DeutschShown in its original language — a full translation is planned for a future version.
Cisco IOS und IOS XE Software: Mehrere Schwachstellen
view advisory published 2026-03-25
Ein Angreifer kann mehrere Schwachstellen in Cisco IOS XE, Cisco IOS und Cisco Catalyst ausnutzen, um sich erweiterte Rechte zu verschaffen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand herbeizuführen.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-20125US | — | — | ||
A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to r… | ||||
| CVE-2026-20115US | —OT elevated | — | ||
A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information.
This vulnerability is due to a… | ||||
| CVE-2026-20114US | — | — | ||
A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access manag… | ||||
| CVE-2026-20113US | — | — | ||
A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform… | ||||
| CVE-2026-20112US | — | — | ||
A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a… | ||||
| CVE-2026-20110US | — | — | ||
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device.
This vulnera… | ||||
| CVE-2026-20104US | — | — | ||
A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and IE932… | ||||
| CVE-2026-20086US | — | — | ||
A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller Software for the Catalyst CW9800 Family… | ||||
| CVE-2026-20084US | — | — | ||
A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VLANs, resultin… | ||||
| CVE-2026-20083US | — | — | ||
A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to cause a denial of serv… | ||||
| CVE-2026-20004US | — | — | ||
A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device.
This vulnera… | ||||
02
references
External citations — patches, advisories, analysis.
- Cisco Security Advisory cisco-sa-bootp-WuBhNBxA vom 2026-03-25external
- Cisco Security Advisory cisco-sa-ios-http-dos-sbv8XRpL vom 2026-03-25external
- Cisco Security Advisory cisco-sa-iosxe-lobby-privesc-KwxBqJy vom 2026-03-25external
- Cisco Security Advisory cisco-sa-iosxe-mntc-dos-LZweQcyq vom 2026-03-25external
- Cisco Security Advisory cisco-sa-iosxe-tls-dos-TVgLDEZL vom 2026-03-25external
- Cisco Security Advisory cisco-sa-iosxe_infodis-6J847uEB vom 2026-03-25external
- Cisco Security Advisory cisco-sa-iox-crlf-NvgKTKJZ vom 2026-03-25external
- Cisco Security Advisory cisco-sa-iox-xss-LpGkzwtJ vom 2026-03-25external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan