IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20269 | 8.6 | Aug 5 | Cisco IOS XE Software Security Hardening Release Affected: 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.4s; 16.6.5; +34 more |
| CVE-2026-20268 | 8.6 | Aug 5 | Cisco IOS XE Software Security Hardening Release Affected: 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.4s; 16.6.5; +34 more |
| CVE-2026-20263 | 8.6 | Aug 5 | Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability Affected: 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.4s; 16.6.5; +34 more |
| CVE-2026-20012 | 8.6 | Mar 25 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA)… Affected: 3.5.0e; 3.5.1e; 3.5.2e; 3.5.3e; 3.6.0e; 3.6.1e; +34 more |
| CVE-2026-20084 | 8.6 | Mar 25 | A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VLANs,… Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.5; +34 more |
| CVE-2025-20315 | 8.6 | Sep 24 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to… Affected: 3.7.0bs; 3.7.0s; 3.7.1as; 3.7.1s; 3.7.2s; 3.7.2ts; +34 more |
| CVE-2025-20162 | 8.6 | May 7 | A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could… Affected: 16.11.1; 16.11.1a; 16.11.1s; 16.11.2; 16.12.1; 16.12.1a; +34 more |
| CVE-2025-20154 | 8.6 | May 7 | A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker… Affected: 16.6.1 through 17.2.3 |
| CVE-2024-20480 | 8.6 | Sep 25 | A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow an unauthenticated, remote attacker to… Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
| CVE-2024-20467 | 8.6 | Sep 25 | A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of… Affected: 17.11.99sw; 17.12.1; 17.12.1a |
| CVE-2024-20464 | 8.6 | Sep 25 | A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 17.13.1; 17.13.1a |
| CVE-2024-20455 | 8.6 | Sep 25 | A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an… Affected: 17.1.1; 17.1.1a; 17.1.1s; 17.1.1t; 17.1.3; 17.2.1; +34 more |
| CVE-2024-20271 | 8.6 | Mar 27 | A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an… Affected: before 17.3.8; 17.4 before 17.6.6; 17.7 before 17.9.5; 17.10 before 17.12.2 |
| CVE-2024-20259 | 8.6 | Mar 27 | A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting… Affected: 17.1.1; 17.1.1a; 17.1.1s; 17.1.1t; 17.1.3; 17.2.1; +34 more |
| CVE-2023-20033 | 8.6 | Sep 27 | A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauthenticated, remote attacker to cause an affected device to… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2023-20072 | 8.6 | Mar 23 | A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system… Affected: 17.9.1; 17.9.1a; 17.9.1w |
| CVE-2023-20027 | 8.6 | Mar 23 | A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause… Affected: 3.9.0as; 3.9.1s; 3.9.2s; 3.10.0s; 3.10.1s; 3.10.2as; +34 more |
| CVE-2022-20837 | 8.6 | Oct 10 | Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2022-20870 | 8.6 | Oct 10 | Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2022-20697 | 8.6 | Apr 15 | A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS)… Affected: 3.11.3ae; 3.11.3e; 3.11.4e |
| CVE-2022-20683 | 8.6 | Apr 15 | A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an… Affected: 3.15.1xbs; 3.15.2xbs; 16.7.2; 16.7.3; 16.7.4; 16.8.1; +34 more |
| CVE-2022-20682 | 8.6 | Apr 15 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family… Affected: 3.15.1xbs; 3.15.2xbs; 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; +34 more |
| CVE-2021-34697 | 8.6 | Sep 23 | A vulnerability in the Protection Against Distributed Denial of Service Attacks feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct denial… Affected: 17.3.1 before 17.3.3 |
| CVE-2021-1624 | 8.6 | Sep 23 | A vulnerability in the Rate Limiting Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU… Affected: through 17.3.3 |
| CVE-2021-1622 | 8.6 | Sep 23 | A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to… Affected: before 16.12.1z1; 17.3.1x |
| CVE-2021-1611 | 8.6 | Sep 23 | A vulnerability in Ethernet over GRE (EoGRE) packet processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9800 Family Wireless Controller, Embedded… Affected: before 17.3.1 |
| CVE-2021-1565 | 8.6 | Sep 23 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless… Affected: 3.15.1xbs; 3.15.2xbs; 17.3.1; 17.3.2; 17.4.1; 17.5.1 |
| CVE-2021-1373 | 8.6 | Mar 24 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000… Affected: 16.10.1; 16.10.1e; 16.10.1s; 16.11.1; 16.11.1a; 16.11.1b; +19 more |
| CVE-2020-3527 | 8.6 | Sep 24 | A vulnerability in the Polaris kernel of Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to crash the device Affected: 16.9.0 before 16.9.5; 16.12.0 before 16.12.3 |
| CVE-2020-3526 | 8.6 | Sep 24 | A vulnerability in the Common Open Policy Service (COPS) engine of Cisco IOS XE Software on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker… Affected: 17.2 |
| CVE-2020-3510 | 8.6 | Sep 24 | A vulnerability in the Umbrella Connector component of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to trigger a… Affected: 16.12.1; 16.12.2; 17.1.1 |
| CVE-2020-3509 | 8.6 | Sep 24 | A vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the… Affected: 16.7(1) |
| CVE-2020-3492 | 8.6 | Sep 24 | A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers and Cisco AireOS Software for Cisco… Affected: 16.12.1 |
| CVE-2020-3480 | 8.6 | Sep 24 | Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop… Affected: All versions, or not specified |
| CVE-2020-3414 | 8.6 | Sep 24 | A vulnerability in the packet processing of Cisco IOS XE Software for Cisco 4461 Integrated Services Routers could allow an unauthenticated, remote attacker to cause an affected… Affected: 16.9.2; 16.10.4; 16.11.2; 16.12.3; 17.1.1 |
| CVE-2020-3408 | 8.6 | Sep 24 | A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload,… Affected: 15.8(3)m3 |
| CVE-2020-3407 | 8.6 | Sep 24 | A vulnerability in the RESTCONF and NETCONF-YANG access control list (ACL) function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to… Affected: 15.8(3)m3 |
| CVE-2020-3399 | 8.6 | Sep 24 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers… Affected: 16.12; 16.12.1s; 16.12.2 |
| CVE-2020-3359 | 8.6 | Sep 24 | A vulnerability in the multicast DNS (mDNS) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to… Affected: 16.12.1 |
| CVE-2020-3228 | 8.6 | Jun 3 | A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote… Affected: 3.3.0se; 3.3.0xo; 3.3.1se; 3.3.1xo; 3.3.2se; 3.3.2xo; +34 more |
| CVE-2020-3226 | 8.6 | Jun 3 | A vulnerability in the Session Initiation Protocol (SIP) library of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a… Affected: 3.10.0s; 3.10.1s; 3.10.2as; 3.10.2s; 3.10.2ts; 3.10.3s; +34 more |
| CVE-2020-3225 | 8.6 | Jun 3 | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,… Affected: 3.3.0xo; 3.3.1xo; 3.3.2xo; 3.6.5be; 3.8.9e; 3.8.10e; +28 more |
| CVE-2020-3221 | 8.6 | Jun 3 | A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated,… Affected: 16.10.1; 16.10.1a; 16.10.1b; 16.10.1e; 16.10.1s; 16.10.2; +10 more |
| CVE-2020-3203 | 8.6 | Jun 3 | A vulnerability in the locally significant certificate (LSC) provisioning feature of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could… Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
| CVE-2019-12663 | 8.6 | Sep 25 | A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause… Affected: 16.6.4; 16.12.1 |
| CVE-2019-1747 | 8.6 | Mar 28 | A vulnerability in the implementation of the Short Message Service (SMS) handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,… Affected: 16.10.1 |
| CVE-2019-1740 | 8.6 | Mar 28 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 3.2.0ja; 3.16.0as; 3.16.0bs; 3.16.0cs; 3.16.0s; 3.16.1as; +34 more |
| CVE-2019-1737 | 8.6 | Mar 27 | A vulnerability in the processing of IP Service Level Agreement (SLA) packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0xo; +34 more |
| CVE-2018-0485 | 8.6 | Oct 5 | A vulnerability in the SM-1T3/E3 firmware on Cisco Second Generation Integrated Services Routers (ISR G2) and the Cisco 4451-X Integrated Services Router (ISR4451-X) could allow… Affected: All versions, or not specified |
| CVE-2018-0472 | 8.6 | Oct 5 | A vulnerability in the IPsec driver code of multiple Cisco IOS XE Software platforms and the Cisco ASA 5500-X Series Adaptive Security Appliance (ASA) could allow an… Affected: 15.5(3)s5.36; 16.8.1 |
The 500 most important CVEs for this product (exploited first, then by severity)