Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-20308— Cisco IOS XE Software Web-Based Management Interface Vulnerability

Quick assessment

Affected

Cisco Cisco IOS XE Software

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco IOS XE Software是美国Cisco公司的一款管理网络设备的操作系统。 Cisco IOS XE Software存在权限许可和访问控制问题漏洞，该漏洞源于输入验证不足，可能导致经过身份验证的远程低权限攻击者通过向基于Web的管理接口发送特制输入，造成拒绝服务，使接口无法响应。

CVSS 4.3 · Medium EPSS 0.44% · P38 Updated Aug 06, 2026

Possible ATT&CK Techniques 2 AI

T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application

Affected Version Matrix 239

Vendor	Product	Version Range	Status
Cisco	Cisco IOS XE Software	`17.2.1a`	affected
		`16.12.1y`	affected
		`16.12.3s`	affected
		`16.12.1w`	affected
		`16.9.1d`	affected
		`17.3.1`	affected
		`16.9.4c`	affected
		`17.2.1`	affected
… +231 more rows

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-20308

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Cisco IOS XE Software Web-Based Management Interface Vulnerability

Source: CVE Program / CVE List V5

Vulnerability Description

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service (DoS) attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the web-based management interface to become unresponsive.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

特权管理不恰当

Source: CVE Program / CVE List V5

Vulnerability Title

Cisco IOS XE Software 权限许可和访问控制问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Cisco	Cisco IOS XE Software	17.2.1a	-

II. Public POCs for CVE-2026-20308

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-20308

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-20308 (1)

🔗 Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability Read full article

https://www.cve.org/CVERecord?id=CVE-2026-20308

Same Patch Batch · Cisco · 2026-08-05 · 23 CVEs total

CVE-2026-20304	9.9 CRITICAL	Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities
CVE-2026-20303	9.9 CRITICAL	Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities
CVE-2026-20272	9.8 CRITICAL	Cisco IOS XE Software Security Hardening Release
CVE-2026-20310	9.1 CRITICAL	Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Ac
CVE-2026-20267	9.0 CRITICAL	Cisco IOS XE Software Security Hardening Release
CVE-2026-20312	8.8 HIGH	Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities
CVE-2026-20200	8.8 HIGH	Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulner
CVE-2026-20263	8.6 HIGH	Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability
CVE-2026-20268	8.6 HIGH	Cisco IOS XE Software Security Hardening Release
CVE-2026-20269	8.6 HIGH	Cisco IOS XE Software Security Hardening Release
CVE-2026-20270	8.6 HIGH	Cisco IOS XE Software Security Hardening Release
CVE-2026-20271	8.6 HIGH	Cisco IOS XE Software Security Hardening Release
CVE-2026-20273	8.6 HIGH	Cisco IOS XE Software Security Hardening Release
CVE-2026-20301	8.6 HIGH	Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Serv
CVE-2026-20313	7.7 HIGH	Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities
CVE-2026-20124	7.7 HIGH	Cisco IOS XE Software SNMP Denial of Service Vulnerability
CVE-2026-20294	6.5 MEDIUM	Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
CVE-2026-20288	6.5 MEDIUM	Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability
CVE-2026-20311	6.3 MEDIUM	Cisco IOS XE Software Web UI Denial of Service Vulnerability
CVE-2026-20289	5.7 MEDIUM	Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability

Showing top 20 of 23 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Cisco IOS XE Software

Same vendor: Cisco

Same weakness: CWE-269