Uniqcli
Build a Quote

Cisco IOS XE Security Advisories & Vulnerabilities

Recent Cisco PSIRT advisories affecting IOS XE software on Catalyst switches and routers. Search, check severity and CVSS, and get a remediation or refresh quote from an authorized Cisco partner.

Explore Cisco IOS XEAssess & quote

105 recent advisories affecting Cisco IOS XE

  • Cisco Secure Firewall Adaptive Security Appliance Software, Secure Firewall Threat Defense Software, IOS Software, IOS XE Software, and IOS XR Software Web Services Remote Code Execution Vulnerability

    Critical · CVSS 9
    CVE-2025-20363Published Sep 25, 2025cisco-sa-http-code-exec-WmfP3h3O

    Affected: Cisco IOS XR Software , Cisco IOS 12.2(15)B, Cisco IOS 12.2(16)B1, Cisco IOS 12.2(16)B3, Cisco IOS 12.2(16)B2, Cisco IOS 12.2(15)B1, and 3236 more

  • Cisco IOS XE Wireless Controller Software Arbitrary File Upload Vulnerability

    Critical · CVSS 10
    CVE-2025-20188Published May 7, 2025cisco-sa-wlc-file-uplpd-rHZG9UfC

    Affected: Cisco IOS XE Software 17.11.1, Cisco IOS XE Software 17.12.1, Cisco IOS XE Software 17.12.2, Cisco IOS XE Software 17.12.3, Cisco IOS XE Software 17.13.1, Cisco IOS XE Software 17.14.1, and 1 more

  • Cisco Unified Industrial Wireless Software for Ultra-Reliable Wireless Backhaul Access Point Command Injection Vulnerability

    Critical · CVSS 10
    CVE-2024-20418Published Nov 6, 2024cisco-sa-backhaul-ap-cmdinj-R7E28Ecs

    Affected: Cisco Aironet Access Point Software (IOS XE Controller)

  • Multiple Vulnerabilities in Cisco IOS XE Software Web UI Feature

    Critical · CVSS 10
    CVE-2023-20198, CVE-2023-20273Published Oct 16, 2023cisco-sa-iosxe-webui-privesc-j22SaA4z

    Affected: Cisco IOS XE Software 16.1.1, Cisco IOS XE Software 16.1.2, Cisco IOS XE Software 16.1.3, Cisco IOS XE Software 16.2.1, Cisco IOS XE Software 16.2.2, Cisco IOS XE Software 16.3.1, and 198 more

  • Cisco IOS XE SD-WAN Software Buffer Overflow Vulnerability

    Critical · CVSS 9.8
    CVE-2021-34727Published Sep 22, 2021cisco-sa-iosxesdwan-rbuffover-vE2OB6tp

    Affected: Cisco IOS XE Catalyst SD-WAN 16.11.1a, Cisco IOS XE Catalyst SD-WAN 16.11.1b, Cisco IOS XE Catalyst SD-WAN 16.11.1f, Cisco IOS XE Catalyst SD-WAN 16.12.1b, Cisco IOS XE Catalyst SD-WAN 16.12.1d, Cisco IOS XE Catalyst SD-WAN 16.12.1e, and 2 more

  • Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability

    Critical · CVSS 9.8
    CVE-2021-1619Published Sep 22, 2021cisco-sa-aaa-Yx47ZT8Q

    Affected: Cisco IOS XE Software 16.3.1, Cisco IOS XE Software 16.3.2, Cisco IOS XE Software 16.3.3, Cisco IOS XE Software 16.3.1a, Cisco IOS XE Software 16.3.4, Cisco IOS XE Software 16.3.5, and 137 more

  • Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability

    Critical · CVSS 10
    CVE-2021-34770Published Sep 22, 2021cisco-sa-ewlc-capwap-rce-LYgj8Kf

    Affected: Cisco IOS XE Software 16.10.1, Cisco IOS XE Software 16.10.1s, Cisco IOS XE Software 16.10.1e, Cisco IOS XE Software 16.11.1, Cisco IOS XE Software 16.11.1a, Cisco IOS XE Software 16.11.1b, and 18 more

  • Cisco IOS XE Software TLS Memory Exhaustion Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2026-20004Published Mar 25, 2026cisco-sa-iosxe-tls-dos-TVgLDEZL

    Affected: Cisco IOS XE Software 16.9.1, Cisco IOS XE Software 16.9.2, Cisco IOS XE Software 16.9.1a, Cisco IOS XE Software 16.9.1b, Cisco IOS XE Software 16.9.1s, Cisco IOS XE Software 16.9.1c, and 194 more

  • Cisco IOS XE Software for Cisco Catalyst and Rugged Series Switches Secure Boot Bypass Vulnerability

    High · CVSS 6.1
    CVE-2026-20104Published Mar 25, 2026cisco-sa-xe-secureboot-bypass-B6uYxYSZ

    Affected: Cisco IOS XE Software 16.12.8, Cisco IOS XE Software 16.12.6, Cisco IOS XE Software 16.12.6a, Cisco IOS XE Software 16.12.7, Cisco IOS XE Software 17.3.3, Cisco IOS XE Software 17.3.4, and 87 more

  • Cisco IOS XE Wireless Controller Software for the Catalyst CW9800 Family CAPWAP Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2026-20086Published Mar 25, 2026cisco-sa-wlc-dos-hnX5KGOm

    Affected: Cisco IOS XE Software 17.14.1, Cisco IOS XE Software 17.14.1a, Cisco IOS XE Software 17.15.1, Cisco IOS XE Software 17.15.1w, Cisco IOS XE Software 17.15.1a, Cisco IOS XE Software 17.15.2, and 24 more

  • Cisco IOS XE Software for Catalyst 9000 Series Switches DHCP Snooping Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2026-20084Published Mar 25, 2026cisco-sa-bootp-WuBhNBxA

    Affected: Cisco IOS XE Software 16.6.1, Cisco IOS XE Software 16.6.2, Cisco IOS XE Software 16.6.3, Cisco IOS XE Software 16.6.4, Cisco IOS XE Software 16.6.5, Cisco IOS XE Software 16.6.4s, and 209 more

  • Cisco IOS Software and IOS XE Software Release 3E HTTP Server Denial of Service Vulnerability

    High · CVSS 7.7
    CVE-2026-20125Published Mar 25, 2026cisco-sa-ios-http-dos-sbv8XRpL

    Affected: Cisco IOS 12.2(33)CY, Cisco IOS 12.2(33)CY1, Cisco IOS 12.2(33)CY2, Cisco IOS 12.2(55)SE, Cisco IOS 12.2(55)SE3, Cisco IOS 12.2(55)SE2, and 1243 more

  • Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2026-20012Published Mar 25, 2026cisco-sa-asa-ftd-ios-dos-kPEpQGGK

    Affected: Cisco IOS 15.2(1)S, Cisco IOS 15.2(2)S, Cisco IOS 15.2(1)S1, Cisco IOS 15.2(4)S, Cisco IOS 15.2(1)S2, Cisco IOS 15.2(2)S1, and 1422 more

  • Cisco IOS XE Software Secure Boot Bypass Vulnerabilities

    High · CVSS 6.7
    CVE-2025-20313, CVE-2025-20314Published Sep 24, 2025cisco-sa-secboot-UqFD8AvC

    Affected: Cisco IOS XE Software 17.3.1, Cisco IOS XE Software 17.3.2, Cisco IOS XE Software 17.3.3, Cisco IOS XE Software 17.3.1a, Cisco IOS XE Software 17.3.1w, Cisco IOS XE Software 17.3.2a, and 120 more

  • Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

    High · CVSS 7.7
    CVE-2025-20352Published Sep 24, 2025cisco-sa-snmp-x4LPhte

    Affected: Cisco IOS 12.2(55)SE, Cisco IOS 12.2(55)SE3, Cisco IOS 12.2(55)SE2, Cisco IOS 12.2(58)SE, Cisco IOS 12.2(55)SE1, Cisco IOS 12.2(58)SE1, and 1057 more

  • Cisco IOS and IOS XE Software TACACS+ Authentication Bypass Vulnerability

    High · CVSS 8.1
    CVE-2025-20160Published Sep 24, 2025cisco-sa-ios-tacacs-hdB7thJw

    Affected: Cisco IOS 15.2(6)E1, Cisco IOS 15.2(4)E6, Cisco IOS 15.2(6)E2, Cisco IOS 15.2(6)E1a, Cisco IOS 15.2(4)E7, Cisco IOS 15.2(6)E1s, and 422 more

  • Cisco IOS XE Software for Catalyst 9000 Series Switches Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2025-20311Published Sep 24, 2025cisco-sa-cat9k-PtmD7bgy

    Affected: Cisco IOS XE Software 16.6.1, Cisco IOS XE Software 16.6.2, Cisco IOS XE Software 16.6.3, Cisco IOS XE Software 16.6.4, Cisco IOS XE Software 16.6.5, Cisco IOS XE Software 16.6.4s, and 189 more

  • Cisco IOS XE Software HTTP API Command Injection Vulnerability

    High · CVSS 8.8
    CVE-2025-20334Published Sep 24, 2025cisco-sa-ios-xe-cmd-inject-rPJM8BGL

    Affected: Cisco IOS XE Software 17.9.5, Cisco IOS XE Software 17.9.5a, Cisco IOS XE Software 17.9.5b, Cisco IOS XE Software 17.9.6, Cisco IOS XE Software 17.9.5c, Cisco IOS XE Software 17.9.5d, and 34 more

  • Cisco IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability

    High · CVSS 7.7
    CVE-2025-20312Published Sep 24, 2025cisco-sa-snmpwred-x3MJyf5M

    Affected: Cisco IOS XE Software 17.2.1, Cisco IOS XE Software 17.2.1r, Cisco IOS XE Software 17.2.1a, Cisco IOS XE Software 17.2.1v, Cisco IOS XE Software 17.2.2, Cisco IOS XE Software 17.2.3, and 124 more

  • Cisco IOS XE Software Network-Based Application Recognition Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2025-20315Published Sep 24, 2025cisco-sa-nbar-dos-LAvwTmeT

    Affected: Cisco IOS XE Software 3.7.0S, Cisco IOS XE Software 3.7.1S, Cisco IOS XE Software 3.7.2S, Cisco IOS XE Software 3.7.3S, Cisco IOS XE Software 3.7.4S, Cisco IOS XE Software 3.7.5S, and 389 more

  • Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerabilities

    High · CVSS 8.6
    CVE-2025-20224, CVE-2025-20225, CVE-2025-20239, CVE-2025-20252 +2Published Aug 14, 2025cisco-sa-asa-ftd-ios-dos-DOESHWHy

    Affected: Cisco IOS 15.1(2)T, Cisco IOS 15.1(1)T4, Cisco IOS 15.1(3)T2, Cisco IOS 15.1(1)T1, Cisco IOS 15.1(2)T0a, Cisco IOS 15.1(3)T3, and 1485 more

  • Cisco IOS, IOS XE, and IOS XR Software TWAMP Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2025-20154Published May 7, 2025cisco-sa-twamp-kV4FHugn

    Affected: Cisco IOS XR Software , Cisco IOS 12.2(58)EX, Cisco IOS 12.2(58)EZ, Cisco IOS 12.2(60)EZ, Cisco IOS 12.2(60)EZ1, Cisco IOS 12.2(60)EZ2, and 1078 more

  • Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers ARP Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2025-20189Published May 7, 2025cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ

    Affected: Cisco IOS XE Software 3.16.0aS, Cisco IOS XE Software 3.16.1aS, Cisco IOS XE Software 3.16.2aS, Cisco IOS XE Software 3.16.3aS, Cisco IOS XE Software 3.16.4S, Cisco IOS XE Software 3.16.4bS, and 172 more

  • Cisco IOS XE Wireless Controller Software Cisco Discovery Protocol Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2025-20202Published May 7, 2025cisco-sa-ewlc-cdp-dos-fpeks9K

    Affected: Cisco IOS XE Software 16.10.1, Cisco IOS XE Software 16.10.1a, Cisco IOS XE Software 16.10.1b, Cisco IOS XE Software 16.10.1s, Cisco IOS XE Software 16.10.1c, Cisco IOS XE Software 16.10.1e, and 102 more

  • Cisco IOS XE Software Privilege Escalation Vulnerabilities

    High · CVSS 6.7
    CVE-2025-20197, CVE-2025-20198, CVE-2025-20199, CVE-2025-20200 +1Published May 7, 2025cisco-sa-iosxe-privesc-su7scvdp

    Affected: Cisco IOS XE Software 3.7.0S, Cisco IOS XE Software 3.7.1S, Cisco IOS XE Software 3.7.2S, Cisco IOS XE Software 3.7.3S, Cisco IOS XE Software 3.7.4S, Cisco IOS XE Software 3.7.5S, and 470 more

  • Multiple Cisco Products Switch Integrated Security Features DHCPv6 Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2025-20191Published May 7, 2025cisco-sa-sisf-dos-ZGwt4DdY

    Affected: Cisco IOS 15.2(6)E, Cisco IOS 15.2(6)E0a, Cisco IOS 15.2(6)E1, Cisco IOS 15.2(6)E0c, Cisco IOS 15.2(6)E2, Cisco IOS 15.2(6)E1a, and 322 more

  • Cisco IOS XE Software Web-Based Management Interface Command Injection Vulnerability

    High · CVSS 8.8
    CVE-2025-20186Published May 7, 2025cisco-sa-webui-cmdinj-gVn3OKNC

    Affected: Cisco IOS XE Software 16.12.8, Cisco IOS XE Software 16.12.4, Cisco IOS XE Software 16.12.4a, Cisco IOS XE Software 16.12.5, Cisco IOS XE Software 16.12.6, Cisco IOS XE Software 16.12.6a, and 73 more

  • Cisco IOS XE Software DHCP Snooping Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2025-20162Published May 7, 2025cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks

    Affected: Cisco IOS XE Software 16.11.1, Cisco IOS XE Software 16.11.1a, Cisco IOS XE Software 16.11.1b, Cisco IOS XE Software 16.11.2, Cisco IOS XE Software 16.11.1s, Cisco IOS XE Software 16.11.1c, and 150 more

  • Cisco IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability

    High · CVSS 7.7
    CVE-2025-20192Published May 7, 2025cisco-sa-iosxe-ikev1-dos-XHk3HzFC

    Affected: Cisco IOS XE Software 3.13.0S, Cisco IOS XE Software 3.13.1S, Cisco IOS XE Software 3.13.2S, Cisco IOS XE Software 3.13.3S, Cisco IOS XE Software 3.13.4S, Cisco IOS XE Software 3.13.5S, and 224 more

  • Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IKEv2 Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2025-20182Published May 7, 2025cisco-sa-multiprod-ikev2-dos-gPctUqv2

    Affected: Cisco IOS 12.4(24)T, Cisco IOS 12.4(24)T3, Cisco IOS 12.4(22)T1, Cisco IOS 12.4(24)T5, Cisco IOS 12.4(24)T4, Cisco IOS 12.4(22)T, and 1525 more

  • Cisco IOS XE Software for WLC Wireless IPv6 Clients Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2025-20140Published May 7, 2025cisco-sa-wlc-wncd-p6Gvt6HL

    Affected: Cisco IOS XE Software 16.4.1, Cisco IOS XE Software 16.4.2, Cisco IOS XE Software 16.4.3, Cisco IOS XE Software 16.5.1, Cisco IOS XE Software 16.5.1a, Cisco IOS XE Software 16.5.1b, and 211 more

  • Cisco IOS, IOS XE, and IOS XR Software SNMP Denial of Service Vulnerabilities

    High · CVSS 7.7
    CVE-2025-20169, CVE-2025-20170, CVE-2025-20171, CVE-2025-20172 +4Published Feb 5, 2025cisco-sa-snmp-dos-sdxnSUcW

    Affected: Cisco IOS XR Software , Cisco IOS 12.2(4)B, Cisco IOS 12.2(8)B, Cisco IOS 12.2(15)B, Cisco IOS 12.2(4)B7a, Cisco IOS 12.2(16)B1, and 3831 more

  • Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability

    High · CVSS 8.1
    CVE-2024-20437Published Sep 25, 2024cisco-sa-webui-csrf-ycUYxkKO

    Affected: Cisco IOS XE Software 17.3.2, Cisco IOS XE Software 17.3.3, Cisco IOS XE Software 17.3.2a, Cisco IOS XE Software 17.3.3a, Cisco IOS XE Software 17.3.4, Cisco IOS XE Software 17.3.5, and 64 more

  • Cisco Catalyst SD-WAN Routers Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2024-20455Published Sep 25, 2024cisco-sa-sdwan-utd-dos-hDATqxs

    Affected: Cisco IOS XE Catalyst SD-WAN , Cisco IOS XE Software 17.1.1, Cisco IOS XE Software 17.1.1a, Cisco IOS XE Software 17.1.1s, Cisco IOS XE Software 17.1.2, Cisco IOS XE Software 17.1.1t, and 91 more

  • Cisco IOS XE Software IPv4 Fragmentation Reassembly Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2024-20467Published Sep 25, 2024cisco-sa-cpp-vfr-dos-nhHKGgO

    Affected: Cisco IOS XE Software 17.12.1, Cisco IOS XE Software 17.12.1a, Cisco IOS XE Software 17.11.99SW

  • Cisco IOS XE Software HTTP Server Telephony Services Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2024-20436Published Sep 25, 2024cisco-sa-httpsrvr-dos-yOZThut

    Affected: Cisco IOS XE Software 3.9.1S, Cisco IOS XE Software 3.9.2S, Cisco IOS XE Software 3.9.0aS, Cisco IOS XE Software 3.10.0S, Cisco IOS XE Software 3.10.1S, Cisco IOS XE Software 3.10.2S, and 210 more

  • Cisco IOS XE Software SD-Access Fabric Edge Node Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2024-20480Published Sep 25, 2024cisco-sa-ios-xe-sda-edge-dos-MBcbG9k

    Affected: Cisco IOS XE Software 16.1.1, Cisco IOS XE Software 16.1.2, Cisco IOS XE Software 16.1.3, Cisco IOS XE Software 16.2.1, Cisco IOS XE Software 16.2.2, Cisco IOS XE Software 16.3.1, and 223 more

  • Cisco IOS XE Software Protocol Independent Multicast Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2024-20464Published Sep 25, 2024cisco-sa-pim-APbVfySJ

    Affected: Cisco IOS XE Software 17.13.1, Cisco IOS XE Software 17.13.1a

  • Cisco IOS and IOS XE Software Resource Reservation Protocol Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2024-20433Published Sep 25, 2024cisco-sa-rsvp-dos-OypvgVZf

    Affected: Cisco IOS 12.0(24)S, Cisco IOS 12.0(25)S, Cisco IOS 12.0(26)S, Cisco IOS 12.0(27)S, Cisco IOS 12.0(28)S, Cisco IOS 12.0(29)S, and 3197 more

  • Cisco IOS XE Software for Wireless LAN Controllers Multicast DNS Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2024-20303Published Mar 27, 2024cisco-sa-wlc-mdns-dos-4hv6pBGf

    Affected: Cisco IOS XE Software 17.2.1, Cisco IOS XE Software 17.2.1r, Cisco IOS XE Software 17.2.1a, Cisco IOS XE Software 17.2.1v, Cisco IOS XE Software 17.2.2, Cisco IOS XE Software 17.2.3, and 66 more

  • Cisco IOS XE Software DHCP Snooping with Endpoint Analytics Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2024-20259Published Mar 27, 2024cisco-sa-dhcp-dos-T3CXPO9z

    Affected: Cisco IOS XE Software 17.1.1, Cisco IOS XE Software 17.1.1a, Cisco IOS XE Software 17.1.1s, Cisco IOS XE Software 17.1.2, Cisco IOS XE Software 17.1.1t, Cisco IOS XE Software 17.1.3, and 77 more

  • Cisco IOS and IOS XE Software Locator ID Separation Protocol Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2024-20311Published Mar 27, 2024cisco-sa-lisp-3gYXs3qP

    Affected: Cisco IOS 15.1(1)XB, Cisco IOS 15.1(1)XB3, Cisco IOS 15.1(1)XB1, Cisco IOS 15.1(1)XB2, Cisco IOS 15.1(4)XB4, Cisco IOS 15.1(4)XB5, and 882 more

  • Cisco Access Point Software Secure Boot Bypass Vulnerability

    High · CVSS 5.9
    CVE-2024-20265Published Mar 27, 2024cisco-sa-ap-secureboot-bypass-zT5vJkSD

    Affected: Cisco IOS XE Software , Cisco Aironet Access Point Software , Cisco Business Wireless Access Point Software , Cisco Aironet Access Point Software (IOS XE Controller)

  • Cisco IOS XE Software SD-Access Fabric Edge Node Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2024-20314Published Mar 27, 2024cisco-sa-ios-xe-sda-edge-dos-qZWuWXWG

    Affected: Cisco IOS XE Software 16.1.1, Cisco IOS XE Software 16.1.2, Cisco IOS XE Software 16.1.3, Cisco IOS XE Software 16.2.1, Cisco IOS XE Software 16.2.2, Cisco IOS XE Software 16.3.1, and 200 more

  • Cisco IOS and IOS XE Software Intermediate System-to-Intermediate System Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2024-20312Published Mar 27, 2024cisco-sa-isis-sGjyOUHX

    Affected: Cisco IOS 15.2(1)S, Cisco IOS 15.2(2)S, Cisco IOS 15.2(1)S1, Cisco IOS 15.2(4)S, Cisco IOS 15.2(1)S2, Cisco IOS 15.2(2)S1, and 970 more

  • Cisco Access Point Software Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2024-20271Published Mar 27, 2024cisco-sa-ap-dos-h9TGGX6W

    Affected: Cisco Aironet Access Point Software , Cisco Business Wireless Access Point Software , Cisco Aironet Access Point Software (IOS XE Controller)

  • Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Fragmentation Denial of Service Vulnerabilities

    High · CVSS 8.6
    CVE-2024-20307, CVE-2024-20308Published Mar 27, 2024cisco-sa-ikev1-NO2ccFWz

    Affected: Cisco IOS 12.4(24)T, Cisco IOS 12.4(24)T3, Cisco IOS 12.4(22)T1, Cisco IOS 12.4(24)T5, Cisco IOS 12.4(24)T4, Cisco IOS 12.4(22)T, and 1264 more

  • Cisco IOS XE Software OSPFv2 Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2024-20313Published Mar 27, 2024cisco-sa-iosxe-ospf-dos-dR9Sfrxp

    Affected: Cisco IOS XE Software 17.5.1, Cisco IOS XE Software 17.5.1a, Cisco IOS XE Software 17.5.1b, Cisco IOS XE Software 17.5.1c, Cisco IOS XE Software 17.6.1, Cisco IOS XE Software 17.6.2, and 34 more

  • Cisco IOS and IOS XE Software Command Authorization Bypass Vulnerability

    High · CVSS 8
    CVE-2023-20186Published Sep 27, 2023cisco-sa-aaascp-Tyj4fEJm

    Affected: Cisco IOS 12.2(58)SE, Cisco IOS 12.2(58)SE1, Cisco IOS 12.2(58)SE2, Cisco IOS 12.2(58)EX, Cisco IOS 12.2(58)EY, Cisco IOS 12.2(58)EY1, and 1189 more

  • Cisco IOS XE Software Web UI Command Injection Vulnerability

    High · CVSS 8.8
    CVE-2023-20231Published Sep 27, 2023cisco-sa-webui-cmdij-FzZAeXAy

    Affected: Cisco IOS XE Software 16.12.8, Cisco IOS XE Software 16.12.4, Cisco IOS XE Software 16.12.4a, Cisco IOS XE Software 16.12.5, Cisco IOS XE Software 16.12.6, Cisco IOS XE Software 16.12.5a, and 64 more

  • Cisco IOS XE Software for Catalyst 3650 and Catalyst 3850 Series Switches Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2023-20033Published Sep 27, 2023cisco-sa-cat3k-dos-ZZA4Gb3r

    Affected: Cisco IOS XE Software 16.3.1, Cisco IOS XE Software 16.3.2, Cisco IOS XE Software 16.3.3, Cisco IOS XE Software 16.3.1a, Cisco IOS XE Software 16.3.4, Cisco IOS XE Software 16.3.5, and 145 more

  • Cisco IOS XE Software Application Quality of Experience and Unified Threat Defense Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2023-20226Published Sep 27, 2023cisco-sa-appqoe-utd-dos-p8O57p5y

    Affected: Cisco IOS XE Software 17.7.1, Cisco IOS XE Software 17.7.1a, Cisco IOS XE Software 17.7.2, Cisco IOS XE Software 17.10.1, Cisco IOS XE Software 17.10.1a, Cisco IOS XE Software 17.10.1b, and 11 more

  • Cisco IOS XE Software Layer 2 Tunneling Protocol Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2023-20227Published Sep 27, 2023cisco-sa-ios-xe-l2tp-dos-eB5tuFmV

    Affected: Cisco IOS XE Software 16.8.1, Cisco IOS XE Software 16.8.1a, Cisco IOS XE Software 16.8.1b, Cisco IOS XE Software 16.8.1s, Cisco IOS XE Software 16.8.1c, Cisco IOS XE Software 16.8.1d, and 105 more

  • Cisco IOS XE Software for ASR 1000 Series Aggregation Services Routers IPv6 Multicast Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2023-20187Published Sep 27, 2023cisco-sa-mlre-H93FswRz

    Affected: Cisco IOS XE Software 3.7.1S, Cisco IOS XE Software 3.7.2S, Cisco IOS XE Software 3.7.3S, Cisco IOS XE Software 3.7.4S, Cisco IOS XE Software 3.7.5S, Cisco IOS XE Software 3.7.6S, and 219 more

  • Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

    High · CVSS 6.1
    CVE-2023-20082Published Mar 22, 2023cisco-sa-c9300-spi-ace-yejYgnNQ

    Affected: Cisco IOS XE ROMMON Software

  • Cisco IOS XE Software IOx Application Hosting Environment Privilege Escalation Vulnerability

    High · CVSS 7.8
    CVE-2023-20065Published Mar 22, 2023cisco-sa-iox-priv-escalate-Xg8zkyPk

    Affected: Cisco IOS XE Software 16.4.1, Cisco IOS XE Software 16.4.2, Cisco IOS XE Software 16.4.3, Cisco IOS XE Software 17.3.1, Cisco IOS XE Software 17.3.2, Cisco IOS XE Software 17.3.3, and 47 more

  • Cisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2023-20027Published Mar 22, 2023cisco-sa-ipv4-vfr-dos-CXxtFacb

    Affected: Cisco IOS XE Software 3.9.1S, Cisco IOS XE Software 3.9.2S, Cisco IOS XE Software 3.9.0aS, Cisco IOS XE Software 3.10.0S, Cisco IOS XE Software 3.10.1S, Cisco IOS XE Software 3.10.2S, and 195 more

  • Cisco IOS XE SD-WAN Software Command Injection Vulnerability

    High · CVSS 7.8
    CVE-2023-20035Published Mar 22, 2023cisco-sa-ios-xe-sdwan-VQAhEjYw

    Affected: Cisco IOS XE Software 16.12.8, Cisco IOS XE Software 16.12.4, Cisco IOS XE Software 16.12.4a, Cisco IOS XE Software 16.12.5, Cisco IOS XE Software 16.12.6, Cisco IOS XE Software 16.12.5a, and 75 more

  • Cisco Access Point Software Association Request Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2023-20112Published Mar 22, 2023cisco-sa-ap-assoc-dos-D2SunWK2

    Affected: Cisco Aironet Access Point Software , Cisco Business Wireless Access Point Software , Cisco Aironet Access Point Software (IOS XE Controller)

  • Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2023-20067Published Mar 22, 2023cisco-sa-ewlc-dos-wFujBHKw

    Affected: Cisco IOS XE Software 16.10.1, Cisco IOS XE Software 16.10.1s, Cisco IOS XE Software 16.10.1e, Cisco IOS XE Software 16.11.1, Cisco IOS XE Software 16.11.1a, Cisco IOS XE Software 16.11.1b, and 43 more

  • Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2023-20080Published Mar 22, 2023cisco-sa-ios-dhcpv6-dos-44cMvdDK

    Affected: Cisco IOS 15.2(1)S, Cisco IOS 15.2(2)S, Cisco IOS 15.2(1)S1, Cisco IOS 15.2(4)S, Cisco IOS 15.2(1)S2, Cisco IOS 15.2(2)S1, and 855 more

  • Cisco IOS XE Software Fragmented Tunnel Protocol Packet Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2023-20072Published Mar 22, 2023cisco-sa-ios-gre-crash-p6nE5Sq5

    Affected: Cisco IOS XE Software 17.9.1, Cisco IOS XE Software 17.9.1w, Cisco IOS XE Software 17.9.1a, Cisco IOS XE Software 17.11.99SW

  • Cisco IOx Application Hosting Environment Command Injection Vulnerability

    High · CVSS 7.2
    CVE-2023-20076Published Feb 1, 2023cisco-sa-iox-8whGn5dL

    Affected: Cisco IOS , Cisco IOS XE Software , Cisco IC3000 Industrial Compute Gateway , Cisco IR510 Operating System , Cisco CGR1000 Compute Module , Cisco IOS 15.6(1)T, and 175 more

  • Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2022-20848Published Sep 28, 2022cisco-sa-wlc-udp-dos-XDyEwhNz

    Affected: Cisco IOS XE Software 17.6.1, Cisco IOS XE Software 17.6.2, Cisco IOS XE Software 17.6.1w, Cisco IOS XE Software 17.6.1a, Cisco IOS XE Software 17.6.1x, Cisco IOS XE Software 17.6.3, and 8 more

  • Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2022-20837Published Sep 28, 2022cisco-sa-alg-dos-KU9Z8kFX

    Affected: Cisco IOS XE Software 16.12.3, Cisco IOS XE Software 16.12.4, Cisco IOS XE Software 16.12.3s, Cisco IOS XE Software 16.12.3a, Cisco IOS XE Software 16.12.4a, Cisco IOS XE Software 16.12.5, and 55 more

  • Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2022-20856Published Sep 28, 2022cisco-sa-c9800-mob-dos-342YAc6J

    Affected: Cisco IOS XE Software 16.10.1, Cisco IOS XE Software 16.10.1s, Cisco IOS XE Software 16.10.1e, Cisco IOS XE Software 16.11.1, Cisco IOS XE Software 16.11.1a, Cisco IOS XE Software 16.11.1b, and 42 more

  • Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2022-20945Published Sep 28, 2022cisco-sa-ap-assoc-dos-EgVqtON8

    Affected: Cisco Aironet Access Point Software (IOS XE Controller)

  • Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability

    High · CVSS 7.9
    CVE-2022-20855Published Sep 28, 2022cisco-sa-ewc-priv-esc-nderYLtK

    Affected: Cisco IOS XE Software 16.11.1, Cisco IOS XE Software 16.11.1a, Cisco IOS XE Software 16.11.1b, Cisco IOS XE Software 16.11.2, Cisco IOS XE Software 16.11.1s, Cisco IOS XE Software 16.11.1c, and 69 more

  • Cisco IOS XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution Vulnerability

    High · CVSS 6.1
    CVE-2022-20944Published Sep 28, 2022cisco-sa-ios-xe-cat-verify-D4NEQA6q

    Affected: Cisco IOS XE Software 16.6.1, Cisco IOS XE Software 16.6.2, Cisco IOS XE Software 16.6.3, Cisco IOS XE Software 16.6.4, Cisco IOS XE Software 16.6.5, Cisco IOS XE Software 16.6.4s, and 102 more

  • Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2022-20915Published Sep 28, 2022cisco-sa-iosxe-6vpe-dos-tJBtf5Zv

    Affected: Cisco IOS XE Software 3.16.0S, Cisco IOS XE Software 3.16.1aS, Cisco IOS XE Software 3.16.2S, Cisco IOS XE Software 3.16.0cS, Cisco IOS XE Software 3.16.3S, Cisco IOS XE Software 3.16.2bS, and 155 more

  • Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2022-20919Published Sep 28, 2022cisco-sa-iosxe-cip-dos-9rTbKLt9

    Affected: Cisco IOS 15.2(6)E, Cisco IOS 15.2(6)E0a, Cisco IOS 15.2(6)E1, Cisco IOS 15.2(6)E0c, Cisco IOS 15.2(6)E2, Cisco IOS 15.2(6)E1a, and 172 more

  • Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2022-20870Published Sep 28, 2022cisco-sa-iosxe-mpls-dos-Ab4OUL3

    Affected: Cisco IOS XE Software 16.2.1, Cisco IOS XE Software 16.2.2, Cisco IOS XE Software 16.3.1, Cisco IOS XE Software 16.3.2, Cisco IOS XE Software 16.3.3, Cisco IOS XE Software 16.3.1a, and 87 more

  • Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability

    High · CVSS 7.7
    CVE-2022-20920Published Sep 28, 2022cisco-sa-ssh-excpt-dos-FzOBQTnk

    Affected: Cisco IOS 12.2(58)SE, Cisco IOS 12.2(58)SE1, Cisco IOS 12.2(58)SE2, Cisco IOS 12.2(58)EX, Cisco IOS 12.2(58)EY, Cisco IOS 12.2(58)EY1, and 1433 more

  • Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2022-20847Published Sep 28, 2022cisco-sa-wlc-dhcp-dos-76pCjPxK

    Affected: Cisco IOS XE Software 16.10.1, Cisco IOS XE Software 16.10.1a, Cisco IOS XE Software 16.10.1b, Cisco IOS XE Software 16.10.1s, Cisco IOS XE Software 16.10.1c, Cisco IOS XE Software 16.10.1e, and 78 more

  • Vulnerability in NVIDIA Data Plane Development Kit Affecting Cisco Products: August 2022

    High · CVSS 8.6
    CVE-2022-28199Published Sep 7, 2022cisco-sa-mlx5-jbPCrqD8

    Affected: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software , Cisco Secure Firewall Threat Defense (FTD) Software , Cisco IOS XE Catalyst SD-WAN , Cisco IOS XE Software 17.6.1, Cisco IOS XE Software 17.6.2, Cisco IOS XE Software 17.6.1a, and 7 more

  • Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Catalyst 9000 Family Wireless Controllers Privilege Escalation Vulnerability

    High · CVSS 7.8
    CVE-2022-20681Published Apr 13, 2022cisco-sa-ewlc-priv-esc-ybvHKO5

    Affected: Cisco IOS XE Software 16.6.3, Cisco IOS XE Software 16.6.4, Cisco IOS XE Software 16.6.5, Cisco IOS XE Software 16.6.4s, Cisco IOS XE Software 16.6.4a, Cisco IOS XE Software 16.6.6, and 99 more

  • Cisco IOS XE Software NETCONF Over SSH Denial of Service Vulnerability

    High · CVSS 7.7
    CVE-2022-20692Published Apr 13, 2022cisco-sa-ncossh-dos-ZAkfOdq8

    Affected: Cisco IOS XE Software 16.3.1, Cisco IOS XE Software 16.3.2, Cisco IOS XE Software 16.3.3, Cisco IOS XE Software 16.3.1a, Cisco IOS XE Software 16.3.4, Cisco IOS XE Software 16.3.5, and 120 more

  • Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2022-20683Published Apr 13, 2022cisco-sa-c9800-fnf-dos-bOL5vLge

    Affected: Cisco IOS XE Software 16.7.2, Cisco IOS XE Software 16.7.3, Cisco IOS XE Software 16.7.4, Cisco IOS XE Software 16.8.1, Cisco IOS XE Software 16.8.1a, Cisco IOS XE Software 16.8.1b, and 96 more

  • Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2022-20682Published Apr 13, 2022cisco-sa-c9800-capwap-mdns-6PSn7gKU

    Affected: Cisco IOS XE Software 16.11.1, Cisco IOS XE Software 16.11.1a, Cisco IOS XE Software 16.11.1b, Cisco IOS XE Software 16.11.2, Cisco IOS XE Software 16.11.1s, Cisco IOS XE Software 16.11.1c, and 55 more

  • Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2022-20684Published Apr 13, 2022cisco-sa-c9800-snmp-trap-dos-mjent3Ey

    Affected: Cisco IOS XE Software 16.10.1, Cisco IOS XE Software 16.10.1s, Cisco IOS XE Software 16.10.1e, Cisco IOS XE Software 16.11.1, Cisco IOS XE Software 16.11.1a, Cisco IOS XE Software 16.11.1b, and 11 more

  • Cisco Embedded Wireless Controller with Catalyst Access Points IP Flood Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2022-20622Published Apr 13, 2022cisco-sa-ap-ip-flood-dos-6hxxENVQ

    Affected: Cisco Aironet Access Point Software , Cisco Aironet Access Point Software (IOS XE Controller)

  • Cisco IOS XE Software AppNav-XE Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2022-20678Published Apr 13, 2022cisco-sa-appnav-xe-dos-j5MXTR4

    Affected: Cisco IOS XE Software 3.8.0S, Cisco IOS XE Software 3.8.1S, Cisco IOS XE Software 3.8.2S, Cisco IOS XE Software 3.9.1S, Cisco IOS XE Software 3.9.0S, Cisco IOS XE Software 3.9.2S, and 262 more

  • Cisco IOS and IOS XE Software Web Services Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2022-20697Published Apr 13, 2022cisco-sa-http-dos-svOdkdBS

    Affected: Cisco IOS 15.2(7)E3, Cisco IOS 15.2(7)E4, Cisco IOS 15.2(7)E3k, Cisco IOS 15.2(8)E, Cisco IOS 15.9(3)M2, Cisco IOS 15.9(3)M3, and 32 more

  • Multiple Cisco Products Snort Modbus Denial of Service Vulnerability

    High · CVSS 7.5
    CVE-2022-20685Published Jan 19, 2022cisco-sa-snort-dos-9D3hJLuj

    Affected: Cisco IOS XE Software , Cisco Meraki MX Firmware , Cisco Cyber Vision , Cisco UTD SNORT IPS Engine Software , Cisco Secure Firewall Threat Defense (FTD) Software 6.2.3, Cisco Secure Firewall Threat Defense (FTD) Software 6.2.3.1, and 38 more

  • Multiple Cisco Products CLI Command Injection Vulnerability

    High · CVSS 8.8
    CVE-2022-20655Published Jan 19, 2022cisco-sa-cli-cmdinj-4MttWZPB

    Affected: Cisco IOS XR Software , Cisco Virtual Topology System (VTS) , Cisco Network Services Orchestrator , Cisco Enterprise NFV Infrastructure Software , Cisco Catalyst SD-WAN , Cisco Catalyst SD-WAN Manager , and 12 more

  • Cisco IOS XE SD-WAN Software Command Injection Vulnerability

    High · CVSS 7.8
    CVE-2021-1529Published Oct 20, 2021cisco-sa-sd-wan-rhpbE34A

    Affected: Cisco IOS XE Software 17.2.1r, Cisco IOS XE Software 17.2.1v, Cisco IOS XE Software 17.2.2, Cisco IOS XE Software 17.3.1, Cisco IOS XE Software 17.3.2, Cisco IOS XE Software 17.3.3, and 34 more

  • Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2021-34767Published Sep 22, 2021cisco-sa-ewlc-ipv6-dos-NMYeCnZv

    Affected: Cisco IOS XE Software 16.7.1, Cisco IOS XE Software 16.7.1a, Cisco IOS XE Software 16.7.1b, Cisco IOS XE Software 16.7.2, Cisco IOS XE Software 16.7.3, Cisco IOS XE Software 16.7.4, and 85 more

  • Cisco IOS XE Software Rate Limiting Network Address Translation Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2021-1624Published Sep 22, 2021cisco-sa-ratenat-pYVLA7wM

    Affected: Cisco IOS XE Software 3.7.0S, Cisco IOS XE Software 3.7.1S, Cisco IOS XE Software 3.7.2S, Cisco IOS XE Software 3.7.3S, Cisco IOS XE Software 3.7.4S, Cisco IOS XE Software 3.7.5S, and 277 more

  • Cisco IOS XE Software Interface Queue Wedge Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2021-1621Published Sep 22, 2021cisco-sa-quewedge-69BsHUBW

    Affected: Cisco IOS XE Software 16.2.1, Cisco IOS XE Software 16.2.2, Cisco IOS XE Software 16.3.1, Cisco IOS XE Software 16.3.2, Cisco IOS XE Software 16.3.3, Cisco IOS XE Software 16.3.1a, and 105 more

  • Cisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service Vulnerability

    High · CVSS 7.4
    CVE-2021-34740Published Sep 22, 2021cisco-sa-airo-wpa-pktleak-dos-uSTyGrL

    Affected: Cisco Aironet Access Point Software , Cisco Aironet Access Point Software (IOS XE Controller)

  • Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Common Open Policy Service Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2021-1622Published Sep 22, 2021cisco-sa-cbr8-cops-Vc2ZsJSx

    Affected: Cisco IOS XE Software 3.15.0S, Cisco IOS XE Software 3.15.1S, Cisco IOS XE Software 3.15.2S, Cisco IOS XE Software 3.15.3S, Cisco IOS XE Software 3.16.0S, Cisco IOS XE Software 3.16.1S, and 46 more

  • Cisco Access Points SSH Management Privilege Escalation Vulnerability

    High · CVSS 7.8
    CVE-2021-1419Published Sep 22, 2021cisco-sa-cisco-ap-LLjsGxv

    Affected: Cisco Aironet Access Point Software (IOS XE Controller) , Cisco Wireless LAN Controller (WLC) 8.6.101.0, Cisco Wireless LAN Controller (WLC) 8.7.102.0, Cisco Wireless LAN Controller (WLC) 8.7.106.0, Cisco Wireless LAN Controller (WLC) 8.8.100.0, Cisco Wireless LAN Controller (WLC) 8.8.111.0, and 15 more

  • Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Simple Network Management Protocol Denial of Service Vulnerability

    High · CVSS 7.7
    CVE-2021-1623Published Sep 22, 2021cisco-sa-cbr8snmp-zGjkZ9Fc

    Affected: Cisco IOS XE Software 3.15.0S, Cisco IOS XE Software 3.15.1S, Cisco IOS XE Software 3.15.2S, Cisco IOS XE Software 3.15.3S, Cisco IOS XE Software 3.16.0S, Cisco IOS XE Software 3.16.1S, and 56 more

  • Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities

    High · CVSS 8.6
    CVE-2021-1565, CVE-2021-34768, CVE-2021-34769Published Sep 22, 2021cisco-sa-ewlc-capwap-dos-gmNjdKOY

    Affected: Cisco IOS XE Software 16.10.1, Cisco IOS XE Software 16.10.1s, Cisco IOS XE Software 16.10.1e, Cisco IOS XE Software 16.11.1, Cisco IOS XE Software 16.11.1a, Cisco IOS XE Software 16.11.1b, and 21 more

  • Cisco Embedded Wireless Controller Software for Catalyst Access Points Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2021-1615Published Sep 22, 2021cisco-sa-iosxe-ewc-dos-g6JruHRT

    Affected: Cisco IOS XE Software 16.11.1, Cisco IOS XE Software 16.11.1a, Cisco IOS XE Software 16.11.1b, Cisco IOS XE Software 16.11.2, Cisco IOS XE Software 16.11.1s, Cisco IOS XE Software 16.11.1c, and 53 more

  • Cisco IOS and IOS XE Software IKEv2 AutoReconnect Feature Denial of Service Vulnerability

    High · CVSS 7.7
    CVE-2021-1620Published Sep 22, 2021cisco-sa-ikev2-ebFrwMPr

    Affected: Cisco IOS , Cisco IOS XE Software , Cisco IOS 15.4(1)T, Cisco IOS 15.4(2)T, Cisco IOS 15.4(1)T2, Cisco IOS 15.4(1)T1, and 666 more

  • Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass Vulnerability

    High · CVSS 5.3
    CVE-2021-34705Published Sep 22, 2021cisco-sa-fxo-pattern-bypass-jUXgygYv

    Affected: Cisco IOS 12.3(9a), Cisco IOS 12.3(15), Cisco IOS 12.3(19), Cisco IOS 12.3(10f), Cisco IOS 12.3(10a), Cisco IOS 12.3(10), and 1657 more

  • Cisco IOS and IOS XE Software TrustSec CLI Parser Denial of Service Vulnerability

    High · CVSS 7.7
    CVE-2021-34699Published Sep 22, 2021cisco-sa-trustsec-dos-7fuXDR2

    Affected: Cisco IOS 15.3(1)T, Cisco IOS 15.3(2)T, Cisco IOS 15.3(1)T1, Cisco IOS 15.3(1)T2, Cisco IOS 15.3(1)T3, Cisco IOS 15.3(1)T4, and 811 more

  • Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers EoGRE Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2021-1611Published Sep 22, 2021cisco-sa-ewlc-gre-6u4ELzAT

    Affected: Cisco IOS XE Software 3.18.2aSP, Cisco IOS XE Software 16.10.1, Cisco IOS XE Software 16.10.1s, Cisco IOS XE Software 16.10.1e, Cisco IOS XE Software 16.11.1, Cisco IOS XE Software 16.11.1a, and 24 more

  • Cisco IOS XE Software Denial of Service Vulnerability

    Medium · CVSS 6.5
    CVE-2026-20110Published Mar 25, 2026cisco-sa-iosxe-mntc-dos-LZweQcyq

    Affected: Cisco IOS XE Software 16.6.1, Cisco IOS XE Software 16.6.2, Cisco IOS XE Software 16.6.3, Cisco IOS XE Software 16.6.4, Cisco IOS XE Software 16.6.5, Cisco IOS XE Software 16.6.4s, and 250 more

  • Cisco IOS XE Software Lobby Ambassador Privilege Escalation Vulnerability

    Medium · CVSS 5.4
    CVE-2026-20114Published Mar 25, 2026cisco-sa-iosxe-lobby-privesc-KwxBqJy

    Affected: Cisco IOS XE Software 16.11.1, Cisco IOS XE Software 16.11.1a, Cisco IOS XE Software 16.11.1b, Cisco IOS XE Software 16.11.2, Cisco IOS XE Software 16.11.1s, Cisco IOS XE Software 16.11.1c, and 182 more

  • Cisco IOS XE Software Secure Copy Protocol Server Denial of Service Vulnerability

    Medium · CVSS 6.5
    CVE-2026-20083Published Mar 25, 2026cisco-sa-scp-dos-duAdXtCg

    Affected: Cisco IOS XE Software 3.5.0E, Cisco IOS XE Software 3.5.1E, Cisco IOS XE Software 3.5.2E, Cisco IOS XE Software 3.5.3E, Cisco IOS XE Software 3.10.0S, Cisco IOS XE Software 3.10.1S, and 360 more

  • Cisco IOS XE Software Secure Channel for Meraki Information Disclosure Vulnerability

    Medium · CVSS 6.1
    CVE-2026-20115Published Mar 25, 2026cisco-sa-iosxe_infodis-6J847uEB

    Affected: Cisco IOS XE Software 17.14.1, Cisco IOS XE Software 17.14.1a, Cisco IOS XE Software 17.15.1, Cisco IOS XE Software 17.15.1w, Cisco IOS XE Software 17.15.1a, Cisco IOS XE Software 17.15.2, and 21 more

  • Cisco IOx Application Hosting Environment Carriage Return Line Feed Injection Vulnerability

    Medium · CVSS 5.3
    CVE-2026-20113Published Mar 25, 2026cisco-sa-iox-crlf-NvgKTKJZ

    Affected: Cisco IOS XE Software 16.6.1, Cisco IOS XE Software 16.6.2, Cisco IOS XE Software 16.6.3, Cisco IOS XE Software 16.6.4, Cisco IOS XE Software 16.6.5, Cisco IOS XE Software 16.6.4s, and 252 more

  • Cisco IOx Application Hosting Environment Stored Cross-Site Scripting Vulnerability

    Medium · CVSS 4.8
    CVE-2026-20112Published Mar 25, 2026cisco-sa-iox-xss-LpGkzwtJ

    Affected: Cisco IOS XE Software 16.6.1, Cisco IOS XE Software 16.6.2, Cisco IOS XE Software 16.6.3, Cisco IOS XE Software 16.6.4, Cisco IOS XE Software 16.6.5, Cisco IOS XE Software 16.6.4s, and 246 more

Free exposure report

Find out which Cisco vulnerabilities affect your Cisco IOS XE

Send your device list, PIDs, or serials and an authorized Cisco partner will map them to current PSIRT advisories, flag what is end-of-life, and return the patch or refresh path — GPC-payable, with TAA-compliant options. No cost, no obligation.

  • Affected CVEs & severity
  • Fixed release or replacement
  • End-of-life check
  • GPC-payable quote
Check end-of-life

Frequently asked questions

What are the latest Cisco IOS XE security advisories?

This page lists recent Cisco security advisories affecting Cisco IOS XE, from the Cisco PSIRT openVuln feed, with severity, CVSS, and CVEs. Confirm the affected software versions against what you run.

How do I fix a Cisco IOS XE vulnerability?

Most Cisco vulnerabilities are fixed by upgrading to a patched software release or applying the documented mitigation. If the platform is end-of-life, the remedy is a refresh. Uniqcli, an authorized Cisco partner, scopes the patch or replacement and can quote it TAA-compliant and GPC-payable.

Is Cisco IOS XE still supported?

Security fixes are only available while a product is supported. Check our Cisco end-of-life lookup to confirm the Last Date of Support, then patch (if supported) or plan a refresh with Uniqcli.

Data from the Cisco PSIRT openVuln API, shown for reference; Cisco’s official advisories are authoritative. Cisco and PSIRT are trademarks of Cisco Systems, Inc.; Uniqcli LLC is an independent authorized Cisco partner.