Cisco security advisories, April 2026

Every Cisco security advisory published in April 2026, from Cisco Security Advisories, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 22
Critical: 6
High: 4
In CISA KEV: 1
CVEs: 38

Cisco advisories published in April 2026

Apr 28, 2026
Critical [CVE-2026-20147 +1] Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities
Critical9.9
Apr 24, 2026
High [CVE-2023-20185] Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability
High7.4
Apr 22, 2026
Critical [CVE-2026-20122 +4] Cisco Catalyst SD-WAN Vulnerabilities
Critical9.8ExploitedCISA KEV
Apr 22, 2026
High [CVE-2026-20094 +3] Cisco Integrated Management Controller Command Injection and Remote Code Execution Vulnerabilities
High8.8
Apr 22, 2026
Medium [CVE-2026-20085 +4] Cisco Integrated Management Controller Cross-Site Scripting Vulnerabilities
Medium6.1
Apr 16, 2026
Critical [CVE-2026-20184] Cisco Webex Services Certificate Validation Vulnerability
Critical9.8
Apr 16, 2026
Medium [CVE-2026-20152] Cisco Secure Web Appliance Authentication Bypass Vulnerability
Medium5.3
Apr 15, 2026
Critical [CVE-2026-20180 +1] Cisco Identity Services Engine Remote Code Execution Vulnerabilities
Critical9.9
Apr 15, 2026
Medium [CVE-2026-20136] Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability
Medium6.0
Apr 15, 2026
Medium [CVE-2026-20132] Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities
Medium4.8
Apr 15, 2026
Medium [CVE-2026-20161] Cisco ThousandEyes Enterprise Agent Arbitrary File Overwrite Vulnerability
Medium5.5
Apr 15, 2026
Medium [CVE-2026-20078 +1] Cisco Unity Connection Arbitrary File Download Vulnerabilities
Medium6.5
Apr 15, 2026
Medium [CVE-2026-20059 +2] Cisco Unity Connection Cross-Site Scripting, Open Redirect, and SQL Injection Vulnerabilities
Medium6.1
Apr 15, 2026
Medium [CVE-2026-20170] Cisco Webex Contact Center Cross-Site Scripting Vulnerability
Medium6.1
Apr 2, 2026
Medium [CVE-2026-20110] Cisco IOS XE Software Denial of Service Vulnerability
Medium6.5
Apr 1, 2026
Critical [CVE-2026-20160] Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability
Critical9.8
Apr 1, 2026
Critical [CVE-2026-20093] Cisco Integrated Management Controller Authentication Bypass Vulnerability
Critical9.8
Apr 1, 2026
High [CVE-2026-20151] Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability
High7.3
Apr 1, 2026
High [CVE-2026-20155] Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability
High8.0
Apr 1, 2026
Medium [CVE-2026-20174] Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability
Medium4.9
Apr 1, 2026
Medium [CVE-2026-20041] Cisco Nexus Dashboard and Nexus Dashboard Insights Server-Side Request Forgery Vulnerability
Medium6.1
Apr 1, 2026
Medium [CVE-2026-20042] Cisco Nexus Dashboard Configuration Backup REST API Unauthorized Access Vulnerability
Medium6.5

Get an email when Cisco publishes the next one.

See Cisco's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Cisco

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.