IO
Product
IOS
by Cisco · last CVE Aug 5, 2026
On CISA KEVExploited in the wild
617
CVEs
39
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 133Medium 81Low 1
Watch

Add IOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-0171
In wildKEV
9.8
99%
Mar 28
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
Affected: 15.2(5)e
CVE-2017-12240
In wildKEV
9.8
14%
Sep 28
Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
Affected: 12.2 through 15.6
CVE-2017-3881
In wildKEV
9.8
99%
Mar 17
Cisco IOS and IOS XE Remote Code Execution Vulnerability
Affected: 12.2s through 15.1\(3\)svs
CVE-2020-3258
9.8
5%
Jun 3
Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers…
Affected: 15.8(3)m2; 15.8(9); 15.9
CVE-2020-3198
9.8
5%
Jun 3
Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers…
Affected: 12.2(60)ez16; 15.0(2)sg11a; 15.3(3)jaa1; 15.3(3)jpj; 15.4(1)cg; 15.4(2)cg; +34 more
CVE-2023-20186
9.1
1%
Sep 27
A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to…
Affected: 12.2(58)ex; 12.2(58)ey; 12.2(58)ey1; 12.2(58)ey2; 12.2(58)ez; 12.2(58)se; +34 more
CVE-2020-3426
9.1
2%
Sep 24
A vulnerability in the implementation of the Low Power, Wide Area (LPWA) subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers (Industrial…
Affected: All versions, or not specified
CVE-2025-20363
9.0
7%
Sep 25
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software,…
Affected: 12.2\(15\)b through 15.9\(3\)m11
Showing 8
The 500 most important CVEs for this product (exploited first, then by severity)