What’s Vulnerable › Products

Cisco Duo vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Cisco Duo version is affected

Latest Cisco Duo vulnerabilities

• CVE-2025-20258 — (CVSS 5.4)
• CVE-2023-20199 — Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability (CVSS 6.6)
• CVE-2023-20123 — Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability (CVSS 4.6)
• CVE-2022-20662 — Cisco Duo for macOS Authentication Bypass Vulnerability (CVSS 6.8)