CI
Product
Cisco IOS XE Software
On CISA KEVExploited in the wild
94
CVEs
6
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 55Medium 32Low 0
Watch
Add Cisco IOS XE Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20198 In wildKEV | 10.0 | Oct 16 | Cisco IOS XE Web UI Privilege Escalation Vulnerability Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
| CVE-2025-20188 | 10.0 | May 7 | A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE Software for Wireless… Affected: 17.11.1; 17.12.1; 17.12.2; 17.12.3; 17.13.1; 17.14.1; +1 more |
| CVE-2026-20272 | 9.8 | Aug 5 | Cisco IOS XE Software Security Hardening Release Affected: 17.2.1a; 16.12.1y; 16.12.3s; 16.7.1b; 16.6.2; 16.6.5; +34 more |
| CVE-2024-20510 | 9.3 | Sep 25 | A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the… Affected: 16.3.1; 16.3.2; 16.3.3; 16.3.1a; 16.3.4; 16.3.5; +34 more |
| CVE-2025-20221 | 9.1 | May 7 | A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters Affected: 16.12.13; 17.1.1; 17.1.1s; 17.1.1t; 17.1.3; 17.2.1; +34 more |
| CVE-2026-20267 | 9.0 | Aug 5 | Cisco IOS XE Software Security Hardening Release Affected: 17.2.1a; 16.12.1y; 16.12.3s; 16.7.1b; 16.6.2; 16.6.5; +34 more |
| CVE-2025-20363 | 9.0 | Sep 25 | A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software,… Affected: 3.2.0SG; 3.2.1SG; 3.2.2SG; 3.2.3SG; 3.2.4SG; 3.2.5SG; +34 more |
Showing 7