Cisco security advisories, May 2026

Every Cisco security advisory published in May 2026, from Cisco Security Advisories, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 15
Critical: 1
High: 5
In CISA KEV: 1
CVEs: 23

Cisco advisories published in May 2026

May 20, 2026
Critical [CVE-2026-20223] Cisco Secure Workload Unauthorized API Access Vulnerability
Critical10.0
May 20, 2026
Medium [CVE-2026-20171] Cisco Nexus 3000 and 9000 Series Switches Border Gateway Protocol Denial of Service Vulnerability
Medium6.8
May 20, 2026
Medium [CVE-2026-20199] Cisco ThousandEyes Virtual Appliance Authenticated Remote Code Execution Vulnerability
Medium4.7
May 20, 2026
Medium [CVE-2026-20206] Cisco ThousandEyes Enterprise Agent BrowserBot Command Injection Vulnerability
Medium6.3
May 19, 2026
Advisory [CVE-2025-20333 +1] Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
UnratedExploitedCISA KEV
May 14, 2026
High [CVE-2026-20209 +2] Cisco Catalyst SD-WAN Manager Vulnerabilities
High8.6
May 14, 2026
High [CVE-2026-20188] Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory
High
May 6, 2026
High [CVE-2026-20034 +1] Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities
High8.8
May 6, 2026
High [CVE-2026-20167 +2] Cisco IoT Field Network Director Vulnerabilities
High7.7
May 6, 2026
High [CVE-2026-20185] Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vulnerability
High7.7
May 6, 2026
Medium [CVE-2026-20172] Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability
Medium4.3
May 6, 2026
Medium [CVE-2026-20193 +1] Cisco Identity Services Engine Authentication Bypass Vulnerabilities
Medium5.3
May 6, 2026
Medium [CVE-2026-20189] Cisco Prime Infrastructure Information Disclosure Vulnerability
Medium4.3
May 6, 2026
Medium [CVE-2026-20219] Cisco Slido Insecure Direct Object Reference Vulnerability
Medium5.4
May 5, 2026
Medium [CVE-2025-20204 +1] Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities
Medium4.8

Get an email when Cisco publishes the next one.

See Cisco's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Cisco

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.