High | 2026-10-21 |
| CVE-2026-76505 | Cisco IOS XR ASR 9000 IPv4单播拒绝服务漏洞 — Cisco IOS XR Software CWE-20 | 7.5 | High | 2026-10-21 |
| CVE-2026-76496 | Cisco Expressway 软件链接解析漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-59 | 7.0 | High | 2026-10-21 |
| CVE-2026-76495 | Cisco Expressway 2026 权限分配错误漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-732 | 7.8 | High | 2026-10-21 |
| CVE-2026-76494 | Cisco Expressway 2026 代码注入漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-94 | 7.8 | High | 2026-10-21 |
| CVE-2026-76493 | Cisco Expressway 未捕获异常漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-248 | 7.5 | High | 2026-10-21 |
| CVE-2026-76490 | Cisco Expressway 越界写入漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-787 | 8.6 | High | 2026-10-21 |
| CVE-2026-76489 | 思科 Snort 3 通用文件处理拒绝服务漏洞 — Cisco Open Source Snort3 CWE-401 | 5.8 | Medium | 2026-10-21 |
| CVE-2026-76492 | Cisco Expressway 空指针漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-476 | 7.5 | High | 2026-10-21 |
| CVE-2026-76491 | Cisco Expressway 系列软件拒绝服务漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-617 | 7.5 | High | 2026-10-21 |
| CVE-2026-76481 | 思科统一通信产品 2026 异常处理漏洞 — Cisco Emergency Responder CWE-703 | 7.5 | High | 2026-10-21 |
| CVE-2026-76487 | Cisco Unified Communications Manager 访问控制漏洞 — Cisco Unified Communications Manager CWE-749 | 5.3 | Medium | 2026-10-21 |
| CVE-2026-76479 | Cisco 统一通信产品路径遍历漏洞 — Cisco Emergency Responder CWE-22 | 7.8 | High | 2026-10-21 |
| CVE-2026-76478 | Cisco 统一通信产品 2026 访问控制漏洞 — Cisco Emergency Responder CWE-284 | 8.8 | High | 2026-10-21 |
| CVE-2026-76476 | 思科统一通信产品输入验证漏洞 — Cisco Emergency Responder CWE-20 | 8.8 | High | 2026-10-21 |
| CVE-2026-76477 | 思科统一通信产品 2026 年 10 月注入漏洞 — Cisco Emergency Responder CWE-89 | 8.8 | High | 2026-10-21 |
| CVE-2026-76475 | Cisco 统一通信产品跨站脚本漏洞 — Cisco Emergency Responder CWE-79 | 9.3 | Critical | 2026-10-21 |
| CVE-2026-76474 | Cisco 统一通信产品 2026 认证绕过漏洞 — Cisco Emergency Responder CWE-287 | 9.8 | Critical | 2026-10-21 |
| CVE-2026-76445 | 多款 Cisco Snort 3 拒绝服务漏洞 — Cisco Open Source Snort3 CWE-835 | 5.3 | Medium | 2026-10-21 |
| CVE-2026-76473 | 思科统一通信产品资源生命周期控制不当漏洞 — Cisco Emergency Responder CWE-74 | 9.8 | Critical | 2026-10-21 |
| CVE-2026-76462 | Cisco Secure Client 权限提升漏洞 — Cisco Secure Client CWE-20 | 5.5 | Medium | 2026-10-21 |
| CVE-2026-76466 | Cisco Expressway 系列远程代码执行漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-798 | 9.8 | Critical | 2026-10-21 |
| CVE-2026-76435 | Cisco Expressway 系列信息泄露漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-497 | 5.3 | Medium | 2026-10-21 |
| CVE-2026-20356 | Cisco Snort 3 软件硬化发布漏洞 — Cisco Cyber Vision CWE-400 | 7.5 | High | 2026-10-21 |
本页汇总了 Cisco 厂商截至目前公开的全部 3442 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。