Cisco 厂商相关 3365 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
思科是全球领先的网络设备与软件供应商,核心业务涵盖企业级路由、交换、无线及安全解决方案。其历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本,常因配置错误或协议解析缺陷引发。值得关注的是,其安全架构持续演进,但近年来因供应链攻击及固件更新中的高危漏洞频发,引发业界对设备全生命周期管理的重视,凸显了复杂网络环境下的防御挑战。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-20237 | Cisco Identity Services Engine 输入验证漏洞 — Cisco Identity Services Engine Software CWE-20 | 9.1 | Critical | 2026-09-16 |
| CVE-2026-76423 | Cisco ISE API认证绕过漏洞 — Cisco Identity Services Engine Software CWE-290 | 10.0 | Critical | 2026-09-16 |
| CVE-2026-20130 | Cisco ISE 不当中和漏洞 — Cisco Identity Services Engine Software CWE-74 | 10.0 | Critical | 2026-09-16 |
| CVE-2026-20361 | Cisco Nexus Dashboard SQL注入漏洞 — Cisco Nexus Dashboard CWE-89 | 8.8 | High | 2026-09-16 |
| CVE-2026-20192 | Cisco Identity Services Engine 访问控制漏洞 — Cisco Identity Services Engine Software CWE-284 | 10.0 | Critical | 2026-09-16 |
| CVE-2026-20324 | 思科 Secure Firewall 管理工具 sftunnel 任意代码执行漏洞 — Cisco Secure Firewall Management Center (FMC) CWE-862 | 9.9 | Critical | 2026-09-16 |
| CVE-2026-20325 | Cisco Nexus Dashboard 命令注入漏洞 — Cisco Nexus Dashboard CWE-77 | 9.9 | Critical | 2026-09-16 |
| CVE-2026-20194 | 思科ISE 资源传输不当漏洞 — Cisco Identity Services Engine Software CWE-669 | 9.1 | Critical | 2026-09-16 |
| CVE-2026-20211 | Cisco Identity Services Engine 远程代码执行漏洞 — Cisco Identity Services Engine Software CWE-502 | 9.1 | Critical | 2026-09-16 |
| CVE-2026-20330 | 思科安全防火墙软件中和不当漏洞 — Cisco Secure Firewall Adaptive Security Appliance (ASA) Software CWE-707 | 9.9 | Critical | 2026-09-16 |
| CVE-2026-20322 | Cisco Nexus Dashboard软件访问控制不当漏洞 — Cisco Nexus Dashboard CWE-284 | 9.9 | Critical | 2026-09-16 |
| CVE-2026-20329 | 思科安全防火墙软件异常处理漏洞 — Cisco Secure Firewall Adaptive Security Appliance (ASA) Software CWE-703 | 9.9 | Critical | 2026-09-16 |
| CVE-2026-20326 | Cisco Nexus Dashboard 缺失关键功能身份验证漏洞 — Cisco Nexus Dashboard CWE-306 | 9.8 | Critical | 2026-09-16 |
| CVE-2026-20234 | Cisco ISE 凭据保护不足漏洞 — Cisco Identity Services Engine Software CWE-522 | 9.9 | Critical | 2026-09-16 |
| CVE-2026-20331 | 思科防火墙软件保护机制失效漏洞 — Cisco Secure Firewall Adaptive Security Appliance (ASA) Software CWE-693 | 9.6 | Critical | 2026-09-16 |
| CVE-2026-76420 | Cisco FMC软件模拟sftunnel连接漏洞 — Cisco Secure Firewall Management Center (FMC) CWE-285 | 9.0 | Critical | 2026-09-16 |
| CVE-2026-20307 | Cisco ISE远程代码执行漏洞 — Cisco Identity Services Engine Software CWE-502 | 9.9 | Critical | 2026-09-16 |
| CVE-2026-20305 | Cisco ISE命令注入漏洞 — Cisco Identity Services Engine Software CWE-78 | 9.1 | Critical | 2026-09-16 |
| CVE-2026-20306 | Cisco Identity Services Engine 命令注入漏洞 — Cisco Identity Services Engine Software CWE-78 | 9.1 | Critical | 2026-09-16 |
| CVE-2026-76442 | Cisco Secure Email 输入验证错误漏洞 — Cisco Secure Email CWE-1284 | 7.5 | High | 2026-09-14 |
| CVE-2026-76461 | Cisco Secure Email SQL注入漏洞 — Cisco Secure Email CWE-89 | 9.8 | Critical | 2026-09-14 |
| CVE-2026-76443 | Cisco Secure Email 输入验证错误漏洞 — Cisco Secure Email CWE-707 | 9.8 | Critical | 2026-09-14 |
| CVE-2026-20353 | Cisco Secure Email 资源管理错误漏洞 — Cisco Secure Email CWE-664 | 9.8 | Critical | 2026-09-14 |
| CVE-2026-76440 | Cisco Secure Email 路径遍历漏洞 — Cisco Secure Email CWE-23 | 9.8 | Critical | 2026-09-14 |
| CVE-2026-76441 | Cisco Secure Email and Web Manager 权限许可和访问控制问题漏洞 — Cisco Secure Email and Web Manager CWE-284 | 9.8 | Critical | 2026-09-14 |
| CVE-2026-20293 | Cisco UCS Servers 权限许可和访问控制问题漏洞 — Cisco Enterprise NFV Infrastructure Software CWE-749 | 7.1 | High | 2026-09-08 |
| CVE-2026-20355 | Cisco Secure Email 输入验证错误漏洞 — Cisco Secure Email CWE-345 | 5.9 | Medium | 2026-09-02 |
| CVE-2026-20354 | Cisco Secure Email 加密问题漏洞 — Cisco Secure Email CWE-354 | 5.9 | Medium | 2026-09-02 |
| CVE-2026-20281 | Cisco Session Initiation Protocol Software 资源管理错误漏洞 — Cisco Session Initiation Protocol (SIP) Software CWE-401 | 7.5 | High | 2026-09-02 |
| CVE-2026-20280 | Cisco IOS XR Software 异常处理不当漏洞 — Cisco IOS XR Software CWE-703 | 8.8 | High | 2026-09-02 |
本页汇总了 Cisco 厂商截至目前公开的全部 3365 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。