Cisco 3.4 Patch 6

Name: Cisco 3.4 Patch 6
Brand: Cisco

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

13critical5high22medium1low

updated 2026-10-27

vulnerabilities (41)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-76460US	critical10.0OT critical	75.6% (100th)	KEV	no fix	2026-09-16	—
CVE-2026-20306US	critical9.1	1.55% (75th)	—	no fix	2026-09-16	—
CVE-2026-20305US	critical9.1	1.55% (75th)	—	no fix	2026-09-16	—
CVE-2026-76433US	medium5.3	1.27% (70th)	—	no fix	2026-09-16	—
CVE-2026-76432US	medium4.9	1.21% (68th)	—	no fix	2026-09-16	—
CVE-2026-76431US	medium4.9	1.21% (68th)	—	no fix	2026-09-16	—
CVE-2026-20307US	critical9.9	0.98% (62nd)	—	no fix	2026-09-16	—
CVE-2026-76424US	high7.2	0.92% (60th)	—	no fix	2026-09-16	—
CVE-2026-20211US	critical9.1	0.84% (58th)	—	no fix	2026-09-16	—
CVE-2026-20176US	critical9.1	0.80% (56th)	—	no fix	2026-09-16	—
CVE-2026-20283US	medium6.5	0.64% (50th)	—	no fix	2026-09-16	—
CVE-2026-20282US	medium4.9	0.60% (48th)	—	no fix	2026-09-16	—
CVE-2026-76423US	critical10.0	0.58% (48th)	—	no fix	2026-09-16	—
CVE-2026-20352US	high8.6	0.57% (47th)	—	no fix	2026-09-16	—
CVE-2026-20130US	critical10.0	0.54% (45th)	—	no fix	2026-09-16	—
CVE-2026-20284US	critical9.1	0.53% (45th)	—	no fix	2026-09-16	—
CVE-2026-20072US	medium4.9OT elevated	0.51% (43rd)	—	no fix	2026-09-16	—
CVE-2026-20235US	medium4.9	0.48% (42nd)	—	no fix	2026-09-16	—
CVE-2026-20237US	critical9.1	0.48% (41st)	—	no fix	2026-09-16	—
CVE-2026-20194US	critical9.1	0.48% (41st)	—	no fix	2026-09-16	—
CVE-2026-76428US	medium4.9	0.48% (41st)	—	no fix	2026-09-16	—
CVE-2026-76426US	medium4.9	0.48% (41st)	—	no fix	2026-09-16	—
CVE-2026-20286US	medium4.3	0.47% (41st)	—	no fix	2026-09-16	—
CVE-2026-20285US	medium4.3	0.47% (41st)	—	no fix	2026-09-16	—
CVE-2026-20192US	critical10.0	0.46% (40th)	—	no fix	2026-09-16	—
CVE-2026-76427US	medium4.9	0.46% (40th)	—	no fix	2026-09-16	—
CVE-2026-20247US	high7.5	0.46% (39th)	—	no fix	2026-09-16	—
CVE-2026-76451US	medium4.9	0.43% (37th)	—	no fix	2026-09-16	—
CVE-2026-76450US	medium4.9	0.43% (37th)	—	no fix	2026-09-16	—
CVE-2026-76449US	medium4.9	0.43% (37th)	—	no fix	2026-09-16	—
CVE-2026-76448US	medium4.9	0.43% (37th)	—	no fix	2026-09-16	—
CVE-2026-76425US	high7.6	0.41% (35th)	—	no fix	2026-09-16	—
CVE-2026-20234US	critical9.9	0.40% (34th)	—	no fix	2026-09-16	—
CVE-2026-76439US	medium5.3OT elevated	0.39% (33rd)	—	no fix	2026-09-16	—
CVE-2026-76434US	medium4.9	0.38% (32nd)	—	no fix	2026-09-16	—
CVE-2026-20300US	high7.1	0.38% (32nd)	—	no fix	2026-09-16	—
CVE-2026-76447US	medium5.3OT elevated	0.38% (31st)	—	no fix	2026-09-16	—
CVE-2026-76446US	medium4.9	0.38% (31st)	—	no fix	2026-09-16	—
CVE-2026-76444US	medium5.3OT elevated	0.35% (28th)	—	no fix	2026-09-16	—
CVE-2026-20309US	medium6.1	0.33% (26th)	—	no fix	2026-09-16	—
CVE-2026-20071US	low3.8	0.23% (14th)	—	no fix	2026-09-16	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')10 CVEs
CWE-23Relative Path Traversal6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-564SQL Injection: Hibernate4 CVEs
CWE-306Missing Authentication for Critical Function3 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs
CWE-641Improper Restriction of Names for Files and Other Resources3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs

sources (1)

Which sources assert this record, and when.

USCisco PSIRT (CSAF)41 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan