Advisories · Technology

Cisco IOS.

Every CVE that names Cisco IOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-20301 CVE record

CVSS 8.6 High

Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability
- Cisco IOS XE Software
- Cisco IOS
- CWE-606
Not analysed yet 5 Aug 2026
CVE-2026-20125 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE…
- Cisco IOS
- Cisco IOS XE Software
- CWE-228
Not analysed yet 25 Mar 2026
CVE-2026-20012 CVE record

CVSS 8.6 High

Memory leak in Cisco IOS and others
- Cisco IOS
- Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- Denial of service
Not analysed yet 25 Mar 2026
CVE-2025-20363 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Heap-based buffer overflow in Cisco IOS and others
- Cisco IOS
- Cisco IOS XR Software
- Memory corruption
Not analysed yet 25 Sept 2025
CVE-2025-20149 CVE record

CVSS 6.5 Medium

Buffer overflow in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 24 Sept 2025
CVE-2025-20327 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the web UI of Cisco IOS Software could allow an authenticated…
- Cisco IOS
- CWE-1287
Not analysed yet 24 Sept 2025
CVE-2025-20352 CVE record

CVSS 7.7 HighCritical · KEV, CVSS 7+ and EPSSKEV

Stack-based buffer overflow in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 24 Sept 2025
CVE-2025-20160 CVE record

CVSS 8.1 High

Improper authentication in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Authentication bypass
Not analysed yet 24 Sept 2025
CVE-2025-20239 CVE record

CVSS 8.6 High

Memory leak in Cisco IOS and others
- Cisco IOS
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
Not analysed yet 14 Aug 2025
CVE-2025-20225 CVE record

CVSS 5.8 Medium

Memory leak in Cisco IOS and others
- Cisco IOS
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
Not analysed yet 14 Aug 2025
CVE-2025-20196 CVE record

CVSS 5.3 Medium

Unlimited authentication attempts in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Authentication bypass
Not analysed yet 7 May 2025
CVE-2025-20164 CVE record

CVSS 8.3 High

Missing authorization in Cisco IOS
- Cisco IOS
- Broken access control
Not analysed yet 7 May 2025
CVE-2025-20181 CVE record

CVSS 6.8 Medium

Improper signature verification in Cisco IOS
- Cisco IOS
- Weak cryptography or TLS
Not analysed yet 7 May 2025
CVE-2025-20137 CVE record

CVSS 4.7 Medium

Improper access control in Cisco IOS
- Cisco IOS
- Broken access control
Not analysed yet 7 May 2025
CVE-2025-20169 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 5 Feb 2025
CVE-2025-20175 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 5 Feb 2025
CVE-2025-20174 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 5 Feb 2025
CVE-2025-20170 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 5 Feb 2025
CVE-2025-20171 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XE Software
- CWE-248
Not analysed yet 5 Feb 2025
CVE-2025-20176 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XE Software
- CWE-248
Not analysed yet 5 Feb 2025
CVE-2025-20172 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XR Software
- CWE-248
Not analysed yet 5 Feb 2025
CVE-2025-20173 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XE Software
- CWE-248
Not analysed yet 5 Feb 2025
CVE-2024-20414 CVE record

CVSS 6.5 Medium

Improper authorization in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Broken access control
Not analysed yet 25 Sept 2024
CVE-2024-20465 CVE record

CVSS 5.8 Medium

Improper access control in Cisco IOS
- Cisco IOS
- Broken access control
Not analysed yet 25 Sept 2024
CVE-2024-20433 CVE record

CVSS 8.6 High

Stack-based buffer overflow in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 25 Sept 2024
CVE-2024-20307 CVE record

CVSS 6.8 Medium

Stack-based buffer overflow in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 27 Mar 2024
CVE-2024-20308 CVE record

CVSS 8.6 High

Out-of-bounds write in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 27 Mar 2024
CVE-2024-20312 CVE record

CVSS 7.4 High

NULL pointer dereference in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 27 Mar 2024
CVE-2024-20276 CVE record

CVSS 7.4 High

Cisco IOS: A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow…
- Cisco IOS
- CWE-248
Not analysed yet 27 Mar 2024
CVE-2024-20311 CVE record

CVSS 8.6 High

Uncontrolled recursion in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Denial of service
Not analysed yet 27 Mar 2024
CVE-2023-20109 CVE record

CVSS 6.6 MediumCritical · KEVKEV

Out-of-bounds write in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 27 Sept 2023
CVE-2023-20186 CVE record

CVSS 8.0 High

Improper authorization in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Broken access control
Not analysed yet 27 Sept 2023
CVE-2023-20081 CVE record

CVSS 6.8 Medium

Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability
- Cisco IOS
- Memory corruption
Not analysed yet 23 Mar 2023
CVE-2023-20080 CVE record

CVSS 8.6 High

Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability
- Cisco IOS
- CWE-129
Not analysed yet 23 Mar 2023
CVE-2023-20076 CVE record

CVSS 7.2 High

Cisco IOx Application Hosting Environment Command Injection Vulnerability
- Cisco IOS
- CWE-233
Not analysed yet 12 Feb 2023
CVE-2022-20920 CVE record

CVSS 7.7 High

Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability
- Cisco IOS
- CWE-755
Not analysed yet 10 Oct 2022
CVE-2022-20919 CVE record

CVSS 8.6 High

Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability
- Cisco IOS
- CWE-248
Not analysed yet 30 Sept 2022
CVE-2022-20720 CVE record

CVSS 5.5 Medium

Cisco IOx Application Hosting Environment Vulnerabilities
- Cisco IOS
- Path traversal
Not analysed yet 15 Apr 2022
CVE-2022-20721 CVE record

CVSS 5.5 Medium

Cisco IOx Application Hosting Environment Vulnerabilities
- Cisco IOS
- Path traversal
Not analysed yet 15 Apr 2022
CVE-2022-20722 CVE record

CVSS 5.5 Medium

Cisco IOx Application Hosting Environment Vulnerabilities
- Cisco IOS
- Path traversal
Not analysed yet 15 Apr 2022
CVE-2022-20723 CVE record

CVSS 5.5 Medium

Cisco IOx Application Hosting Environment Vulnerabilities
- Cisco IOS
- Path traversal
Not analysed yet 15 Apr 2022
CVE-2022-20724 CVE record

CVSS 5.5 Medium

Cisco IOx Application Hosting Environment Vulnerabilities
- Cisco IOS
- Path traversal
Not analysed yet 15 Apr 2022
CVE-2022-20725 CVE record

CVSS 5.5 Medium

Cisco IOx Application Hosting Environment Vulnerabilities
- Cisco IOS
- Path traversal
Not analysed yet 15 Apr 2022
CVE-2022-20726 CVE record

CVSS 5.5 Medium

Cisco IOx Application Hosting Environment Vulnerabilities
- Cisco IOS
- Path traversal
Not analysed yet 15 Apr 2022
CVE-2022-20727 CVE record

CVSS 5.5 Medium

Cisco IOx Application Hosting Environment Vulnerabilities
- Cisco IOS
- Path traversal
Not analysed yet 15 Apr 2022
CVE-2022-20761 CVE record

CVSS 7.4 High

Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service Vulnerability
- Cisco IOS
- CWE-248
Not analysed yet 15 Apr 2022
CVE-2022-20677 CVE record

CVSS 5.5 Medium

Cisco IOx Application Hosting Environment Vulnerabilities
- Cisco IOS
- Path traversal
Not analysed yet 15 Apr 2022
CVE-2022-20697 CVE record

CVSS 8.6 High

Cisco IOS and IOS XE Software Web Services Denial of Service Vulnerability
- Cisco IOS
- CWE-691
Not analysed yet 15 Apr 2022
CVE-2022-20718 CVE record

CVSS 5.5 Medium

Cisco IOx Application Hosting Environment Vulnerabilities
- Cisco IOS
- Path traversal
Not analysed yet 15 Apr 2022
CVE-2022-20719 CVE record

CVSS 5.5 Medium

Cisco IOx Application Hosting Environment Vulnerabilities
- Cisco IOS
- Path traversal
Not analysed yet 15 Apr 2022
CVE-2021-1620 CVE record

CVSS 7.7 High

Cisco IOS and IOS XE Software IKEv2 AutoReconnect Feature Denial of Service Vulnerability
- Cisco IOS
- CWE-563
Not analysed yet 23 Sept 2021
CVE-2021-34705 CVE record

CVSS 5.3 Medium

Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass Vulnerability
- Cisco IOS
- CWE-232
Not analysed yet 23 Sept 2021
CVE-2021-34714 CVE record

CVSS 7.4 High

Multiple Cisco Operating Systems Unidirectional Link Detection Denial of Service Vulnerability
- Cisco IOS
- CWE-20
Not analysed yet 23 Sept 2021
CVE-2021-34703 CVE record

CVSS 6.8 Medium

Cisco IOS and IOS XE Software Link Layer Discovery Protocol Denial of Service Vulnerability
- Cisco IOS
- CWE-456
Not analysed yet 23 Sept 2021
CVE-2021-34699 CVE record

CVSS 7.7 High

Cisco IOS and IOS XE Software TrustSec CLI Parser Denial of Service Vulnerability
- Cisco IOS
- CWE-435
Not analysed yet 23 Sept 2021
CVE-2021-1377 CVE record

CVSS 5.8 Medium

Cisco IOS and IOS XE Software ARP Resource Management Exhaustion Denial of Service Vulnerability
- Cisco IOS
- CWE-399
Not analysed yet 24 Mar 2021
CVE-2021-1385 CVE record

CVSS 6.5 Medium

Cisco IOx Application Environment Path Traversal Vulnerability
- Cisco IOS
- Path traversal
Not analysed yet 24 Mar 2021
CVE-2021-1391 CVE record

CVSS 5.1 Medium

Cisco IOS and IOS XE Software Privilege Escalation Vulnerability
- Cisco IOS
- CWE-489
Not analysed yet 24 Mar 2021
CVE-2021-1392 CVE record

CVSS 7.8 High

Cisco IOS and IOS XE Software Common Industrial Protocol Privilege Escalation Vulnerability
- Cisco IOS
- Hard-coded credentials
Not analysed yet 24 Mar 2021
CVE-2021-1460 CVE record

CVSS 5.3 Medium

Cisco IOx Application Framework Denial of Service Vulnerability
- Cisco IOS
- Denial of service
Not analysed yet 24 Mar 2021