# cve.now: Cisco IOS

The newest entries affecting Cisco IOS (up to 200). Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-76505](https://cve.now/CVE-2026-76505.md): Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability (CVSS 7.5, Cisco IOS XR Software)
- [CVE-2026-20278](https://cve.now/CVE-2026-20278.md): Cisco IOS XR Software Security Hardening Release: September 2026 (CVSS 8.8, Cisco IOS XR Software)
- [CVE-2026-20280](https://cve.now/CVE-2026-20280.md): Cisco IOS XR Software Security Hardening Release: September 2026 (CVSS 8.8, Cisco IOS XR Software)
- [CVE-2026-20279](https://cve.now/CVE-2026-20279.md): Cisco IOS XR Software Security Hardening Release: September 2026 (CVSS 9.8, Cisco IOS XR Software)
- [CVE-2026-20275](https://cve.now/CVE-2026-20275.md): Cisco IOS XR Software Security Hardening Release: September 2026 (CVSS 8.8, Cisco IOS XR Software)
- [CVE-2026-20274](https://cve.now/CVE-2026-20274.md): Cisco IOS XR Software Security Hardening Release: September 2026 (CVSS 9.8, Cisco IOS XR Software)
- [CVE-2026-20276](https://cve.now/CVE-2026-20276.md): Cisco IOS XR Software Security Hardening Release: September 2026 (CVSS 8.6, Cisco IOS XR Software)
- [CVE-2026-20277](https://cve.now/CVE-2026-20277.md): Cisco IOS XR Software Security Hardening Release: September 2026 (CVSS 8.2, Cisco IOS XR Software)
- [CVE-2026-20311](https://cve.now/CVE-2026-20311.md): Cisco IOS XE Software Web UI Denial of Service Vulnerability (CVSS 6.3, Cisco IOS XE Software)
- [CVE-2026-20301](https://cve.now/CVE-2026-20301.md): Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software · Cisco IOS)
- [CVE-2026-20308](https://cve.now/CVE-2026-20308.md): Cisco IOS XE Software Web-Based Management Interface Vulnerability (CVSS 4.3, Cisco IOS XE Software)
- [CVE-2026-20273](https://cve.now/CVE-2026-20273.md): Cisco IOS XE Software Security Hardening Release (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2026-20272](https://cve.now/CVE-2026-20272.md): Cisco IOS XE Software Security Hardening Release (CVSS 9.8, Cisco IOS XE Software)
- [CVE-2026-20271](https://cve.now/CVE-2026-20271.md): Cisco IOS XE Software Security Hardening Release (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2026-20270](https://cve.now/CVE-2026-20270.md): Cisco IOS XE Software Security Hardening Release (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2026-20269](https://cve.now/CVE-2026-20269.md): Cisco IOS XE Software Security Hardening Release (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2026-20268](https://cve.now/CVE-2026-20268.md): Cisco IOS XE Software Security Hardening Release (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2026-20267](https://cve.now/CVE-2026-20267.md): Cisco IOS XE Software Security Hardening Release (CVSS 9.0, Cisco IOS XE Software)
- [CVE-2026-20263](https://cve.now/CVE-2026-20263.md): Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2026-20124](https://cve.now/CVE-2026-20124.md): Cisco IOS XE Software SNMP Denial of Service Vulnerability (CVSS 7.7, Cisco IOS XE Software)
- [CVE-2026-20112](https://cve.now/CVE-2026-20112.md): A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an auth (CVSS 4.8, Cisco IOS XE Software)
- [CVE-2026-20113](https://cve.now/CVE-2026-20113.md): A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unau (CVSS 5.3, Cisco IOS XE Software)
- [CVE-2026-20114](https://cve.now/CVE-2026-20114.md): A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to e (CVSS 5.4, Cisco IOS XE Software)
- [CVE-2026-20115](https://cve.now/CVE-2026-20115.md): A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device informa (CVSS 6.1, Cisco IOS XE Software)
- [CVE-2026-20083](https://cve.now/CVE-2026-20083.md): A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with (CVSS 6.5, Cisco IOS XE Software)
- [CVE-2026-20110](https://cve.now/CVE-2026-20110.md): A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service (DoS) conditio (CVSS 6.5, Cisco IOS XE Software)
- [CVE-2026-20104](https://cve.now/CVE-2026-20104.md): A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series S (CVSS 6.1, Cisco IOS XE Software)
- [CVE-2026-20004](https://cve.now/CVE-2026-20004.md): A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memor (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2026-20125](https://cve.now/CVE-2026-20125.md): A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote a (CVSS 7.7, Cisco IOS)
- [CVE-2026-20012](https://cve.now/CVE-2026-20012.md): A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall A (CVSS 8.6, Cisco IOS · Cisco Secure Firewall Adaptive Security Appl… +1)
- [CVE-2026-20086](https://cve.now/CVE-2026-20086.md): A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2026-20084](https://cve.now/CVE-2026-20084.md): A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2026-20118](https://cve.now/CVE-2026-20118.md): Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability (CVSS 6.8, Cisco IOS XR Software)
- [CVE-2026-20046](https://cve.now/CVE-2026-20046.md): Cisco IOS XR Software CLI Privilege Escalation Vulnerability (CVSS 8.8, Cisco IOS XR Software)
- [CVE-2026-20074](https://cve.now/CVE-2026-20074.md): Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability (CVSS 7.4, Cisco IOS XR Software)
- [CVE-2026-20040](https://cve.now/CVE-2026-20040.md): Cisco IOS XR Software CLI Privilege Escalation Vulnerability (CVSS 8.8, Cisco IOS XR Software)
- [CVE-2025-20363](https://cve.now/CVE-2025-20363.md): A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defens (CVSS 9.0, Cisco IOS · Cisco Adaptive Security Appliance (ASA) Soft… +1)
- [CVE-2025-20314](https://cve.now/CVE-2025-20314.md): A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacke (CVSS 6.7, Cisco IOS XE Software)
- [CVE-2025-20316](https://cve.now/CVE-2025-20316.md): A vulnerability in the access control list (ACL) programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches cou (CVSS 5.3, Cisco IOS XE Software)
- [CVE-2025-20293](https://cve.now/CVE-2025-20293.md): A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL) coul (CVSS 5.3, Cisco IOS XE Software)
- [CVE-2025-20338](https://cve.now/CVE-2025-20338.md): A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute a (CVSS 6.0, Cisco IOS XE Software)
- [CVE-2025-20240](https://cve.now/CVE-2025-20240.md): A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a refl (CVSS 6.1, Cisco IOS XE Software)
- [CVE-2025-20149](https://cve.now/CVE-2025-20149.md): A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected (CVSS 6.5, Cisco IOS)
- [CVE-2025-20313](https://cve.now/CVE-2025-20313.md): Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthentic (CVSS 6.7, Cisco IOS XE Software)
- [CVE-2025-20311](https://cve.now/CVE-2025-20311.md): A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthe (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2025-20327](https://cve.now/CVE-2025-20327.md): A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of s (CVSS 7.7, Cisco IOS)
- [CVE-2025-20312](https://cve.now/CVE-2025-20312.md): A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote att (CVSS 7.7, Cisco IOS XE Software)
- [CVE-2025-20352](https://cve.now/CVE-2025-20352.md): A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the f (CVSS 7.7, KEV, Cisco IOS)
- [CVE-2025-20160](https://cve.now/CVE-2025-20160.md): A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated (CVSS 8.1, Cisco IOS)
- [CVE-2025-20315](https://cve.now/CVE-2025-20315.md): A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2025-20334](https://cve.now/CVE-2025-20334.md): A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with r (CVSS 8.8, Cisco IOS XE Software)
- [CVE-2025-20365](https://cve.now/CVE-2025-20365.md): A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjac (CVSS 4.3, Cisco Aironet Access Point Software)
- [CVE-2025-20364](https://cve.now/CVE-2025-20364.md): A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, (CVSS 4.3, Cisco Aironet Access Point Software)
- [CVE-2025-20340](https://cve.now/CVE-2025-20340.md): Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability (CVSS 7.4, Cisco IOS XR Software)
- [CVE-2025-20159](https://cve.now/CVE-2025-20159.md): Cisco IOS XR Software Management Interface ACL Bypass Vulnerability (CVSS 5.3, Cisco IOS XR Software)
- [CVE-2025-20248](https://cve.now/CVE-2025-20248.md): Cisco IOS XR Software Image Verification Bypass Vulnerability (CVSS 6.0, Cisco IOS XR Software)
- [CVE-2025-20239](https://cve.now/CVE-2025-20239.md): A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Secu (CVSS 8.6, Cisco IOS · Cisco Adaptive Security Appliance (ASA) Soft… +1)
- [CVE-2025-20225](https://cve.now/CVE-2025-20225.md): A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Secu (CVSS 5.8, Cisco IOS · Cisco Adaptive Security Appliance (ASA) Soft… +1)
- [CVE-2025-20195](https://cve.now/CVE-2025-20195.md): A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a (CVSS 4.3, Cisco IOS XE Software)
- [CVE-2025-20194](https://cve.now/CVE-2025-20194.md): A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker (CVSS 5.4, Cisco IOS XE Software)
- [CVE-2025-20193](https://cve.now/CVE-2025-20193.md): A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker (CVSS 6.5, Cisco IOS XE Software)
- [CVE-2025-20201](https://cve.now/CVE-2025-20201.md): A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileg (CVSS 6.7, Cisco IOS XE Software)
- [CVE-2025-20200](https://cve.now/CVE-2025-20200.md): A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileg (CVSS 6.7, Cisco IOS XE Software)
- [CVE-2025-20199](https://cve.now/CVE-2025-20199.md): A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileg (CVSS 4.6, Cisco IOS XE Software)
- [CVE-2025-20198](https://cve.now/CVE-2025-20198.md): A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileg (CVSS 4.6, Cisco IOS XE Software)
- [CVE-2025-20197](https://cve.now/CVE-2025-20197.md): A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileg (CVSS 6.7, Cisco IOS XE Software)
- [CVE-2025-20221](https://cve.now/CVE-2025-20221.md): A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass L (CVSS 5.3, Cisco IOS XE Software)
- [CVE-2025-20162](https://cve.now/CVE-2025-20162.md): A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a fu (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2025-20196](https://cve.now/CVE-2025-20196.md): A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentica (CVSS 5.3, Cisco IOS)
- [CVE-2025-20186](https://cve.now/CVE-2025-20186.md): A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authent (CVSS 8.8, Cisco IOS XE Software)
- [CVE-2025-20155](https://cve.now/CVE-2025-20155.md): A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to a (CVSS 6.0, Cisco IOS XE Software)
- [CVE-2025-20140](https://cve.now/CVE-2025-20140.md): A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an un (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2025-20164](https://cve.now/CVE-2025-20164.md): A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS Software could allow an authenticated, remote attac (CVSS 8.3, Cisco IOS)
- [CVE-2025-20192](https://cve.now/CVE-2025-20192.md): A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote (CVSS 7.7, Cisco IOS XE Software)
- [CVE-2025-20189](https://cve.now/CVE-2025-20189.md): A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with R (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2025-20181](https://cve.now/CVE-2025-20181.md): A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, loc (CVSS 6.8, Cisco IOS)
- [CVE-2025-20202](https://cve.now/CVE-2025-20202.md): A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2025-20190](https://cve.now/CVE-2025-20190.md): A vulnerability in the lobby ambassador web interface of Cisco IOS XE Wireless Controller Software could allow an authenticated, remote atta (CVSS 6.5, Cisco IOS XE Software)
- [CVE-2025-20188](https://cve.now/CVE-2025-20188.md): A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features (CVSS 10.0, Cisco IOS XE Software)
- [CVE-2025-20214](https://cve.now/CVE-2025-20214.md): A vulnerability in the Network Configuration Access Control Module (NACM) of Cisco IOS XE Software could allow an authenticated, remote atta (CVSS 4.3, Cisco IOS XE Software)
- [CVE-2025-20137](https://cve.now/CVE-2025-20137.md): A vulnerability in the access control list (ACL) programming of Cisco IOS Software that is running on Cisco Catalyst 1000 Switches and Cisco (CVSS 4.7, Cisco IOS)
- [CVE-2025-20154](https://cve.now/CVE-2025-20154.md): Cisco IOS, IOS XE and IOS XR Software TWAMP Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XR Software)
- [CVE-2025-20151](https://cve.now/CVE-2025-20151.md): Cisco IOS and IOS XE Software SNMPv3 Configuration Restriction Vulnerability (CVSS 4.3, Cisco IOS XE Catalyst SD-WAN)
- [CVE-2025-20209](https://cve.now/CVE-2025-20209.md): Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability (CVSS 7.5, Cisco IOS XR Software)
- [CVE-2025-20177](https://cve.now/CVE-2025-20177.md): Cisco IOS XR Software Image Verification Bypass Vulnerability (CVSS 6.7, Cisco IOS XR Software)
- [CVE-2025-20146](https://cve.now/CVE-2025-20146.md): Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Routing Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XR Software)
- [CVE-2025-20145](https://cve.now/CVE-2025-20145.md): Cisco IOS XR Software Access Control List Bypass Vulnerability (CVSS 5.8, Cisco IOS XR Software)
- [CVE-2025-20144](https://cve.now/CVE-2025-20144.md): Cisco IOS XR Software Access Control List Bypass Vulnerability (CVSS 4.0, Cisco IOS XR Software)
- [CVE-2025-20143](https://cve.now/CVE-2025-20143.md): Cisco IOS XR Software Secure Boot Bypass Vulnerability (CVSS 6.7, Cisco IOS XR Software)
- [CVE-2025-20142](https://cve.now/CVE-2025-20142.md): Cisco IOS XR Software for ASR 9000 Series Routers L2VPN Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XR Software)
- [CVE-2025-20141](https://cve.now/CVE-2025-20141.md): Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerabillity (CVSS 7.4, Cisco IOS XR Software)
- [CVE-2025-20138](https://cve.now/CVE-2025-20138.md): Cisco IOS XR Software CLI Privilege Escalation Vulnerability (CVSS 8.8, Cisco IOS XR Software)
- [CVE-2025-20115](https://cve.now/CVE-2025-20115.md): Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XR Software)
- [CVE-2025-20169](https://cve.now/CVE-2025-20169.md): A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause (CVSS 7.7, Cisco IOS)
- [CVE-2025-20175](https://cve.now/CVE-2025-20175.md): A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause (CVSS 7.7, Cisco IOS)
- [CVE-2025-20174](https://cve.now/CVE-2025-20174.md): A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause (CVSS 7.7, Cisco IOS)
- [CVE-2025-20170](https://cve.now/CVE-2025-20170.md): A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause (CVSS 7.7, Cisco IOS)
- [CVE-2025-20171](https://cve.now/CVE-2025-20171.md): A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause (CVSS 7.7, Cisco IOS)
- [CVE-2025-20176](https://cve.now/CVE-2025-20176.md): A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause (CVSS 7.7, Cisco IOS)
- [CVE-2025-20172](https://cve.now/CVE-2025-20172.md): A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, (CVSS 7.7, Cisco IOS)
- [CVE-2025-20173](https://cve.now/CVE-2025-20173.md): A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause (CVSS 7.7, Cisco IOS)
- [CVE-2021-1440](https://cve.now/CVE-2021-1440.md): Cisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service Vulnerability (CVSS 6.8, Cisco IOS XR Software)
- [CVE-2022-20655](https://cve.now/CVE-2022-20655.md): A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a (CVSS 8.8, Cisco IOS XR Software · Cisco Virtual Topology System +7)
- [CVE-2022-20846](https://cve.now/CVE-2022-20846.md): Cisco IOS XR Software Cisco Discovery Protocol Buffer Overflow Vulnerability (CVSS 4.3, Cisco IOS XR Software)
- [CVE-2022-20845](https://cve.now/CVE-2022-20845.md): Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability (CVSS 6.0, Cisco IOS XR Software)
- [CVE-2022-20849](https://cve.now/CVE-2022-20849.md): Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability (CVSS 6.1, Cisco IOS XR Software)
- [CVE-2024-20373](https://cve.now/CVE-2024-20373.md): Cisco IOS and Cisco IOS XE SNMP Extended ACL Bypass Vulnerability (CVSS 5.3, Cisco IOS XE Catalyst SD-WAN)
- [CVE-2024-20418](https://cve.now/CVE-2024-20418.md): Cisco Ultra-Reliable Wireless Backhaul Software Command Injection Vulnerability (CVSS 10.0, Cisco Aironet Access Point Software)
- [CVE-2024-20434](https://cve.now/CVE-2024-20434.md): A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on t (CVSS 4.3, Cisco IOS XE Software)
- [CVE-2024-20414](https://cve.now/CVE-2024-20414.md): A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to con (CVSS 6.5, Cisco IOS)
- [CVE-2024-20465](https://cve.now/CVE-2024-20465.md): A vulnerability in the access control list (ACL) programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 (CVSS 5.8, Cisco IOS)
- [CVE-2024-20510](https://cve.now/CVE-2024-20510.md): A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthentic (CVSS 4.7, Cisco IOS XE Software)
- [CVE-2024-20467](https://cve.now/CVE-2024-20467.md): A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, rem (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2024-20464](https://cve.now/CVE-2024-20464.md): A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2024-20480](https://cve.now/CVE-2024-20480.md): A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow a (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2024-20437](https://cve.now/CVE-2024-20437.md): A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a (CVSS 8.1, Cisco IOS XE Software)
- [CVE-2024-20436](https://cve.now/CVE-2024-20436.md): A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthentic (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2024-20433](https://cve.now/CVE-2024-20433.md): A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthent (CVSS 8.6, Cisco IOS)
- [CVE-2024-20455](https://cve.now/CVE-2024-20455.md): A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software (CVSS 8.6, Cisco IOS XE Software · Cisco IOS XE Catalyst SD-WAN)
- [CVE-2024-20304](https://cve.now/CVE-2024-20304.md): Cisco IOS XR Software Packet Memory Exhaustion Vulnerability (CVSS 8.6, Cisco IOS XR Software)
- [CVE-2024-20489](https://cve.now/CVE-2024-20489.md): Cisco Routed Passive Optical Network Cleartext Password Vulnerability (CVSS 8.4, Cisco IOS XR Software)
- [CVE-2024-20483](https://cve.now/CVE-2024-20483.md): Cisco IOS XR PON Controller Command Injection Vulnerabilities (CVSS 7.2, Cisco IOS XR Software)
- [CVE-2024-20406](https://cve.now/CVE-2024-20406.md): Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability (CVSS 7.4, Cisco IOS XR Software)
- [CVE-2024-20381](https://cve.now/CVE-2024-20381.md): Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability (CVSS 8.8, Cisco IOS XR Software · Cisco Network Services Orchestra… +1)
- [CVE-2024-20317](https://cve.now/CVE-2024-20317.md): Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability (CVSS 7.4, Cisco IOS XR Software)
- [CVE-2024-20398](https://cve.now/CVE-2024-20398.md): Cisco IOS XR Software Local Privilege Escalation Vulnerability (CVSS 8.8, Cisco IOS XR Software)
- [CVE-2024-20390](https://cve.now/CVE-2024-20390.md): Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability (CVSS 5.3, Cisco IOS XR Software)
- [CVE-2024-20343](https://cve.now/CVE-2024-20343.md): Cisco IOS XR Software CLI Arbitrary File Read Vulnerability (CVSS 5.5, Cisco IOS XR Software)
- [CVE-2024-20456](https://cve.now/CVE-2024-20456.md): A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the (CVSS 6.7, Cisco IOS XR Software)
- [CVE-2024-20313](https://cve.now/CVE-2024-20313.md): A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2024-20310](https://cve.now/CVE-2024-20310.md): A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an un (CVSS 6.1, Cisco IOS XE Software · Cisco Unified Communications Manage…)
- [CVE-2024-20307](https://cve.now/CVE-2024-20307.md): A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attac (CVSS 6.8, Cisco IOS)
- [CVE-2024-20308](https://cve.now/CVE-2024-20308.md): A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attac (CVSS 8.6, Cisco IOS)
- [CVE-2024-20271](https://cve.now/CVE-2024-20271.md): A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a d (CVSS 8.6, Cisco Aironet Access Point Software · Cisco Business Wirele…)
- [CVE-2024-20265](https://cve.now/CVE-2024-20265.md): A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisc (CVSS 5.9, Cisco IOS XE Software · Cisco Aironet Access Point Softw… +1)
- [CVE-2024-20309](https://cve.now/CVE-2024-20309.md): A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, local attacker to caus (CVSS 5.6, Cisco IOS XE Software)
- [CVE-2024-20303](https://cve.now/CVE-2024-20303.md): A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unau (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2024-20278](https://cve.now/CVE-2024-20278.md): A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate privileges to root (CVSS 6.5, Cisco IOS XE Software)
- [CVE-2024-20306](https://cve.now/CVE-2024-20306.md): A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an authenticated, local attacker (CVSS 6.0, Cisco IOS XE Software)
- [CVE-2024-20314](https://cve.now/CVE-2024-20314.md): A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthentic (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2024-20312](https://cve.now/CVE-2024-20312.md): A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could all (CVSS 7.4, Cisco IOS)
- [CVE-2024-20324](https://cve.now/CVE-2024-20324.md): A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuratio (CVSS 5.5, Cisco IOS XE Software)
- [CVE-2024-20259](https://cve.now/CVE-2024-20259.md): A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected d (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2024-20276](https://cve.now/CVE-2024-20276.md): A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an (CVSS 7.4, Cisco IOS)
- [CVE-2024-20311](https://cve.now/CVE-2024-20311.md): A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthen (CVSS 8.6, Cisco IOS)
- [CVE-2024-20316](https://cve.now/CVE-2024-20316.md): A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to acces (CVSS 5.8, Cisco IOS XE Software)
- [CVE-2024-20354](https://cve.now/CVE-2024-20354.md): A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adj (CVSS 4.7, Cisco Aironet Access Point Software)
- [CVE-2024-20319](https://cve.now/CVE-2024-20319.md): A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured m (CVSS 4.3, Cisco IOS XR Software)
- [CVE-2024-20262](https://cve.now/CVE-2024-20262.md): A vulnerability in the Secure Copy Protocol (SCP) and SFTP feature of Cisco IOS XR Software could allow an authenticated, local attacker to (CVSS 6.5, Cisco IOS XR Software)
- [CVE-2024-20318](https://cve.now/CVE-2024-20318.md): A vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the lin (CVSS 7.4, Cisco IOS XR Software)
- [CVE-2024-20315](https://cve.now/CVE-2024-20315.md): A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow (CVSS 5.8, Cisco IOS XR Software)
- [CVE-2024-20322](https://cve.now/CVE-2024-20322.md): A vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco IOS XR Software could (CVSS 5.8, Cisco IOS XR Software)
- [CVE-2024-20266](https://cve.now/CVE-2024-20266.md): A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to tr (CVSS 5.3, Cisco IOS XR Software)
- [CVE-2024-20320](https://cve.now/CVE-2024-20320.md): A vulnerability in the SSH client feature of Cisco IOS XR Software for Cisco 8000 Series Routers and Cisco Network Convergence System (NCS) (CVSS 7.8, Cisco IOS XR Software)
- [CVE-2024-20327](https://cve.now/CVE-2024-20327.md): A vulnerability in the PPP over Ethernet (PPPoE) termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services (CVSS 7.4, Cisco IOS XR Software)
- [CVE-2023-20273](https://cve.now/CVE-2023-20273.md): A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the pri (CVSS 7.2, KEV, Cisco IOS XE Software)
- [CVE-2023-20198](https://cve.now/CVE-2023-20198.md): Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. (CVSS 10.0, KEV, Cisco IOS XE Software)
- [CVE-2023-20235](https://cve.now/CVE-2023-20235.md): A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS (CVSS 6.5, Cisco IOS XE Software)
- [CVE-2023-20176](https://cve.now/CVE-2023-20176.md): A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a t (CVSS 5.8, Cisco Aironet Access Point Software)
- [CVE-2023-20202](https://cve.now/CVE-2023-20202.md): A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthent (CVSS 6.1, Cisco IOS XE Software)
- [CVE-2023-20109](https://cve.now/CVE-2023-20109.md): A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an (CVSS 6.6, KEV, Cisco IOS)
- [CVE-2023-20268](https://cve.now/CVE-2023-20268.md): Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability (CVSS 4.7, Cisco Aironet Access Point Software · Cisco Business Wirele…)
- [CVE-2023-20186](https://cve.now/CVE-2023-20186.md): A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could all (CVSS 8.0, Cisco IOS)
- [CVE-2023-20227](https://cve.now/CVE-2023-20227.md): A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2023-20226](https://cve.now/CVE-2023-20226.md): A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unaut (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2023-20033](https://cve.now/CVE-2023-20033.md): A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauthenticated, remote at (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2023-20187](https://cve.now/CVE-2023-20187.md): A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Serv (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2023-20231](https://cve.now/CVE-2023-20231.md): A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against (CVSS 8.8, Cisco IOS XE Software)
- [CVE-2023-20190](https://cve.now/CVE-2023-20190.md): A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR Software could allow an unauthenticated, remote (CVSS 5.8, Cisco IOS XR Software)
- [CVE-2023-20191](https://cve.now/CVE-2023-20191.md): A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow (CVSS 5.8, Cisco IOS XR Software)
- [CVE-2023-20233](https://cve.now/CVE-2023-20233.md): A vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker (CVSS 4.3, Cisco IOS XR Software)
- [CVE-2023-20236](https://cve.now/CVE-2023-20236.md): A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified sof (CVSS 6.7, Cisco IOS XR Software)
- [CVE-2023-20135](https://cve.now/CVE-2023-20135.md): A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execute arbitrary code on (CVSS 5.7, Cisco IOS XR Software)
- [CVE-2023-20027](https://cve.now/CVE-2023-20027.md): Cisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2023-20029](https://cve.now/CVE-2023-20029.md): Cisco IOS XE Software Privilege Escalation Vulnerability (CVSS 4.4, Cisco IOS XE Software)
- [CVE-2023-20035](https://cve.now/CVE-2023-20035.md): Cisco IOS XE SD-WAN Software Command Injection Vulnerability (CVSS 7.8, Cisco IOS XE Software)
- [CVE-2023-20065](https://cve.now/CVE-2023-20065.md): A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elev (CVSS 7.8, Cisco IOS XE Software)
- [CVE-2023-20066](https://cve.now/CVE-2023-20066.md): Cisco IOS XE Software Web UI Path Traversal Vulnerability (CVSS 6.5, Cisco IOS XE Software)
- [CVE-2023-20067](https://cve.now/CVE-2023-20067.md): Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2023-20072](https://cve.now/CVE-2023-20072.md): Cisco IOS XE Software Fragmented Tunnel Protocol Packet Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2023-20080](https://cve.now/CVE-2023-20080.md): Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability (CVSS 8.6, Cisco IOS)
- [CVE-2023-20081](https://cve.now/CVE-2023-20081.md): Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability (CVSS 6.8, Cisco IOS)
- [CVE-2023-20082](https://cve.now/CVE-2023-20082.md): Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability (CVSS 6.1, Cisco IOS XE ROMMON Software)
- [CVE-2023-20100](https://cve.now/CVE-2023-20100.md): Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability (CVSS 6.8, Cisco IOS XE Software)
- [CVE-2023-20049](https://cve.now/CVE-2023-20049.md): Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XR Software)
- [CVE-2023-20064](https://cve.now/CVE-2023-20064.md): Cisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability (CVSS 4.6, Cisco IOS XR Software)
- [CVE-2023-20076](https://cve.now/CVE-2023-20076.md): Cisco IOx Application Hosting Environment Command Injection Vulnerability (CVSS 7.2, Cisco IOS)
- [CVE-2022-20864](https://cve.now/CVE-2022-20864.md): Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability (CVSS 4.6, Cisco IOS XE Software)
- [CVE-2022-20837](https://cve.now/CVE-2022-20837.md): Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2022-20920](https://cve.now/CVE-2022-20920.md): Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability (CVSS 7.7, Cisco IOS)
- [CVE-2022-20915](https://cve.now/CVE-2022-20915.md): Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2022-20870](https://cve.now/CVE-2022-20870.md): Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2022-20944](https://cve.now/CVE-2022-20944.md): Cisco IOS XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution Vulnerability (CVSS 6.1, Cisco IOS XE Software)
- [CVE-2022-20945](https://cve.now/CVE-2022-20945.md): Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability (CVSS 7.4, Cisco Aironet Access Point Software)
- [CVE-2022-20919](https://cve.now/CVE-2022-20919.md): Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability (CVSS 8.6, Cisco IOS)
- [CVE-2022-20856](https://cve.now/CVE-2022-20856.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2022-20855](https://cve.now/CVE-2022-20855.md): Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability (CVSS 7.9, Cisco IOS XE Software)
- [CVE-2022-20851](https://cve.now/CVE-2022-20851.md): Cisco IOS XE Software Web UI Command Injection Vulnerability (CVSS 5.5, Cisco IOS XE Software)
- [CVE-2022-20848](https://cve.now/CVE-2022-20848.md): Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2022-20847](https://cve.now/CVE-2022-20847.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/tech/cisco-ios
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.