Cisco PSIRT (CSAF)
advisoryUScisco_csaf
Cisco PSIRT CSAF 2.0 advisories (IOS / IOS-XE, ASA / FTD, routers, switches, Expressway, Secure Client, Snort and the wider Cisco surface) via the .well-known/csaf changes.csv listing; authoritative Cisco affected-product, CVSS and fixed-release enriching NVD CVEs.
01
advisories (2,888)
Vendor and ecosystem advisories describing this.
- cisco-sa-emudhra-info-ScS22A1r
- cisco-sa-asr9k-tUyxcyXN
- cisco-sa-cucm-access-PW9e8Jt2
- cisco-sa-expressway-inf-disc-vvYqgSTS
- cisco-sa-exwy-hardening-FhcqBVcs
- cisco-sa-hardening-snort3-ybgmhTQe
- cisco-sa-opensrc-snort3-2fXGJPfe
- cisco-sa-sec-client-priv-esc-muF8eZdm
- cisco-sa-snort3-gre-JNpMHrTv
- cisco-sa-snort3-gtpcodec-dos-Rmecfepz
- cisco-sa-snort3-mime-vulns-bkXjcKkt
- cisco-sa-snort3-misc-dos-6mB22qAK
- cisco-sa-snort3-vba-bufdos-jAuFdvn9
- cisco-sa-vcs-static-cred-hr7EWZ8t
- cisco-sa-voice-hardening-twgbH9e3
- cisco-sa-esa-afw-zqYJkjxp
- cisco-sa-notice-QGwHnJ6k
- cisco-sa-aci-epgcbp-SfDU7NLf
- cisco-sa-apic-cmdinj-L6VR4E7
- cisco-sa-apic-info-priv-enAdB5vD
showing 20 of 2,888
02
product assertions (14,748)
Products and version ranges known to be affected.
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1 when installed on Cisco 3000 Series Industrial Security Appliances (ISA)
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1 when installed on Cisco ASA 5500-X Series Firewalls
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1 when installed on Cisco Adaptive Security Virtual Appliance (ASAv)
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1 when installed on Cisco Firepower 2100 Series
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1 when installed on Cisco Firepower 4100 Series
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1 when installed on Cisco Firepower 9000 Series
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1.2 when installed on Cisco 3000 Series Industrial Security Appliances (ISA)
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1.2 when installed on Cisco ASA 5500-X Series Firewalls
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1.2 when installed on Cisco Adaptive Security Virtual Appliance (ASAv)
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1.2 when installed on Cisco Firepower 2100 Series
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1.2 when installed on Cisco Firepower 4100 Series
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1.2 when installed on Cisco Firepower 9000 Series
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1.3 when installed on Cisco 3000 Series Industrial Security Appliances (ISA)
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1.3 when installed on Cisco ASA 5500-X Series Firewalls
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1.3 when installed on Cisco Adaptive Security Virtual Appliance (ASAv)
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1.3 when installed on Cisco Firepower 2100 Series
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1.3 when installed on Cisco Firepower 4100 Series
- Cisco Adaptive Security Appliance (ASA) Software 9.12.1.3 when installed on Cisco Firepower 9000 Series
- Cisco Adaptive Security Appliance (ASA) Software 9.12.2 when installed on Cisco 3000 Series Industrial Security Appliances (ISA)
- Cisco Adaptive Security Appliance (ASA) Software 9.12.2 when installed on Cisco ASA 5500-X Series Firewalls
showing 20 of 14,748
03
CVE links (3,833)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-76524US | high7.8OT elevated | — | ||
A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary comma… | ||||
| CVE-2026-76505US | high7.5 | — | ||
A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9… | ||||
| CVE-2026-76497US | medium6.6 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi… | ||||
| CVE-2026-76496US | high7.0 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi… | ||||
| CVE-2026-76495US | high7.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi… | ||||
| CVE-2026-76494US | high7.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi… | ||||
| CVE-2026-76493US | high7.5 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi… | ||||
| CVE-2026-76492US | high7.5 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi… | ||||
| CVE-2026-76491US | high7.5 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi… | ||||
| CVE-2026-76490US | high8.6 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi… | ||||
| CVE-2026-76489US | medium5.8 | — | ||
Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3… | ||||
| CVE-2026-76487US | medium5.3 | — | ||
A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthentic… | ||||
| CVE-2026-76481US | high7.5 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie… | ||||
| CVE-2026-76479US | high7.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie… | ||||
| CVE-2026-76478US | high8.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie… | ||||
| CVE-2026-76477US | high8.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie… | ||||
| CVE-2026-76476US | high8.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie… | ||||
| CVE-2026-76475US | critical9.3 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie… | ||||
| CVE-2026-76474US | critical9.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie… | ||||
| CVE-2026-76473US | critical9.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie… | ||||
showing 20 of 3,833