Advisories · Technology

Cisco IOS XE Software.

Every CVE that names Cisco IOS XE Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-20311 CVE record

CVSS 6.3 Medium

Cisco IOS XE Software Web UI Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-126
Not analysed yet 5 Aug 2026
CVE-2026-20301 CVE record

CVSS 8.6 High

Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability
- Cisco IOS XE Software
- Cisco IOS
- CWE-606
Not analysed yet 5 Aug 2026
CVE-2026-20308 CVE record

CVSS 4.3 Medium

Cisco IOS XE Software Web-Based Management Interface Vulnerability
- Cisco IOS XE Software
- Privilege escalation
Not analysed yet 5 Aug 2026
CVE-2026-20273 CVE record

CVSS 8.6 High

Cisco IOS XE Software Security Hardening Release
- Cisco IOS XE Software
- CWE-20
Not analysed yet 5 Aug 2026
CVE-2026-20272 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco IOS XE Software Security Hardening Release
- Cisco IOS XE Software
- Other injection
Not analysed yet 5 Aug 2026
CVE-2026-20271 CVE record

CVSS 8.6 High

Cisco IOS XE Software Security Hardening Release
- Cisco IOS XE Software
- CWE-691
Not analysed yet 5 Aug 2026
CVE-2026-20270 CVE record

CVSS 8.6 High

Cisco IOS XE Software Security Hardening Release
- Cisco IOS XE Software
- CWE-682
Not analysed yet 5 Aug 2026
CVE-2026-20269 CVE record

CVSS 8.6 High

Cisco IOS XE Software Security Hardening Release
- Cisco IOS XE Software
- CWE-664
Not analysed yet 5 Aug 2026
CVE-2026-20268 CVE record

CVSS 8.6 High

Cisco IOS XE Software Security Hardening Release
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 5 Aug 2026
CVE-2026-20267 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Cisco IOS XE Software Security Hardening Release
- Cisco IOS XE Software
- Broken access control
Not analysed yet 5 Aug 2026
CVE-2026-20263 CVE record

CVSS 8.6 High

Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-388
Not analysed yet 5 Aug 2026
CVE-2026-20124 CVE record

CVSS 7.7 High

Cisco IOS XE Software SNMP Denial of Service Vulnerability
- Cisco IOS XE Software
- Denial of service
Not analysed yet 5 Aug 2026
CVE-2026-20112 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco IOS XE Software
- Cisco IOS XE Software
- Cross-site scripting (XSS)
Not analysed yet 25 Mar 2026
CVE-2026-20113 CVE record

CVSS 5.3 Medium

CRLF injection in Cisco IOS XE Software
- Cisco IOS XE Software
- Other injection
Not analysed yet 25 Mar 2026
CVE-2026-20114 CVE record

CVSS 5.4 Medium

Cisco IOS XE Software: A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software…
- Cisco IOS XE Software
- CWE-1286
Not analysed yet 25 Mar 2026
CVE-2026-20115 CVE record

CVSS 6.1 Medium

Cleartext transmission of sensitive information in Cisco IOS XE Software
- Cisco IOS XE Software
- Weak cryptography or TLS
Not analysed yet 25 Mar 2026
CVE-2026-20083 CVE record

CVSS 6.5 Medium

Cisco IOS XE Software: A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software…
- Cisco IOS XE Software
- CWE-235
Not analysed yet 25 Mar 2026
CVE-2026-20110 CVE record

CVSS 6.5 Medium

Cisco IOS XE Software: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated…
- Cisco IOS XE Software
- Privilege escalation
Not analysed yet 25 Mar 2026
CVE-2026-20104 CVE record

CVSS 6.1 Medium

Cisco IOS XE Software: A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series…
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-20004 CVE record

CVSS 7.4 High

Cisco IOS XE Software: A vulnerability in the TLS library of Cisco IOS XE Software could allow an…
- Cisco IOS XE Software
- CWE-771
Not analysed yet 25 Mar 2026
CVE-2026-20125 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE…
- Cisco IOS
- Cisco IOS XE Software
- CWE-228
Not analysed yet 25 Mar 2026
CVE-2026-20012 CVE record

CVSS 8.6 High

Memory leak in Cisco IOS and others
- Cisco IOS
- Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- Denial of service
Not analysed yet 25 Mar 2026
CVE-2026-20086 CVE record

CVSS 8.6 High

A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller Software for the Catalyst CW9800 Family could allow an una…
- Cisco IOS XE Software
- CWE-230
Not analysed yet 25 Mar 2026
CVE-2026-20084 CVE record

CVSS 8.6 High

Uncontrolled resource consumption in Cisco IOS XE Software
- Cisco IOS XE Software
- Denial of service
Not analysed yet 25 Mar 2026
CVE-2025-20363 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Heap-based buffer overflow in Cisco IOS and others
- Cisco IOS
- Cisco IOS XR Software
- Memory corruption
Not analysed yet 25 Sept 2025
CVE-2025-20314 CVE record

CVSS 6.7 Medium

Cisco IOS XE Software: A vulnerability in Cisco IOS XE Software could allow an authenticated…
- Cisco IOS XE Software
- CWE-232
Not analysed yet 24 Sept 2025
CVE-2025-20316 CVE record

CVSS 5.3 Medium

Improper access control in Cisco IOS XE Software
- Cisco IOS XE Software
- Broken access control
Not analysed yet 24 Sept 2025
CVE-2025-20293 CVE record

CVSS 5.3 Medium

Incomplete cleanup in Cisco IOS XE Software
- Cisco IOS XE Software
- CWE-459
Not analysed yet 24 Sept 2025
CVE-2025-20338 CVE record

CVSS 6.0 Medium

Cisco IOS XE Software: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated…
- Cisco IOS XE Software
- CWE-141
Not analysed yet 24 Sept 2025
CVE-2025-20240 CVE record

CVSS 6.1 Medium

Cisco IOS XE Software: A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an…
- Cisco IOS XE Software
- CWE-692
Not analysed yet 24 Sept 2025
CVE-2025-20149 CVE record

CVSS 6.5 Medium

Buffer overflow in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 24 Sept 2025
CVE-2025-20313 CVE record

CVSS 6.7 Medium

Path traversal in Cisco IOS XE Software
- Cisco IOS XE Software
- Path traversal
Not analysed yet 24 Sept 2025
CVE-2025-20311 CVE record

CVSS 7.4 High

Cisco IOS XE Software: A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for…
- Cisco IOS XE Software
- CWE-19
Not analysed yet 24 Sept 2025
CVE-2025-20312 CVE record

CVSS 7.7 High

Infinite loop in Cisco IOS XE Software
- Cisco IOS XE Software
- Denial of service
Not analysed yet 24 Sept 2025
CVE-2025-20352 CVE record

CVSS 7.7 HighCritical · KEV, CVSS 7+ and EPSSKEV

Stack-based buffer overflow in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 24 Sept 2025
CVE-2025-20160 CVE record

CVSS 8.1 High

Improper authentication in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Authentication bypass
Not analysed yet 24 Sept 2025
CVE-2025-20315 CVE record

CVSS 8.6 High

Cisco IOS XE Software: A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS…
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 24 Sept 2025
CVE-2025-20334 CVE record

CVSS 8.8 High

Command injection in Cisco IOS XE Software
- Cisco IOS XE Software
- Command injection
Not analysed yet 24 Sept 2025
CVE-2025-20239 CVE record

CVSS 8.6 High

Memory leak in Cisco IOS and others
- Cisco IOS
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
Not analysed yet 14 Aug 2025
CVE-2025-20225 CVE record

CVSS 5.8 Medium

Memory leak in Cisco IOS and others
- Cisco IOS
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
Not analysed yet 14 Aug 2025
CVE-2025-20195 CVE record

CVSS 4.3 Medium

Cross-site request forgery in Cisco IOS XE Software
- Cisco IOS XE Software
- Cross-site request forgery (CSRF)
Not analysed yet 7 May 2025
CVE-2025-20194 CVE record

CVSS 5.4 Medium

OS command injection in Cisco IOS XE Software
- Cisco IOS XE Software
- Command injection
Not analysed yet 7 May 2025
CVE-2025-20193 CVE record

CVSS 6.5 Medium

OS command injection in Cisco IOS XE Software
- Cisco IOS XE Software
- Command injection
Not analysed yet 7 May 2025
CVE-2025-20201 CVE record

CVSS 6.7 Medium

Improper check for unusual conditions in Cisco IOS XE Software
- Cisco IOS XE Software
- CWE-754
Not analysed yet 7 May 2025
CVE-2025-20200 CVE record

CVSS 6.7 Medium

Improper check for unusual conditions in Cisco IOS XE Software
- Cisco IOS XE Software
- CWE-754
Not analysed yet 7 May 2025
CVE-2025-20199 CVE record

CVSS 4.6 Medium

Cisco IOS XE Software: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated…
- Cisco IOS XE Software
Not analysed yet 7 May 2025
CVE-2025-20198 CVE record

CVSS 4.6 Medium

Improper check for unusual conditions in Cisco IOS XE Software
- Cisco IOS XE Software
- CWE-754
Not analysed yet 7 May 2025
CVE-2025-20197 CVE record

CVSS 6.7 Medium

Improper input validation in Cisco IOS XE Software
- Cisco IOS XE Software
- CWE-20
Not analysed yet 7 May 2025
CVE-2025-20221 CVE record

CVSS 5.3 Medium

Information disclosure in Cisco IOS XE Software
- Cisco IOS XE Software
- Information disclosure
Not analysed yet 7 May 2025
CVE-2025-20162 CVE record

CVSS 8.6 High

Uncontrolled resource consumption in Cisco IOS XE Software
- Cisco IOS XE Software
- Denial of service
Not analysed yet 7 May 2025
CVE-2025-20196 CVE record

CVSS 5.3 Medium

Unlimited authentication attempts in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Authentication bypass
Not analysed yet 7 May 2025
CVE-2025-20186 CVE record

CVSS 8.8 High

OS command injection in Cisco IOS XE Software
- Cisco IOS XE Software
- Command injection
Not analysed yet 7 May 2025
CVE-2025-20155 CVE record

CVSS 6.0 Medium

Cisco IOS XE Software: A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an…
- Cisco IOS XE Software
- CWE-1287
Not analysed yet 7 May 2025
CVE-2025-20140 CVE record

CVSS 7.4 High

Cisco IOS XE Software: A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software…
- Cisco IOS XE Software
- Denial of service
Not analysed yet 7 May 2025
CVE-2025-20192 CVE record

CVSS 7.7 High

Cisco IOS XE Software: A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco…
- Cisco IOS XE Software
- CWE-232
Not analysed yet 7 May 2025
CVE-2025-20189 CVE record

CVSS 7.4 High

Cisco IOS XE Software: A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software…
- Cisco IOS XE Software
- CWE-762
Not analysed yet 7 May 2025
CVE-2025-20202 CVE record

CVSS 7.4 High

A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device.
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 7 May 2025
CVE-2025-20190 CVE record

CVSS 6.5 Medium

Improper access control in Cisco IOS XE Software
- Cisco IOS XE Software
- Broken access control
Not analysed yet 7 May 2025
CVE-2025-20188 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Hard-coded credentials in Cisco IOS XE Software
- Cisco IOS XE Software
- Hard-coded credentials
Not analysed yet 7 May 2025
CVE-2025-20214 CVE record

CVSS 4.3 Medium

Insecure direct object reference in Cisco IOS XE Software
- Cisco IOS XE Software
- Broken access control
Not analysed yet 7 May 2025