Cisco 24.2.2

Name: Cisco 24.2.2
Brand: Cisco

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical6high0medium0low

updated 2026-10-27

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-20274US	critical9.8	0.53% (45th)	—	no fix	2026-09-02	—
CVE-2026-20280US	high8.8	0.50% (42nd)	—	no fix	2026-09-02	—
CVE-2026-20279US	critical9.8	0.49% (42nd)	—	no fix	2026-09-02	—
CVE-2026-20278US	high8.8	0.49% (42nd)	—	no fix	2026-09-02	—
CVE-2026-76505US	high7.5	0.47% (40th)	—	no fix	2026-10-21	—
CVE-2026-20276US	high8.6	0.47% (40th)	—	no fix	2026-09-02	—
CVE-2026-20277US	high8.2	0.41% (35th)	—	no fix	2026-09-02	—
CVE-2026-20118US	—	0.33% (26th)	—	no fix	2026-03-11	—
CVE-2026-20275US	high8.8	0.33% (26th)	—	no fix	2026-09-02	—
CVE-2026-20040US	—	0.18% (7th)	—	no fix	2026-03-11	—
CVE-2026-20074US	—	0.17% (6th)	—	no fix	2026-03-11	—
CVE-2026-20046US	—	0.14% (3rd)	—	no fix	2026-03-11	—

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-1287Improper Validation of Specified Type of Input1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-264CWE-2641 CVEs
CWE-284Improper Access Control1 CVEs
CWE-460Improper Cleanup on Thrown Exception1 CVEs
CWE-664Improper Control of a Resource Through its Lifetime1 CVEs
CWE-682Incorrect Calculation1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.