CI
Product
Cisco IOS XE Software
On CISA KEVExploited in the wild
41
CVEs
6
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 24Medium 14Low 0
Watch
Add Cisco IOS XE Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20109 In wildKEV | 6.6 | Sep 27 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability Affected: 3.7.0S; 3.7.1S; 3.7.2S; 3.7.3S; 3.7.4S; 3.7.5S; +34 more |
| CVE-2022-20944 | 6.8 | Oct 10 | Cisco IOS XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-20855 | 6.7 | Sep 30 | Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2026-20083 | 6.5 | Mar 25 | A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to cause a denial of… Affected: 3.5.0E; 3.5.1E; 3.5.2E; 3.5.3E; 3.11.1S; 3.11.2S; +34 more |
| CVE-2026-20110 | 6.5 | Mar 25 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.5; 16.6.4a; +34 more |
| CVE-2022-20810 | 6.5 | Sep 30 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2026-20311 | 6.3 | Aug 5 | Cisco IOS XE Software Web UI Denial of Service Vulnerability Affected: 17.3.1; 17.3.1a; 17.3.2a; 17.3.1w; 17.3.2; 17.4.1; +34 more |
| CVE-2026-20115 | 6.1 | Mar 25 | A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information Affected: 17.14.1; 17.14.1a; 17.15.1; 17.15.1w; 17.15.1a; 17.15.2; +19 more |
| CVE-2026-20104 | 6.1 | Mar 25 | A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and… Affected: 16.12.8; 16.12.6; 16.12.6a; 16.12.7; 17.3.3; 17.3.4; +34 more |
| CVE-2026-20114 | 5.4 | Mar 25 | A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access… Affected: 16.11.1; 16.11.1a; 16.11.1b; 16.11.2; 16.11.1s; 16.12.1; +34 more |
| CVE-2026-20113 | 5.3 | Mar 25 | A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform… Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.5; 16.6.4a; +34 more |
| CVE-2026-20112 | 4.8 | Mar 25 | A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a… Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.5; 16.6.4a; +34 more |
| CVE-2022-20864 | 4.6 | Oct 10 | Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2026-20308 | 4.3 | Aug 5 | Cisco IOS XE Software Web-Based Management Interface Vulnerability Affected: 17.2.1a; 16.12.1y; 16.12.3s; 16.12.1w; 16.9.1d; 17.3.1; +34 more |
Showing 14