Products
Network & security
Cisco IOS / IOS XE
- Last 30 days
- 0
- Actively exploited (KEV)
- 11
- All CVEs
- 363
Latest vulnerabilities
| ID | Severity | Description | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-20311 | 6.3Medium |
Cisco IOS XE Software
Cisco IOS XE Software Web UI Denial of Service Vulnerability
|
0.25% |
2026-08-05
3 mo ago
|
| CVE-2026-20301 | 8.6High |
Cisco IOS XE SoftwareCisco IOS
Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability
|
0.57% |
2026-08-05
3 mo ago
|
| CVE-2026-20308 | 4.3Medium |
Cisco IOS XE Software
Cisco IOS XE Software Web-Based Management Interface Vulnerability
|
0.43% |
2026-08-05
3 mo ago
|
| CVE-2026-20273 | 8.6High |
Cisco IOS XE Software
Cisco IOS XE Software Security Hardening Release
|
0.46% |
2026-08-05
3 mo ago
|
| CVE-2026-20272 | 9.8Critical |
Cisco IOS XE Software
Cisco IOS XE Software Security Hardening Release
|
0.57% |
2026-08-05
3 mo ago
|
| CVE-2026-20271 | 8.6High |
Cisco IOS XE Software
Cisco IOS XE Software Security Hardening Release
|
0.46% |
2026-08-05
3 mo ago
|
| CVE-2026-20270 | 8.6High |
Cisco IOS XE Software
Cisco IOS XE Software Security Hardening Release
|
0.46% |
2026-08-05
3 mo ago
|
| CVE-2026-20269 | 8.6High |
Cisco IOS XE Software
Cisco IOS XE Software Security Hardening Release
|
0.46% |
2026-08-05
3 mo ago
|
| CVE-2026-20268 | 8.6High |
Cisco IOS XE Software
Cisco IOS XE Software Security Hardening Release
|
0.46% |
2026-08-05
3 mo ago
|
| CVE-2026-20267 | 9.0Critical |
Cisco IOS XE Software
Cisco IOS XE Software Security Hardening Release
|
0.38% |
2026-08-05
3 mo ago
|
| CVE-2026-20263 | 8.6High |
Cisco IOS XE Software
Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability
|
0.57% |
2026-08-05
3 mo ago
|
| CVE-2026-20124 | 7.7High |
Cisco IOS XE Software
Cisco IOS XE Software SNMP Denial of Service Vulnerability
|
0.5% |
2026-08-05
3 mo ago
|
| CVE-2026-20112 | 4.8Medium |
Cisco IOS XE Software
A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attac…
|
0.24% |
2026-03-25
7 mo ago
|
| CVE-2026-20113 | 5.3Medium |
Cisco IOS XE Software
A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a carriage return line feed (CRLF) inje…
|
0.36% |
2026-03-25
7 mo ago
|
| CVE-2026-20114 | 5.4Medium |
Cisco IOS XE Software
A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access management APIs that would not normally be a…
|
0.35% |
2026-03-25
7 mo ago
|
| CVE-2026-20115 | 6.1Medium |
Cisco IOS XE Software
A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information.
This vulnerability is due to a device configuration upload being perfo…
|
0.15% |
2026-03-25
7 mo ago
|
| CVE-2026-20083 | 6.5Medium |
Cisco IOS XE Software
A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to cause a denial of service (DoS) condition on an affected devi…
|
0.09% |
2026-03-25
7 mo ago
|
| CVE-2026-20110 | 6.5Medium |
Cisco IOS XE Software
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability exists because incorrect privile…
|
0.13% |
2026-03-25
7 mo ago
|
| CVE-2026-20104 | 6.1Medium |
Cisco IOS XE Software
A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and IE9320 Rugged Series Switches, and Cisco IE3…
|
0.16% |
2026-03-25
7 mo ago
|
| CVE-2026-20004 | 7.4High |
Cisco IOS XE Software
A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device.
This vulnerability is due to improper management of…
|
0.18% |
2026-03-25
7 mo ago
|
| CVE-2026-20125 | 7.7High |
Cisco IOS XE SoftwareCisco IOS
A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a deni…
|
0.29% |
2026-03-25
7 mo ago
|
| CVE-2026-20012 | 8.6High |
Cisco IOS XE SoftwareCisco Secure Firewall Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense Software
A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Def…
|
0.36% |
2026-03-25
7 mo ago
|
| CVE-2026-20086 | 8.6High |
Cisco IOS XE Software
A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller Software for the Catalyst CW9800 Family could allow an unauthenticated, remote…
|
0.36% |
2026-03-25
7 mo ago
|
| CVE-2026-20084 | 8.6High |
Cisco IOS XE Software
A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VLANs, resulting in a denial of service (DoS) conditio…
|
0.36% |
2026-03-25
7 mo ago
|
| CVE-2025-20363 | 9.0Critical |
Cisco Adaptive Security Appliance SoftwareCisco Firepower Threat Defense SoftwareCisco IOS XE Software
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR S…
|
7.16% |
2025-09-25
13 mo ago
|
| CVE-2025-20314 | 6.7Medium |
Cisco IOS XE Software
A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot…
|
0.15% |
2025-09-24
13 mo ago
|
| CVE-2025-20316 | 5.3Medium |
Cisco IOS XE Software
A vulnerability in the access control list (ACL) programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL on an a…
|
0.35% |
2025-09-24
13 mo ago
|
| CVE-2025-20293 | 5.3Medium |
Cisco IOS XE Software
A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL) could allow an unauthenticated, remote attacker to access the public-key infrastruc…
|
0.2% |
2025-09-24
13 mo ago
|
| CVE-2025-20338 | 6.0Medium |
Cisco IOS XE Software
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected dev…
|
0.29% |
2025-09-24
13 mo ago
|
| CVE-2025-20240 | 6.1Medium |
Cisco IOS XE Software
A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting attack (XSS) on an affected device.
This vulnerab…
|
0.35% |
2025-09-24
13 mo ago
|