CVE-2026-20113
CVSS 5.3 MEDIUM: a vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE… EPSS 0.3% (20º percentile).
Vulnerabilità · 187 giorni fa
Cisco ha rilasciato patch per una dozzina di vulnerabilità di gravità alta e media in IOS e IOS XE. Quattro difetti pubblicamente divulgati (CVE-2026-20110, -20112, -20113, -20114) interessano i Catalyst 9300. Due di questi possono essere concatenati per escalation di privilegi. La catena può causare un DoS persistente che in scenari convalidati ha richiesto intervento fisico per il ripristino.
CVSS 5.3 MEDIUM: a vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE… EPSS 0.3% (20º percentile).
CVSS 5.4 MEDIUM: a vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an… EPSS 0.3% (20º percentile).
CVSS 4.8 MEDIUM: a vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE… EPSS 0.2% (9º percentile).
CVSS 6.5 MEDIUM: a vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of…
2 fonti che coprono questa storia
Cisco Patches Multiple Vulnerabilities in IOS Software
The high- and medium-severity flaws could lead to denial-of-service, secure boot bypass, information disclosure, and privilege escalation.
A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a carriage return line feed (CRLF) injection attack against a user.
Cisco Security Advisory: Cisco IOS XE Software Lobby Ambassador Privilege Escalation Vulnerability
A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access management APIs that would not normally be available for Lobby Ambassador users.
A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to cause a denial of service (DoS) condition on an affected device.
A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.
A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information.
A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.
Cisco Security Advisory: Cisco IOS XE Software TLS Memory Exhaustion Denial of Service Vulnerability
A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device.
Cisco Security Advisory: Cisco IOS XE Software Denial of Service Vulnerability
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device.
A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller Software for the Catalyst CW9800 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VLANs, resulting in a denial of service (DoS) condition.
A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and IE9320 Rugged Series Switches, and Cisco IE3500 and IE3505 Rugged Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute arbitrary code at boot time and break the chain of trust.
Part of the PlainSec briefing for 2026-03-26