CVE-2026-20263
- EPSS 0.33%
- Veröffentlicht 05.08.2026 16:18:33
- Zuletzt bearbeitet 28.09.2026 15:18:25
A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to imp...
CVE-2026-20124
- EPSS 0.35%
- Veröffentlicht 05.08.2026 16:18:21
- Zuletzt bearbeitet 17.09.2026 18:49:05
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnera...
CVE-2026-20114
- EPSS 0.28%
- Veröffentlicht 25.03.2026 16:16:16
- Zuletzt bearbeitet 26.03.2026 15:13:15
A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access management APIs that would not normally be available for Lobby Ambassador u...
CVE-2026-20115
- EPSS 0.15%
- Veröffentlicht 25.03.2026 16:16:16
- Zuletzt bearbeitet 26.03.2026 15:13:15
A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information. This vulnerability is due to a device configuration upload being performed over an insecure tunnel. A...
CVE-2026-20125
- EPSS 0.28%
- Veröffentlicht 25.03.2026 16:16:16
- Zuletzt bearbeitet 26.03.2026 15:13:15
A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. ...
CVE-2026-20112
- EPSS 0.19%
- Veröffentlicht 25.03.2026 16:16:15
- Zuletzt bearbeitet 26.03.2026 15:13:15
A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-bas...
CVE-2026-20113
- EPSS 0.29%
- Veröffentlicht 25.03.2026 16:16:15
- Zuletzt bearbeitet 26.03.2026 15:13:15
A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a carriage return line feed (CRLF) injection attack against a user. ...
CVE-2026-20104
- EPSS 0.16%
- Veröffentlicht 25.03.2026 16:16:14
- Zuletzt bearbeitet 28.09.2026 15:18:35
A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and IE9320 Rugged Series Switches, and Cisco IE3500 and IE3505 Rugged Series Sw...
CVE-2026-20110
- EPSS 0.09%
- Veröffentlicht 25.03.2026 16:16:14
- Zuletzt bearbeitet 26.03.2026 15:13:15
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because incorrect privileges are associated with the sta...
CVE-2026-20084
- EPSS 0.35%
- Veröffentlicht 25.03.2026 16:16:13
- Zuletzt bearbeitet 28.09.2026 15:18:38
A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VLANs, resulting in a denial of service (DoS) condition. This vulnerability is du...