Ios Xe (Cisco) - vulnerabilities (CVEs)

560 CVEs, 0 in the last 30 days, 1160 known versions, newest CVE from 2026-08-05. Vendor: Cisco.

CVEs of Ios Xe

CVE-2026-20301 - CVSS 8.6 (high), 2026-08-05: A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE…
CVE-2026-20273 - CVSS 8.6 (high), 2026-08-05: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive…
CVE-2026-20272 - CVSS 9.8 (critical), 2026-08-05: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive…
CVE-2026-20271 - CVSS 8.6 (high), 2026-08-05: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive…
CVE-2026-20270 - CVSS 8.6 (high), 2026-08-05: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive…
CVE-2026-20269 - CVSS 8.6 (high), 2026-08-05: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive…
CVE-2026-20268 - CVSS 8.6 (high), 2026-08-05: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive…
CVE-2026-20267 - CVSS 9 (critical), 2026-08-05: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive…
CVE-2026-20263 - CVSS 8.6 (high), 2026-08-05: A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a…
CVE-2026-20124 - CVSS 7.7 (high), 2026-08-05: A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an…
CVE-2026-20104 - CVSS 6.1 (medium), 2026-03-25: A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco…
CVE-2026-20084 - CVSS 8.6 (high), 2026-03-25: A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded…
CVE-2026-20004 - CVSS 7.4 (high), 2026-03-25: A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected…
CVE-2026-20012 - CVSS 8.6 (high), 2026-03-25: A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security…
CVE-2025-20363 - CVSS 9 (critical), 2025-09-25: A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software,…
CVE-2025-20338 - CVSS 6.7 (medium), 2025-09-24: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands…
CVE-2025-20315 - CVSS 8.6 (high), 2025-09-24: A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause…
CVE-2025-20352 - CVSS 7.7 (high), 2025-09-24: A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An…
CVE-2025-20313 - CVSS 6.7 (medium), 2025-09-24: Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with…
CVE-2025-20312 - CVSS 7.7 (high), 2025-09-24: A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a…
CVE-2025-20311 - CVSS 7.4 (high), 2025-09-24: A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent…
CVE-2025-20160 - CVSS 8.1 (high), 2025-09-24: A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker…
CVE-2025-20149 - CVSS 6.5 (medium), 2025-09-24: A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload…
CVE-2025-20202 - CVSS 7.4 (high), 2025-05-07: A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on…
CVE-2025-20221 - CVSS 9.1 (critical), 2025-05-07: A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4…
CVE-2025-20214 - CVSS 4.3 (medium), 2025-05-07: A vulnerability in the Network Configuration Access Control Module (NACM) of Cisco IOS XE Software could allow an authenticated, remote attacker to obtain…
CVE-2025-20198 - CVSS 8.2 (high), 2025-05-07: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the…
CVE-2025-20201 - CVSS 6.7 (medium), 2025-05-07: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the…
CVE-2025-20197 - CVSS 8.2 (high), 2025-05-07: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the…
CVE-2025-20200 - CVSS 8.2 (high), 2025-05-07: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the…
CVE-2025-20199 - CVSS 8.2 (high), 2025-05-07: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the…
CVE-2025-20192 - CVSS 7.7 (high), 2025-05-07: A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause…
CVE-2025-20195 - CVSS 4.3 (medium), 2025-05-07: A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and…
CVE-2025-20194 - CVSS 5.4 (medium), 2025-05-07: A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an…
CVE-2025-20193 - CVSS 6.5 (medium), 2025-05-07: A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an…
CVE-2025-20196 - CVSS 5.3 (medium), 2025-05-07: A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote…
CVE-2025-20188 - CVSS 10 (critical), 2025-05-07: A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE…
CVE-2025-20186 - CVSS 8.8 (high), 2025-05-07: A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authenticated, remote…
CVE-2025-20190 - CVSS 6.5 (medium), 2025-05-07: A vulnerability in the lobby ambassador web interface of Cisco IOS XE Wireless Controller Software could allow an authenticated, remote attacker to remove…
CVE-2025-20189 - CVSS 7.4 (high), 2025-05-07: A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch…
CVE-2025-20155 - CVSS 6 (medium), 2025-05-07: A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to an affected system.…
CVE-2025-20154 - CVSS 8.6 (high), 2025-05-07: A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an…
CVE-2025-20162 - CVSS 8.6 (high), 2025-05-07: A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue…
CVE-2025-20140 - CVSS 7.4 (high), 2025-05-07: A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated,…
CVE-2025-20172 - CVSS 7.7 (high), 2025-02-05: A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to…
CVE-2025-20175 - CVSS 7.7 (high), 2025-02-05: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition…
CVE-2025-20174 - CVSS 7.7 (high), 2025-02-05: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition…
CVE-2025-20173 - CVSS 7.7 (high), 2025-02-05: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition…
CVE-2025-20176 - CVSS 7.7 (high), 2025-02-05: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition…
CVE-2025-20171 - CVSS 7.7 (high), 2025-02-05: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition…
CVE-2025-20170 - CVSS 7.7 (high), 2025-02-05: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition…
CVE-2025-20169 - CVSS 7.7 (high), 2025-02-05: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition…
CVE-2024-20510 - CVSS 9.3 (critical), 2024-09-25: A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent…
CVE-2024-20467 - CVSS 8.6 (high), 2024-09-25: A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, remote attacker to…
CVE-2024-20464 - CVSS 8.6 (high), 2024-09-25: A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial…
CVE-2024-20480 - CVSS 8.6 (high), 2024-09-25: A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow an unauthenticated,…
CVE-2024-20437 - CVSS 8.8 (high), 2024-09-25: A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a cross-site request…
CVE-2024-20436 - CVSS 8.6 (high), 2024-09-25: A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote…
CVE-2024-20434 - CVSS 4.3 (medium), 2024-09-25: A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the control plane…
CVE-2024-20455 - CVSS 8.6 (high), 2024-09-25: A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode…
CVE-2024-20414 - CVSS 6.5 (medium), 2024-09-25: A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site…
CVE-2024-20433 - CVSS 8.6 (high), 2024-09-25: A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote…
CVE-2024-20313 - CVSS 7.4 (high), 2024-04-24: A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device…
CVE-2024-20307 - CVSS 7.5 (high), 2024-03-27: A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a…
CVE-2024-20308 - CVSS 8.6 (high), 2024-03-27: A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a…
CVE-2024-20316 - CVSS 5.8 (medium), 2024-03-27: A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that…
CVE-2024-20354 - CVSS 7.4 (high), 2024-03-27: A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to…
CVE-2024-20324 - CVSS 5.5 (medium), 2024-03-27: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details…
CVE-2024-20311 - CVSS 8.6 (high), 2024-03-27: A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote…
CVE-2024-20309 - CVSS 5.6 (medium), 2024-03-27: A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected…
CVE-2024-20314 - CVSS 8.6 (high), 2024-03-27: A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote…
CVE-2024-20306 - CVSS 6.7 (medium), 2024-03-27: A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an authenticated, local attacker to execute…
CVE-2024-20312 - CVSS 7.4 (high), 2024-03-27: A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an…
CVE-2024-20303 - CVSS 7.4 (high), 2024-03-27: A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated,…
CVE-2024-20278 - CVSS 6.5 (medium), 2024-03-27: A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate privileges to root on an affected…
CVE-2024-20271 - CVSS 8.6 (high), 2024-03-27: A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service…
CVE-2024-20259 - CVSS 8.6 (high), 2024-03-27: A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload…
CVE-2023-20246 - CVSS 5.8 (medium), 2023-11-01: Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the…
CVE-2023-20273 - CVSS 7.2 (high), 2023-10-25: A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root.…
CVE-2023-20198 - CVSS 10 (critical), 2023-10-16: Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list…
CVE-2023-44487 - CVSS 7.5 (high), 2023-10-10: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the…
CVE-2023-20235 - CVSS 8.8 (high), 2023-10-04: A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could…
CVE-2023-20187 - CVSS 8.6 (high), 2023-09-27: A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could…
CVE-2023-20227 - CVSS 8.6 (high), 2023-09-27: A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of…
CVE-2023-20186 - CVSS 9.1 (critical), 2023-09-27: A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an…
CVE-2023-20226 - CVSS 8.6 (high), 2023-09-27: A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote…
CVE-2023-20202 - CVSS 6.5 (medium), 2023-09-27: A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent…
CVE-2023-20231 - CVSS 8.8 (high), 2023-09-27: A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected…
CVE-2023-20033 - CVSS 8.6 (high), 2023-09-27: A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauthenticated, remote attacker to cause an…
CVE-2023-20109 - CVSS 6.6 (medium), 2023-09-27: A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated,…
CVE-2023-20100 - CVSS 6.8 (medium), 2023-03-23: A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol of Cisco IOS XE Software…
CVE-2023-20097 - CVSS 6.7 (medium), 2023-03-23: A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root…
CVE-2023-20056 - CVSS 6.5 (medium), 2023-03-23: A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS)…
CVE-2023-20067 - CVSS 7.4 (high), 2023-03-23: A vulnerability in the HTTP-based client profiling feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated,…
CVE-2023-20081 - CVSS 6.8 (medium), 2023-03-23: A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software,…
CVE-2023-20066 - CVSS 6.5 (medium), 2023-03-23: A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform a directory traversal and access resources…
CVE-2023-20080 - CVSS 8.6 (high), 2023-03-23: A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker…
CVE-2023-20065 - CVSS 7.8 (high), 2023-03-23: A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to…
CVE-2023-20072 - CVSS 8.6 (high), 2023-03-23: A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to…
CVE-2023-20082 - CVSS 6.8 (medium), 2023-03-23: A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an…