# Cisco IOS XE Software. Every CVE that names Cisco IOS XE Software among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Cisco IOS XE Software Web UI Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20311.md) `CVE-2026-20311` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.3 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-126 - [Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20301.md) `CVE-2026-20301` · CVE record: Cisco Cisco IOS XE Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-606 - [Cisco IOS XE Software Web-Based Management Interface Vulnerability](https://agentprime.io/advisories/CVE-2026-20308.md) `CVE-2026-20308` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.3 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Privilege escalation - [Cisco IOS XE Software Security Hardening Release](https://agentprime.io/advisories/CVE-2026-20273.md) `CVE-2026-20273` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-20 - [Cisco IOS XE Software Security Hardening Release](https://agentprime.io/advisories/CVE-2026-20272.md) `CVE-2026-20272` · CVE record: Cisco Cisco IOS XE Software · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Other injection - [Cisco IOS XE Software Security Hardening Release](https://agentprime.io/advisories/CVE-2026-20271.md) `CVE-2026-20271` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-691 - [Cisco IOS XE Software Security Hardening Release](https://agentprime.io/advisories/CVE-2026-20270.md) `CVE-2026-20270` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-682 - [Cisco IOS XE Software Security Hardening Release](https://agentprime.io/advisories/CVE-2026-20269.md) `CVE-2026-20269` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-664 - [Cisco IOS XE Software Security Hardening Release](https://agentprime.io/advisories/CVE-2026-20268.md) `CVE-2026-20268` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2026 · Tags: Memory corruption - [Cisco IOS XE Software Security Hardening Release](https://agentprime.io/advisories/CVE-2026-20267.md) `CVE-2026-20267` · CVE record: Cisco Cisco IOS XE Software · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Broken access control - [Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20263.md) `CVE-2026-20263` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-388 - [Cisco IOS XE Software SNMP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20124.md) `CVE-2026-20124` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.7 High · Not analysed yet · Published 5 Aug 2026 · Tags: Denial of service - [Cross-site scripting in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2026-20112.md) `CVE-2026-20112` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.8 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Cross-site scripting (XSS) - [CRLF injection in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2026-20113.md) `CVE-2026-20113` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.3 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Other injection - [Cisco IOS XE Software: A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2026-20114.md) `CVE-2026-20114` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.4 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-1286 - [Cleartext transmission of sensitive information in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2026-20115.md) `CVE-2026-20115` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.1 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Weak cryptography or TLS - [Cisco IOS XE Software: A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2026-20083.md) `CVE-2026-20083` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.5 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-235 - [Cisco IOS XE Software: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated…](https://agentprime.io/advisories/CVE-2026-20110.md) `CVE-2026-20110` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.5 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Privilege escalation - [Cisco IOS XE Software: A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series…](https://agentprime.io/advisories/CVE-2026-20104.md) `CVE-2026-20104` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.1 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Memory corruption - [Cisco IOS XE Software: A vulnerability in the TLS library of Cisco IOS XE Software could allow an…](https://agentprime.io/advisories/CVE-2026-20004.md) `CVE-2026-20004` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-771 - [Cisco IOS: A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE…](https://agentprime.io/advisories/CVE-2026-20125.md) `CVE-2026-20125` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-228 - [Memory leak in Cisco IOS and others](https://agentprime.io/advisories/CVE-2026-20012.md) `CVE-2026-20012` · CVE record: Cisco IOS and 3 more · CVSS 8.6 High · Not analysed yet · Published 25 Mar 2026 · Tags: Denial of service - [A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller Software for the Catalyst CW9800 Family could allow an una…](https://agentprime.io/advisories/CVE-2026-20086.md) `CVE-2026-20086` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-230 - [Uncontrolled resource consumption in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2026-20084.md) `CVE-2026-20084` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 25 Mar 2026 · Tags: Denial of service - [Heap-based buffer overflow in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20363.md) `CVE-2025-20363` · CVE record: Cisco IOS and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Cisco IOS XE Software: A vulnerability in Cisco IOS XE Software could allow an authenticated…](https://agentprime.io/advisories/CVE-2025-20314.md) `CVE-2025-20314` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-232 - [Improper access control in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20316.md) `CVE-2025-20316` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.3 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: Broken access control - [Incomplete cleanup in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20293.md) `CVE-2025-20293` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.3 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-459 - [Cisco IOS XE Software: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated…](https://agentprime.io/advisories/CVE-2025-20338.md) `CVE-2025-20338` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.0 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-141 - [Cisco IOS XE Software: A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an…](https://agentprime.io/advisories/CVE-2025-20240.md) `CVE-2025-20240` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.1 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-692 - [Buffer overflow in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20149.md) `CVE-2025-20149` · CVE record: Cisco IOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: Memory corruption - [Path traversal in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20313.md) `CVE-2025-20313` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: Path traversal - [Cisco IOS XE Software: A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for…](https://agentprime.io/advisories/CVE-2025-20311.md) `CVE-2025-20311` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-19 - [Infinite loop in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20312.md) `CVE-2025-20312` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.7 High · Not analysed yet · Published 24 Sept 2025 · Tags: Denial of service - [Stack-based buffer overflow in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20352.md) `CVE-2025-20352` · CVE record: Cisco IOS and 2 more · CVSS 7.7 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.41 · Not analysed yet · Published 24 Sept 2025 · Tags: Memory corruption - [Improper authentication in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20160.md) `CVE-2025-20160` · CVE record: Cisco IOS and 1 more · CVSS 8.1 High · Not analysed yet · Published 24 Sept 2025 · Tags: Authentication bypass - [Cisco IOS XE Software: A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS…](https://agentprime.io/advisories/CVE-2025-20315.md) `CVE-2025-20315` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2025 · Tags: Memory corruption - [Command injection in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20334.md) `CVE-2025-20334` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.8 High · Not analysed yet · Published 24 Sept 2025 · Tags: Command injection - [Memory leak in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20239.md) `CVE-2025-20239` · CVE record: Cisco IOS and 3 more · CVSS 8.6 High · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service - [Memory leak in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20225.md) `CVE-2025-20225` · CVE record: Cisco IOS and 3 more · CVSS 5.8 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service - [Cross-site request forgery in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20195.md) `CVE-2025-20195` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.3 Medium · Not analysed yet · Published 7 May 2025 · Tags: Cross-site request forgery (CSRF) - [OS command injection in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20194.md) `CVE-2025-20194` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.4 Medium · Not analysed yet · Published 7 May 2025 · Tags: Command injection - [OS command injection in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20193.md) `CVE-2025-20193` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.5 Medium · Not analysed yet · Published 7 May 2025 · Tags: Command injection - [Improper check for unusual conditions in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20201.md) `CVE-2025-20201` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 7 May 2025 · Tags: CWE-754 - [Improper check for unusual conditions in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20200.md) `CVE-2025-20200` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 7 May 2025 · Tags: CWE-754 - [Cisco IOS XE Software: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated…](https://agentprime.io/advisories/CVE-2025-20199.md) `CVE-2025-20199` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.6 Medium · Not analysed yet · Published 7 May 2025 - [Improper check for unusual conditions in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20198.md) `CVE-2025-20198` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.6 Medium · Not analysed yet · Published 7 May 2025 · Tags: CWE-754 - [Improper input validation in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20197.md) `CVE-2025-20197` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.7 Medium · Not analysed yet · Published 7 May 2025 · Tags: CWE-20 - [Information disclosure in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20221.md) `CVE-2025-20221` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.3 Medium · Not analysed yet · Published 7 May 2025 · Tags: Information disclosure - [Uncontrolled resource consumption in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20162.md) `CVE-2025-20162` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 7 May 2025 · Tags: Denial of service - [Unlimited authentication attempts in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20196.md) `CVE-2025-20196` · CVE record: Cisco IOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 7 May 2025 · Tags: Authentication bypass - [OS command injection in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20186.md) `CVE-2025-20186` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.8 High · Not analysed yet · Published 7 May 2025 · Tags: Command injection - [Cisco IOS XE Software: A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an…](https://agentprime.io/advisories/CVE-2025-20155.md) `CVE-2025-20155` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.0 Medium · Not analysed yet · Published 7 May 2025 · Tags: CWE-1287 - [Cisco IOS XE Software: A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20140.md) `CVE-2025-20140` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 7 May 2025 · Tags: Denial of service - [Cisco IOS XE Software: A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco…](https://agentprime.io/advisories/CVE-2025-20192.md) `CVE-2025-20192` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.7 High · Not analysed yet · Published 7 May 2025 · Tags: CWE-232 - [Cisco IOS XE Software: A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20189.md) `CVE-2025-20189` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 7 May 2025 · Tags: CWE-762 - [A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device.](https://agentprime.io/advisories/CVE-2025-20202.md) `CVE-2025-20202` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 7 May 2025 · Tags: Memory corruption - [Improper access control in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20190.md) `CVE-2025-20190` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.5 Medium · Not analysed yet · Published 7 May 2025 · Tags: Broken access control - [Hard-coded credentials in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20188.md) `CVE-2025-20188` · CVE record: Cisco Cisco IOS XE Software · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.27 · Not analysed yet · Published 7 May 2025 · Tags: Hard-coded credentials - [Insecure direct object reference in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2025-20214.md) `CVE-2025-20214` · CVE record: Cisco Cisco IOS XE Software · CVSS 4.3 Medium · Not analysed yet · Published 7 May 2025 · Tags: Broken access control Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .