Experts released PoC exploit code for Cisco IOS XE flaw CVE-2023Security Affairs·Oct 31, 12:03 UTC · Oct 31, 2023Exploit / PoC in the wildCVE-2023-2019860
Tens of thousands Cisco IOS XE devices were hacked by exploiting CVE-2023Security Affairs·Oct 20, 10:13 UTC · Oct 20, 2023Exploit / PoC in the wildCVE-2023-2019860
CVE-2023-20198 zero-day widely exploited to install implants on Cisco IOS XE systemsSecurity Affairs·Oct 17, 17:51 UTC · Oct 17, 2023Exploit / PoC in the wildCVE-2023-2019860
Cisco warns of a second IOS XE zeroSecurity Affairs·Oct 23, 18:42 UTC · Oct 23, 2023Exploit / PoC in the wildCVE-2023-20273CVE-2023-2019860
CISA adds Cisco IOS XE flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs·Oct 23, 19:49 UTC · Oct 23, 2023Exploit / PoC in the wildCVE-2021-1435CVE-2023-2019860
Experts published a detailed analysis of Cisco IOS XE WLC flaw CVE-2025Security Affairs·Jun 2, 06:58 UTC · Jun 2, 2025Exploit / PoC in the wildCVE-2025-2018860
Cisco identifies another IOS XE vulnerability, with patches coming this weekendThe Record·Oct 20, 20:48 UTC · Oct 20, 2023Vulnerability in the wildCVE-2023-20198CVE-2021-1435CVE-2023-2027360
Cisco warns of active exploitation of IOS XE zeroSecurity Affairs·Oct 16, 19:52 UTC · Oct 16, 2023Exploit / PoC in the wildCVE-2023-2019860
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score BugsThe Hacker News·Aug 7, 06:12 UTC · Aug 7, 2026Vulnerability in the wildCVE-2026-20303CVE-2026-20304CVE-2026-20310+12 CVEs160
CISA adds second Cisco IOS XE flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs·Oct 23, 20:20 UTC · Oct 23, 2023Exploit / PoC in the wildCVE-2023-20273CVE-2023-2019860
CIA Vault7 Leak - Cisco IOS and IOS XE Software Cluster Management Protocol Remote Code Execution flawSecurity Affairs·May 10, 21:39 UTC · May 10, 2017Vulnerability in the wild60
Cisco Warns of Critical Vulnerability in IOS XE SoftwareInfosecurity Magazine·Oct 17, 12:00 UTC · Oct 17, 2023Vulnerability in the wildCVE-2023-2019860
ASD Warns of Ongoing BADCANDY Attacks Exploiting Cisco IOS XE VulnerabilityThe Hacker News·Nov 1, 13:43 UTC · Nov 1, 2025Vulnerability in the wildCVE-2023-2019860
Active exploitation of Cisco IOS XE Software Web Management User Interface vulnerabilitiesCisco Talos·Oct 16, 15:05 UTC · Oct 16, 2023Vulnerability in the wildCVE-2023-20198CVE-2023-20273CVE-2021-1435160
Cisco fixed actively exploited zeroSecurity Affairs·Sep 25, 07:27 UTC · Sep 25, 2025Exploit / PoC in the wildCVE-2025-2035260
Cisco Warns of Vulnerability in IOS and IOS XE Software After Exploitation AttemptsThe Hacker News·Sep 29, 03:07 UTC · Sep 29, 2023Vulnerability in the wildCVE-2023-20109CVE-2023-20252CVE-2023-20253+3 CVEs60
Cisco Patches CVE-2025-20188 (10.0 CVSS) in IOS XE That Enables Root Exploits via JWTThe Hacker News·Jun 3, 16:58 UTC · Jun 3, 2025Vulnerability in the wildCVE-2025-2018860
Warning: Unpatched Cisco Zero-Day Vulnerability Actively Targeted in the WildThe Hacker News·Oct 19, 11:31 UTC · Oct 19, 2023Exploit / PoC in the wildCVE-2023-20198CVE-2021-143560
Cisco urges to patch actively exploited IOS 0-day CVE-2023Security Affairs·Sep 28, 17:26 UTC · Sep 28, 2023Vulnerability in the wildCVE-2023-2010960
China-linked APT Salt Typhoon breached telecoms by exploiting Cisco router flawsSecurity Affairs·Feb 14, 19:23 UTC · Feb 14, 2025Data breach in the wildCVE-2023-20198CVE-2023-2027360
Cisco uncovers new SNMP vulnerability used in attacks on IOS devicesCyberScoop·Sep 25, 14:57 UTC · Sep 25, 2025Vulnerability in the wildCVE-2025-20352CVE-2025-20240CVE-2025-2014960
China-linked group Salt Typhoon breached satellite firm ViasatSecurity Affairs·Jun 23, 20:52 UTC · Jun 23, 2025Data breach in the wildCVE-2023-20198CVE-2023-20273160
U.S. CISA adds Adminer, Cisco IOS, Fortra GoAnywhere MFT, Libraesva ESG, and Sudo flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Sep 30, 09:07 UTC · Sep 30, 2025Exploit / PoC in the wildCVE-2021-21311CVE-2025-20352CVE-2025-10035+3 CVEs60
Cisco Zero-Day Exploited to Implant Malicious Lua Backdoor on Thousands of DevicesThe Hacker News·Oct 23, 04:33 UTC · Oct 23, 2023Exploit / PoC in the wildCVE-2023-20273CVE-2023-20198CVE-2021-143560
Unidentified attackers breach tens of thousands of Cisco devicesCyberScoop·Oct 18, 15:34 UTC · Oct 18, 2023Exploit / PoC in the wildCVE-2023-20198CVE-2021-143560
Leaked NSA cyber weapons were more damaging to Cisco than originally thoughtCyberScoop·Sep 19, 17:30 UTC · Sep 19, 2016Exploit / PoC in the wild60
Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS SoftwareThe Hacker News·Sep 25, 06:30 UTC · Sep 25, 2025Vulnerability in the wildCVE-2025-2035260
US CISA warns of a Samsung vulnerability under active exploitationSecurity Affairs·May 20, 09:59 UTC · May 20, 2023Vulnerability in the wildCVE-2023-21492CVE-2004-1464CVE-2016-641560
Threat Source newsletter for June 11, 2020Cisco Talos·Jun 11, 18:00 UTC · Jun 11, 2020Ransomware in the wild60
Cisco plugs bucketful of security holes in industrial routers, switchesHelp Net Security·Jun 4, 00:00 UTC · Jun 4, 2020Vulnerability in the wildCVE-2020-3227CVE-2020-3205CVE-2020-3198+1 CVEs60
More helpful resources for users of all skill levels to help you Take a Security ActionCisco Talos·Oct 19, 18:00 UTC · Oct 19, 2023Ransomware in the wildCVE-2023-2019860
Week in review: Cybersecurity cheat sheets, widely exploited Cisco zero-day, KeePass-themed malvertisingHelp Net Security·Oct 22, 00:00 UTC · Oct 22, 2023Exploit / PoC in the wildCVE-2023-20198CVE-2023-4966CVE-2023-3883160
Critical vulnerability opens Cisco switches to remote attackHelp Net Security·Jun 23, 20:49 UTC · Jun 23, 2018Vulnerability in the wildCVE-2018-017160
Leaked Black Basta Ransomware Chat Logs Reveal Inner Workings and Internal ConflictsThe Hacker News·Feb 27, 05:08 UTC · Feb 27, 2025Ransomware in the wildCVE-2024-50623CVE-2009-3960CVE-2010-2861+8 CVEs60
Salt Typhoon gained initial access to telecoms through Cisco devicesCyberScoop·Feb 20, 22:31 UTC · Feb 20, 2025Threat actor in the wildCVE-2018-0171CVE-2023-20198CVE-2023-2027360
Old vulnerabilities in Cisco products actively exploited in the wildSecurity Affairs·Dec 19, 21:12 UTC · Dec 19, 2022Exploit / PoC in the wildCVE-2017-12240CVE-2018-0125CVE-2018-0147+2 CVEs60
Zero-days dominate top frequently exploited vulnerabilitiesHelp Net Security·Nov 14, 00:00 UTC · Nov 14, 2024Vulnerability in the wildCVE-2023-3519CVE-2023-20198CVE-2021-44228+1 CVEs60
300+ Cisco switches affected by critical bug found in Vault 7 data dumpHelp Net Security·Mar 22, 12:51 UTC · Mar 22, 2017Vulnerability in the wild60
Norway issues warning after ‘important businesses’ affected by Cisco zeroThe Record·Oct 24, 12:22 UTC · Oct 24, 2023Exploit / PoC in the wildCVE-2023-20198CVE-2023-2027360
June 2026 CVE LandscapeRecorded Future·Jul 17, 00:00 UTC · Jul 17, 2026Ransomware in the wildCVE-2026-35616CVE-2026-25939CVE-2020-17103+53 CVEs60