High severity · published May 6, 2026
CVE-2026-20185
Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vunerability
7.7
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Series Managed Switches (SG350) and Cisco 350X Series Stackable Managed Switches (SG350X) firmware could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.  This vulnerability is due to improper error handling when parsing response data for a specific SNMP request. An attacker could exploit this vulnerability by sending a specific SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMPv2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMPv3, the attacker must have valid SNMP user credentials for the affected system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Affected product
CS
Cisco Small Business Smart and Managed Switches
Cisco
More from Cisco Small Business Smart and Managed Switches
9.8
CVE-2023-20161
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
9.8
CVE-2023-20189
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
9.8
CVE-2023-20162
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
9.8
CVE-2023-20156
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
9.8
CVE-2023-20157
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities