Cisco 厂商相关 3365 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
思科是全球领先的网络设备与软件供应商,核心业务涵盖企业级路由、交换、无线及安全解决方案。其历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本,常因配置错误或协议解析缺陷引发。值得关注的是,其安全架构持续演进,但近年来因供应链攻击及固件更新中的高危漏洞频发,引发业界对设备全生命周期管理的重视,凸显了复杂网络环境下的防御挑战。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-76426 | Cisco ISE REST API SQL注入漏洞 — Cisco Identity Services Engine Software CWE-89 | 4.9 | Medium | 2026-09-16 |
| CVE-2026-20121 | Cisco FTD 绕过访问列表漏洞 — Cisco Secure Firewall Adaptive Security Appliance (ASA) Software CWE-284 | 5.3 | Medium | 2026-09-16 |
| CVE-2026-76431 | 思科ISE任意文件删除漏洞 — Cisco Identity Services Engine Software CWE-22 | 4.9 | Medium | 2026-09-16 |
| CVE-2026-76427 | Cisco ISE XML外部实体注入漏洞 — Cisco Identity Services Engine Software CWE-611 | 4.9 | Medium | 2026-09-16 |
| CVE-2026-76447 | Cisco Identity Services Engine证书重载漏洞 — Cisco Identity Services Engine Software CWE-306 | 5.3 | Medium | 2026-09-16 |
| CVE-2026-20287 | 思科ISE特权管理不当漏洞 — Cisco Identity Services Engine Software CWE-269 | 6.5 | Medium | 2026-09-16 |
| CVE-2026-20285 | Cisco ISE 授权绕过漏洞 — Cisco Identity Services Engine Software CWE-285 | 4.3 | Medium | 2026-09-16 |
| CVE-2026-20286 | Cisco Identity Services Engine 权限绕过漏洞 — Cisco Identity Services Engine Software CWE-285 | 4.3 | Medium | 2026-09-16 |
| CVE-2026-76438 | 思科CommPilot授权绕过漏洞 — Cisco BroadWorks CWE-863 | 6.5 | Medium | 2026-09-16 |
| CVE-2026-20072 | ISE 信息泄露漏洞 — Cisco Identity Services Engine Software CWE-863 | 4.9 | Medium | 2026-09-16 |
| CVE-2026-76446 | Cisco Identity Services Engine 外部实体注入漏洞 — Cisco Identity Services Engine Software CWE-611 | 4.9 | Medium | 2026-09-16 |
| CVE-2026-20071 | ISE 802.1x会话劫持漏洞 — Cisco Identity Services Engine Software CWE-290 | 3.8 | Low | 2026-09-16 |
| CVE-2026-76432 | 思科ISE任意文件写入漏洞 — Cisco Identity Services Engine Software CWE-22 | 4.9 | Medium | 2026-09-16 |
| CVE-2026-20300 | Cisco Identity Services Engine SQL注入漏洞 — Cisco Identity Services Engine Software CWE-89 | 7.1 | High | 2026-09-16 |
| CVE-2026-76448 | Cisco Identity Services Engine SQL注入漏洞 — Cisco Identity Services Engine Software CWE-89 | 4.9 | Medium | 2026-09-16 |
| CVE-2026-76434 | Cisco ISE 任意文件读取漏洞 — Cisco Identity Services Engine Software CWE-22 | 4.9 | Medium | 2026-09-16 |
| CVE-2026-20120 | Cisco FTD ACL 绕过漏洞 — Cisco Secure Firewall Adaptive Security Appliance (ASA) Software CWE-284 | 5.8 | Medium | 2026-09-16 |
| CVE-2026-76444 | 思科ISE信息泄露漏洞 — Cisco Identity Services Engine Software CWE-306 | 5.3 | Medium | 2026-09-16 |
| CVE-2026-76451 | Cisco ISE 证书管理 SQL 注入漏洞 — Cisco Identity Services Engine Software CWE-564 | 4.9 | Medium | 2026-09-16 |
| CVE-2026-20290 | Cisco Secure Firewall Snort 2 DoS漏洞 — Cisco Secure Firewall Threat Defense (FTD) Software CWE-805 | 5.8 | Medium | 2026-09-16 |
| CVE-2026-20235 | Cisco Identity Services Engine 信息泄露漏洞 — Cisco Identity Services Engine Software CWE-89 | 4.9 | Medium | 2026-09-16 |
| CVE-2026-76449 | Cisco Identity Services Engine SQL 注入漏洞 — Cisco Identity Services Engine Software CWE-89 | 4.9 | Medium | 2026-09-16 |
| CVE-2026-76450 | Cisco Identity Services Engine SQL注入漏洞 — Cisco Identity Services Engine Software CWE-564 | 4.9 | Medium | 2026-09-16 |
| CVE-2026-20309 | Cisco Identity Services Engine 跨站脚本漏洞 — Cisco Identity Services Engine Software CWE-79 | 6.1 | Medium | 2026-09-16 |
| CVE-2026-76428 | Cisco ISE 配置文件 SQL 注入漏洞 — Cisco Identity Services Engine Software CWE-89 | 4.9 | Medium | 2026-09-16 |
| CVE-2026-76439 | 思科ISE事件注入漏洞 — Cisco Identity Services Engine Software CWE-306 | 5.3 | Medium | 2026-09-16 |
| CVE-2026-76433 | Cisco ISE信息泄露漏洞 — Cisco Identity Services Engine Software CWE-22 | 5.3 | Medium | 2026-09-16 |
| CVE-2026-20248 | 思科安全防火墙TCP DNS拒绝服务漏洞 — Cisco Secure Firewall Adaptive Security Appliance (ASA) Software CWE-195 | 6.8 | Medium | 2026-09-16 |
| CVE-2026-20342 | Cisco安全防火墙管理中心低权限任意文件下载漏洞 — Cisco Secure Firewall Management Center (FMC) CWE-639 | 7.7 | High | 2026-09-16 |
| CVE-2026-20282 | 思科ISE认证写入漏洞 — Cisco Identity Services Engine Software CWE-641 | 4.9 | Medium | 2026-09-16 |
本页汇总了 Cisco 厂商截至目前公开的全部 3365 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。