# Cisco IOS.

Every CVE that names Cisco IOS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20301.md)
  `CVE-2026-20301` · CVE record: Cisco Cisco IOS XE Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-606
- [Cisco IOS: A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE…](https://agentprime.io/advisories/CVE-2026-20125.md)
  `CVE-2026-20125` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-228
- [Memory leak in Cisco IOS and others](https://agentprime.io/advisories/CVE-2026-20012.md)
  `CVE-2026-20012` · CVE record: Cisco IOS and 3 more · CVSS 8.6 High · Not analysed yet · Published 25 Mar 2026 · Tags: Denial of service
- [Heap-based buffer overflow in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20363.md)
  `CVE-2025-20363` · CVE record: Cisco IOS and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption
- [Buffer overflow in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20149.md)
  `CVE-2025-20149` · CVE record: Cisco IOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: Memory corruption
- [Cisco IOS: A vulnerability in the web UI of Cisco IOS Software could allow an authenticated…](https://agentprime.io/advisories/CVE-2025-20327.md)
  `CVE-2025-20327` · CVE record: Cisco IOS · CVSS 7.7 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-1287
- [Stack-based buffer overflow in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20352.md)
  `CVE-2025-20352` · CVE record: Cisco IOS and 2 more · CVSS 7.7 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.41 · Not analysed yet · Published 24 Sept 2025 · Tags: Memory corruption
- [Improper authentication in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20160.md)
  `CVE-2025-20160` · CVE record: Cisco IOS and 1 more · CVSS 8.1 High · Not analysed yet · Published 24 Sept 2025 · Tags: Authentication bypass
- [Memory leak in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20239.md)
  `CVE-2025-20239` · CVE record: Cisco IOS and 3 more · CVSS 8.6 High · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service
- [Memory leak in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20225.md)
  `CVE-2025-20225` · CVE record: Cisco IOS and 3 more · CVSS 5.8 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service
- [Unlimited authentication attempts in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20196.md)
  `CVE-2025-20196` · CVE record: Cisco IOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 7 May 2025 · Tags: Authentication bypass
- [Missing authorization in Cisco IOS](https://agentprime.io/advisories/CVE-2025-20164.md)
  `CVE-2025-20164` · CVE record: Cisco IOS · CVSS 8.3 High · Not analysed yet · Published 7 May 2025 · Tags: Broken access control
- [Improper signature verification in Cisco IOS](https://agentprime.io/advisories/CVE-2025-20181.md)
  `CVE-2025-20181` · CVE record: Cisco IOS · CVSS 6.8 Medium · Not analysed yet · Published 7 May 2025 · Tags: Weak cryptography or TLS
- [Improper access control in Cisco IOS](https://agentprime.io/advisories/CVE-2025-20137.md)
  `CVE-2025-20137` · CVE record: Cisco IOS · CVSS 4.7 Medium · Not analysed yet · Published 7 May 2025 · Tags: Broken access control
- [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20169.md)
  `CVE-2025-20169` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Memory corruption
- [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20175.md)
  `CVE-2025-20175` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Memory corruption
- [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20174.md)
  `CVE-2025-20174` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Memory corruption
- [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20170.md)
  `CVE-2025-20170` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Memory corruption
- [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20171.md)
  `CVE-2025-20171` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: CWE-248
- [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20176.md)
  `CVE-2025-20176` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: CWE-248
- [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20172.md)
  `CVE-2025-20172` · CVE record: Cisco IOS and 2 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: CWE-248
- [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20173.md)
  `CVE-2025-20173` · CVE record: Cisco IOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: CWE-248
- [Improper authorization in Cisco IOS and others](https://agentprime.io/advisories/CVE-2024-20414.md)
  `CVE-2024-20414` · CVE record: Cisco IOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Sept 2024 · Tags: Broken access control
- [Improper access control in Cisco IOS](https://agentprime.io/advisories/CVE-2024-20465.md)
  `CVE-2024-20465` · CVE record: Cisco IOS · CVSS 5.8 Medium · Not analysed yet · Published 25 Sept 2024 · Tags: Broken access control
- [Stack-based buffer overflow in Cisco IOS and others](https://agentprime.io/advisories/CVE-2024-20433.md)
  `CVE-2024-20433` · CVE record: Cisco IOS and 1 more · CVSS 8.6 High · Not analysed yet · Published 25 Sept 2024 · Tags: Memory corruption
- [Stack-based buffer overflow in Cisco IOS and others](https://agentprime.io/advisories/CVE-2024-20307.md)
  `CVE-2024-20307` · CVE record: Cisco IOS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: Memory corruption
- [Out-of-bounds write in Cisco IOS and others](https://agentprime.io/advisories/CVE-2024-20308.md)
  `CVE-2024-20308` · CVE record: Cisco IOS and 1 more · CVSS 8.6 High · Not analysed yet · Published 27 Mar 2024 · Tags: Memory corruption
- [NULL pointer dereference in Cisco IOS and others](https://agentprime.io/advisories/CVE-2024-20312.md)
  `CVE-2024-20312` · CVE record: Cisco IOS and 1 more · CVSS 7.4 High · Not analysed yet · Published 27 Mar 2024 · Tags: Memory corruption
- [Cisco IOS: A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow…](https://agentprime.io/advisories/CVE-2024-20276.md)
  `CVE-2024-20276` · CVE record: Cisco IOS · CVSS 7.4 High · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-248
- [Uncontrolled recursion in Cisco IOS and others](https://agentprime.io/advisories/CVE-2024-20311.md)
  `CVE-2024-20311` · CVE record: Cisco IOS and 1 more · CVSS 8.6 High · Not analysed yet · Published 27 Mar 2024 · Tags: Denial of service
- [Out-of-bounds write in Cisco IOS and others](https://agentprime.io/advisories/CVE-2023-20109.md)
  `CVE-2023-20109` · CVE record: Cisco IOS and 1 more · CVSS 6.6 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 27 Sept 2023 · Tags: Memory corruption
- [Improper authorization in Cisco IOS and others](https://agentprime.io/advisories/CVE-2023-20186.md)
  `CVE-2023-20186` · CVE record: Cisco IOS and 1 more · CVSS 8.0 High · Not analysed yet · Published 27 Sept 2023 · Tags: Broken access control
- [Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-20081.md)
  `CVE-2023-20081` · CVE record: Cisco Cisco IOS · CVSS 6.8 Medium · Not analysed yet · Published 23 Mar 2023 · Tags: Memory corruption
- [Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-20080.md)
  `CVE-2023-20080` · CVE record: Cisco Cisco IOS · CVSS 8.6 High · Not analysed yet · Published 23 Mar 2023 · Tags: CWE-129
- [Cisco IOx Application Hosting Environment Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2023-20076.md)
  `CVE-2023-20076` · CVE record: Cisco Cisco IOS · CVSS 7.2 High · Not analysed yet · Published 12 Feb 2023 · Tags: CWE-233
- [Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20920.md)
  `CVE-2022-20920` · CVE record: Cisco Cisco IOS · CVSS 7.7 High · Not analysed yet · Published 10 Oct 2022 · Tags: CWE-755
- [Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20919.md)
  `CVE-2022-20919` · CVE record: Cisco Cisco IOS · CVSS 8.6 High · Not analysed yet · Published 30 Sept 2022 · Tags: CWE-248
- [Cisco IOx Application Hosting Environment Vulnerabilities](https://agentprime.io/advisories/CVE-2022-20720.md)
  `CVE-2022-20720` · CVE record: Cisco Cisco IOS · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Path traversal
- [Cisco IOx Application Hosting Environment Vulnerabilities](https://agentprime.io/advisories/CVE-2022-20721.md)
  `CVE-2022-20721` · CVE record: Cisco Cisco IOS · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Path traversal
- [Cisco IOx Application Hosting Environment Vulnerabilities](https://agentprime.io/advisories/CVE-2022-20722.md)
  `CVE-2022-20722` · CVE record: Cisco Cisco IOS · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Path traversal
- [Cisco IOx Application Hosting Environment Vulnerabilities](https://agentprime.io/advisories/CVE-2022-20723.md)
  `CVE-2022-20723` · CVE record: Cisco Cisco IOS · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Path traversal
- [Cisco IOx Application Hosting Environment Vulnerabilities](https://agentprime.io/advisories/CVE-2022-20724.md)
  `CVE-2022-20724` · CVE record: Cisco Cisco IOS · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Path traversal
- [Cisco IOx Application Hosting Environment Vulnerabilities](https://agentprime.io/advisories/CVE-2022-20725.md)
  `CVE-2022-20725` · CVE record: Cisco Cisco IOS · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Path traversal
- [Cisco IOx Application Hosting Environment Vulnerabilities](https://agentprime.io/advisories/CVE-2022-20726.md)
  `CVE-2022-20726` · CVE record: Cisco Cisco IOS · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Path traversal
- [Cisco IOx Application Hosting Environment Vulnerabilities](https://agentprime.io/advisories/CVE-2022-20727.md)
  `CVE-2022-20727` · CVE record: Cisco Cisco IOS · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Path traversal
- [Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20761.md)
  `CVE-2022-20761` · CVE record: Cisco Cisco IOS · CVSS 7.4 High · Not analysed yet · Published 15 Apr 2022 · Tags: CWE-248
- [Cisco IOx Application Hosting Environment Vulnerabilities](https://agentprime.io/advisories/CVE-2022-20677.md)
  `CVE-2022-20677` · CVE record: Cisco Cisco IOS · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Path traversal
- [Cisco IOS and IOS XE Software Web Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20697.md)
  `CVE-2022-20697` · CVE record: Cisco Cisco IOS · CVSS 8.6 High · Not analysed yet · Published 15 Apr 2022 · Tags: CWE-691
- [Cisco IOx Application Hosting Environment Vulnerabilities](https://agentprime.io/advisories/CVE-2022-20718.md)
  `CVE-2022-20718` · CVE record: Cisco Cisco IOS · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Path traversal
- [Cisco IOx Application Hosting Environment Vulnerabilities](https://agentprime.io/advisories/CVE-2022-20719.md)
  `CVE-2022-20719` · CVE record: Cisco Cisco IOS · CVSS 5.5 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: Path traversal
- [Cisco IOS and IOS XE Software IKEv2 AutoReconnect Feature Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1620.md)
  `CVE-2021-1620` · CVE record: Cisco Cisco IOS · CVSS 7.7 High · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-563
- [Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-34705.md)
  `CVE-2021-34705` · CVE record: Cisco Cisco IOS · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-232
- [Multiple Cisco Operating Systems Unidirectional Link Detection Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-34714.md)
  `CVE-2021-34714` · CVE record: Cisco Cisco IOS · CVSS 7.4 High · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-20
- [Cisco IOS and IOS XE Software Link Layer Discovery Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-34703.md)
  `CVE-2021-34703` · CVE record: Cisco Cisco IOS · CVSS 6.8 Medium · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-456
- [Cisco IOS and IOS XE Software TrustSec CLI Parser Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-34699.md)
  `CVE-2021-34699` · CVE record: Cisco Cisco IOS · CVSS 7.7 High · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-435
- [Cisco IOS and IOS XE Software ARP Resource Management Exhaustion Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1377.md)
  `CVE-2021-1377` · CVE record: Cisco Cisco IOS · CVSS 5.8 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-399
- [Cisco IOx Application Environment Path Traversal Vulnerability](https://agentprime.io/advisories/CVE-2021-1385.md)
  `CVE-2021-1385` · CVE record: Cisco Cisco IOS · CVSS 6.5 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: Path traversal
- [Cisco IOS and IOS XE Software Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-1391.md)
  `CVE-2021-1391` · CVE record: Cisco Cisco IOS · CVSS 5.1 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-489
- [Cisco IOS and IOS XE Software Common Industrial Protocol Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-1392.md)
  `CVE-2021-1392` · CVE record: Cisco Cisco IOS · CVSS 7.8 High · Not analysed yet · Published 24 Mar 2021 · Tags: Hard-coded credentials
- [Cisco IOx Application Framework Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1460.md)
  `CVE-2021-1460` · CVE record: Cisco Cisco IOS · CVSS 5.3 Medium · Not analysed yet · Published 24 Mar 2021 · Tags: Denial of service

Older: <https://agentprime.io/advisories/technology/cisco-ios.md?cursor=WyIyMDIxLTAzLTI0VDIwOjA2OjUwLjM4ODAwMFoiLCJDVkUtMjAyMS0xNDYwIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cisco-ios>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cisco-ios/>. Everything for agents: <https://agentprime.io/llms.txt>.