Cisco security advisories, June 2026

Every Cisco security advisory published in June 2026, from Cisco Security Advisories, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 11
Critical: 3
High: 1
In CISA KEV: 4
CVEs: 13

Cisco advisories published in June 2026

Jun 25, 2026
Medium [CVE-2026-20175] Cisco Finesse Remote File Inclusion Vulnerability
Medium6.1
Jun 22, 2026
Medium [CVE-2026-20055 +1] Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities
Medium4.8
Jun 19, 2026
Critical [CVE-2026-20181 +1] Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities
Critical9.1
Jun 17, 2026
Medium [CVE-2026-20246] Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability
Medium6.0
Jun 17, 2026
Medium [CVE-2026-20220] Cisco Crosswork Network Controller Server-Side Template Injection Vulnerability
Medium6.3
Jun 17, 2026
Medium [CVE-2026-20178] Cisco Webex App Open Redirect Vulnerability
Medium4.3
Jun 16, 2026
Critical [CVE-2026-20127] Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Critical10.0ExploitedCISA KEV
Jun 16, 2026
Critical [CVE-2026-20182] Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Critical10.0ExploitedCISA KEV
Jun 15, 2026
Medium [CVE-2026-20262] Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
Medium6.5ExploitedCISA KEV
Jun 12, 2026
High [CVE-2026-20127 +2] Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability
High7.8ExploitedCISA KEV
Jun 3, 2026
Medium [CVE-2026-20233] Cisco Webex Meetings Cross-Site Scripting Vulnerability
Medium6.1

Get an email when Cisco publishes the next one.

See Cisco's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Cisco

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.