CI
Product
Cisco IOS XE Software
On CISA KEVExploited in the wild
94
CVEs
6
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 55Medium 32Low 0
Watch
Add Cisco IOS XE Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20198 In wildKEV | 10.0 | Oct 16 | Cisco IOS XE Web UI Privilege Escalation Vulnerability Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
| CVE-2017-6742 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 3.7.0S; 3.7.1S; 3.7.2S; 3.7.3S; 3.7.4S; 3.7.5S; +34 more |
| CVE-2017-6738 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 3.2.0SG; 3.2.1SG; 3.2.2SG; 3.2.3SG; 3.2.4SG; 3.2.5SG; +34 more |
| CVE-2025-20352 In wildKEV | 7.7 | Sep 24 | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Affected: 3.5.0E; 3.5.1E; 3.5.2E; 3.5.3E; 3.6.0E; 3.6.1E; +34 more |
| CVE-2023-20273 In wildKEV | 7.2 | Oct 24 | Cisco IOS XE Web UI Command Injection Vulnerability Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
| CVE-2023-20109 In wildKEV | 6.6 | Sep 27 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability Affected: 3.7.0S; 3.7.1S; 3.7.2S; 3.7.3S; 3.7.4S; 3.7.5S; +34 more |
| CVE-2025-20188 | 10.0 | May 7 | A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE Software for Wireless… Affected: 17.11.1; 17.12.1; 17.12.2; 17.12.3; 17.13.1; 17.14.1; +1 more |
| CVE-2026-20272 | 9.8 | Aug 5 | Cisco IOS XE Software Security Hardening Release Affected: 17.2.1a; 16.12.1y; 16.12.3s; 16.7.1b; 16.6.2; 16.6.5; +34 more |
| CVE-2024-20510 | 9.3 | Sep 25 | A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the… Affected: 16.3.1; 16.3.2; 16.3.3; 16.3.1a; 16.3.4; 16.3.5; +34 more |
| CVE-2025-20221 | 9.1 | May 7 | A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters Affected: 16.12.13; 17.1.1; 17.1.1s; 17.1.1t; 17.1.3; 17.2.1; +34 more |
| CVE-2026-20267 | 9.0 | Aug 5 | Cisco IOS XE Software Security Hardening Release Affected: 17.2.1a; 16.12.1y; 16.12.3s; 16.7.1b; 16.6.2; 16.6.5; +34 more |
| CVE-2025-20363 | 9.0 | Sep 25 | A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software,… Affected: 3.2.0SG; 3.2.1SG; 3.2.2SG; 3.2.3SG; 3.2.4SG; 3.2.5SG; +34 more |
| CVE-2025-20334 | 8.8 | Sep 24 | A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying… Affected: 17.9.5; 17.9.5a; 17.9.5b; 17.9.6; 17.9.6a; 17.9.7; +32 more |
| CVE-2025-20186 | 8.8 | May 7 | A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authenticated, remote attacker with a lobby… Affected: 16.12.8; 16.12.4; 16.12.4a; 16.12.5; 16.12.6; 16.12.6a; +34 more |
| CVE-2024-20437 | 8.8 | Sep 25 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a cross-site request forgery (CSRF)… Affected: 17.3.2; 17.3.3; 17.3.2a; 17.3.4; 17.3.5; 17.3.4a; +34 more |
| CVE-2026-20301 | 8.6 | Aug 5 | Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability Affected: 17.2.1a; 16.12.1y; 16.12.3s; 16.7.1b; 16.6.2; 16.6.5; +34 more |
| CVE-2026-20273 | 8.6 | Aug 5 | Cisco IOS XE Software Security Hardening Release Affected: 17.2.1a; 16.12.1y; 16.12.3s; 16.7.1b; 16.6.2; 16.6.5; +34 more |
| CVE-2026-20271 | 8.6 | Aug 5 | Cisco IOS XE Software Security Hardening Release Affected: 17.2.1a; 16.12.1y; 16.12.3s; 16.7.1b; 16.6.2; 16.6.5; +34 more |
| CVE-2026-20270 | 8.6 | Aug 5 | Cisco IOS XE Software Security Hardening Release Affected: 17.2.1a; 16.12.1y; 16.12.3s; 16.7.1b; 16.6.2; 16.6.5; +34 more |
| CVE-2026-20269 | 8.6 | Aug 5 | Cisco IOS XE Software Security Hardening Release Affected: 17.2.1a; 16.12.1y; 16.12.3s; 16.7.1b; 16.6.2; 16.6.5; +34 more |
| CVE-2026-20268 | 8.6 | Aug 5 | Cisco IOS XE Software Security Hardening Release Affected: 17.2.1a; 16.12.1y; 16.12.3s; 16.7.1b; 16.6.2; 16.6.5; +34 more |
| CVE-2026-20263 | 8.6 | Aug 5 | Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability Affected: 17.2.1a; 16.12.1y; 16.12.3s; 16.7.1b; 16.6.2; 16.6.5; +34 more |
| CVE-2026-20012 | 8.6 | Mar 25 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA)… Affected: 3.5.0E; 3.5.1E; 3.5.2E; 3.5.3E; 3.11.1S; 3.11.2S; +34 more |
| CVE-2026-20086 | 8.6 | Mar 25 | A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller Software for the Catalyst CW9800… Affected: 17.14.1; 17.15.1; 17.15.2; 17.15.3; 17.15.2b; 17.15.4; +4 more |
| CVE-2026-20084 | 8.6 | Mar 25 | A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VLANs,… Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.5; 16.6.4a; +34 more |
| CVE-2025-20315 | 8.6 | Sep 24 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to… Affected: 3.7.0S; 3.7.1S; 3.7.2S; 3.7.3S; 3.7.4S; 3.7.5S; +34 more |
| CVE-2025-20239 | 8.6 | Aug 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and… Affected: 3.14.0S; 3.14.1S; 3.14.2S; 3.14.3S; 3.14.4S; 3.15.0S; +34 more |
| CVE-2025-20162 | 8.6 | May 7 | A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could… Affected: 16.11.1; 16.11.1a; 16.11.2; 16.11.1s; 16.12.1; 16.12.1s; +34 more |
| CVE-2024-20467 | 8.6 | Sep 25 | A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of… Affected: 17.12.1; 17.12.1a; 17.11.99SW |
| CVE-2024-20464 | 8.6 | Sep 25 | A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 17.13.1; 17.13.1a |
| CVE-2024-20480 | 8.6 | Sep 25 | A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow an unauthenticated, remote attacker to… Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
| CVE-2024-20455 | 8.6 | Sep 25 | A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an… Affected: 17.1.1; 17.1.1a; 17.1.1s; 17.1.1t; 17.1.3; 17.2.1; +34 more |
| CVE-2022-20837 | 8.6 | Oct 10 | Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2022-20870 | 8.6 | Oct 10 | Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2025-20200 | 8.2 | May 7 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating… Affected: 3.7.0S; 3.7.1S; 3.7.2S; 3.7.3S; 3.7.4S; 3.7.5S; +34 more |
| CVE-2025-20199 | 8.2 | May 7 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating… Affected: 3.7.0S; 3.7.1S; 3.7.2S; 3.7.3S; 3.7.4S; 3.7.5S; +34 more |
| CVE-2025-20198 | 8.2 | May 7 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating… Affected: 3.13.0S; 3.13.1S; 3.13.2S; 3.13.3S; 3.13.4S; 3.13.5S; +34 more |
| CVE-2025-20197 | 8.2 | May 7 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating… Affected: 3.7.0S; 3.7.1S; 3.7.2S; 3.7.3S; 3.7.4S; 3.7.5S; +34 more |
| CVE-2025-20160 | 8.1 | Sep 24 | A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive… Affected: 3.16.8S; 3.16.9S; 3.16.10S; 3.8.6E; 3.8.7E; 3.8.8E; +34 more |
| CVE-2026-20124 | 7.7 | Aug 5 | Cisco IOS XE Software SNMP Denial of Service Vulnerability Affected: 17.2.1a; 3.18.7SP; 16.12.1y; 16.12.3s; 16.7.1b; 16.6.2; +34 more |
| CVE-2026-20125 | 7.7 | Mar 25 | A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to… Affected: 3.5.0E; 3.5.1E; 3.5.2E; 3.5.3E; 3.11.1S; 3.11.2S; +34 more |
| CVE-2025-20312 | 7.7 | Sep 24 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service… Affected: 17.2.1; 17.2.1r; 17.2.1a; 17.2.1v; 17.2.2; 17.2.3; +34 more |
| CVE-2025-20192 | 7.7 | May 7 | A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service… Affected: 3.13.0S; 3.13.1S; 3.13.2S; 3.13.3S; 3.13.4S; 3.13.5S; +34 more |
| CVE-2025-20169 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.2.0SG; 3.2.1SG; 3.2.2SG; 3.2.3SG; 3.2.4SG; 3.2.5SG; +34 more |
| CVE-2025-20175 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.2.0SG; 3.2.1SG; 3.2.2SG; 3.2.3SG; 3.2.4SG; 3.2.5SG; +34 more |
| CVE-2025-20174 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.11.1S; 3.11.2S; 3.11.0S; 3.11.3S; 3.11.4S; 3.12.0S; +34 more |
| CVE-2025-20170 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.2.0SG; 3.2.1SG; 3.2.2SG; 3.2.3SG; 3.2.4SG; 3.2.5SG; +34 more |
| CVE-2025-20171 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.2.0SG; 3.2.1SG; 3.2.2SG; 3.2.3SG; 3.2.4SG; 3.2.5SG; +34 more |
| CVE-2025-20176 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.3.0SE; 3.3.1SE; 3.3.2SE; 3.3.3SE; 3.3.4SE; 3.3.5SE; +34 more |
| CVE-2025-20172 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a DoS… Affected: 3.7.0S; 3.7.1S; 3.7.2S; 3.7.3S; 3.7.4S; 3.7.5S; +34 more |