CVE-2026-20308

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service (DoS) attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the web-based management interface to become unresponsive.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-dos-qdc7qx3

Configurations

No configuration.

History

23 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad en la interfaz de gestión basada en web del software Cisco IOS XE podría permitir a un atacante remoto autenticado con privilegios bajos realizar un ataque de denegación de servicio (DoS) contra un dispositivo afectado. Esta vulnerabilidad se debe a una validación de entrada insuficiente. Un atacante podría explotar esta vulnerabilidad enviando una entrada manipulada a la interfaz de gestión basada en web de un dispositivo afectado. Un exploit exitoso podría permitir al atacante hacer que la interfaz de gestión basada en web deje de responder.

Information

Published : 2026-08-05 17:16

Updated : 2026-10-23 21:10

NVD link : CVE-2026-20308

Mitre link : CVE-2026-20308

CVE.ORG link : CVE-2026-20308

JSON object : View

Products Affected

No product.

CWE

CWE-269

Improper Privilege Management

{"id": "CVE-2026-20308", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20308", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-05T17:34:35.714176Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco IOS XE Software", "versions": [{"status": "affected", "version": "17.2.1a"}, {"status": "affected", "version": "16.12.1y"}, {"status": "affected", "version": "16.12.3s"}, {"status": "affected", "version": "16.12.1w"}, {"status": "affected", "version": "16.9.1d"}, {"status": "affected", "version": "17.3.1"}, {"status": "affected", "version": "16.9.4c"}, {"status": "affected", "version": "17.2.1"}, {"status": "affected", "version": "16.9.1b"}, {"status": "affected", "version": "16.9.2s"}, {"status": "affected", "version": "16.12.4"}, {"status": "affected", "version": "16.12.3a"}, {"status": "affected", "version": "17.1.1s"}, {"status": "affected", "version": "16.11.1a"}, {"status": "affected", "version": "16.11.1b"}, {"status": "affected", "version": "16.9.1s"}, {"status": "affected", "version": "16.9.3h"}, {"status": "affected", "version": "16.9.1c"}, {"status": "affected", "version": "16.10.1f"}, {"status": "affected", "version": "17.2.1v"}, {"status": "affected", "version": "16.9.3a"}, {"status": "affected", "version": "16.12.1a"}, {"status": "affected", "version": "16.12.1x"}, {"status": "affected", "version": "16.10.1c"}, {"status": "affected", "version": "16.12.3"}, {"status": "affected", "version": "16.11.2"}, {"status": "affected", "version": "16.12.2s"}, {"status": "affected", "version": "16.10.1b"}, {"status": "affected", "version": "16.9.6"}, {"status": "affected", "version": "16.9.2"}, {"status": "affected", "version": "16.10.1"}, {"status": "affected", "version": "16.12.1t"}, {"status": "affected", "version": "16.9.1"}, {"status": "affected", "version": "16.9.3s"}, {"status": "affected", "version": "16.12.2"}, {"status": "affected", "version": "16.11.1"}, {"status": "affected", "version": "16.9.3"}, {"status": "affected", "version": "16.11.1s"}, {"status": "affected", "version": "16.12.1"}, {"status": "affected", "version": "17.1.1"}, {"status": "affected", "version": "17.1.2"}, {"status": "affected", "version": "16.10.1d"}, {"status": "affected", "version": "17.1.1t"}, {"status": "affected", "version": "16.9.4"}, {"status": "affected", "version": "16.12.2t"}, {"status": "affected", "version": "16.9.5"}, {"status": "affected", "version": "16.10.1e"}, {"status": "affected", "version": "16.10.1a"}, {"status": "affected", "version": "16.12.1z"}, {"status": "affected", "version": "16.9.1a"}, {"status": "affected", "version": "16.9.5f"}, {"status": "affected", "version": "16.10.1g"}, {"status": "affected", "version": "16.9.2a"}, {"status": "affected", "version": "16.10.3"}, {"status": "affected", "version": "16.11.1c"}, {"status": "affected", "version": "16.10.1s"}, {"status": "affected", "version": "17.2.1r"}, {"status": "affected", "version": "17.1.1a"}, {"status": "affected", "version": "16.10.2"}, {"status": "affected", "version": "16.12.2a"}, {"status": "affected", "version": "16.12.1c"}, {"status": "affected", "version": "16.12.1s"}, {"status": "affected", "version": "17.2.2"}, {"status": "affected", "version": "16.9.8"}, {"status": "affected", "version": "16.9.7"}, {"status": "affected", "version": "17.1.3"}, {"status": "affected", "version": "17.3.1a"}, {"status": "affected", "version": "17.3.2a"}, {"status": "affected", "version": "16.12.5"}, {"status": "affected", "version": "17.3.1w"}, {"status": "affected", "version": "17.3.2"}, {"status": "affected", "version": "17.4.1"}, {"status": "affected", "version": "16.12.4a"}, {"status": "affected", "version": "17.4.1a"}, {"status": "affected", "version": "17.3.1x"}, {"status": "affected", "version": "17.3.3"}, {"status": "affected", "version": "17.2.3"}, {"status": "affected", "version": "17.5.1"}, {"status": "affected", "version": "16.12.1z1"}, {"status": "affected", "version": "16.12.5a"}, {"status": "affected", "version": "17.4.1b"}, {"status": "affected", "version": "17.3.1z"}, {"status": "affected", "version": "16.12.5b"}, {"status": "affected", "version": "17.4.2"}, {"status": "affected", "version": "17.3.3a"}, {"status": "affected", "version": "17.3.5"}, {"status": "affected", "version": "17.3.4"}, {"status": "affected", "version": "17.5.1a"}, {"status": "affected", "version": "16.12.6"}, {"status": "affected", "version": "17.6.1"}, {"status": "affected", "version": "16.12.1z2"}, {"status": "affected", "version": "17.3.4a"}, {"status": "affected", "version": "17.6.1a"}, {"status": "affected", "version": "17.7.1"}, {"status": "affected", "version": "17.6.1x"}, {"status": "affected", "version": "17.6.2"}, {"status": "affected", "version": "16.12.6a"}, {"status": "affected", "version": "17.3.4c"}, {"status": "affected", "version": "17.4.2a"}, {"status": "affected", "version": "17.3.4b"}, {"status": "affected", "version": "17.7.1a"}, {"status": "affected", "version": "16.12.7"}, {"status": "affected", "version": "17.8.1a"}, {"status": "affected", "version": "17.6.3a"}, {"status": "affected", "version": "17.6.3"}, {"status": "affected", "version": "17.7.2"}, {"status": "affected", "version": "17.7.1b"}, {"status": "affected", "version": "17.9.1w"}, {"status": "affected", "version": "17.3.5a"}, {"status": "affected", "version": "17.6.1z"}, {"status": "affected", "version": "16.12.8"}, {"status": "affected", "version": "17.8.1"}, {"status": "affected", "version": "17.9.1"}, {"status": "affected", "version": "17.6.4"}, {"status": "affected", "version": "17.3.5b"}, {"status": "affected", "version": "17.9.1a"}, {"status": "affected", "version": "17.3.6"}, {"status": "affected", "version": "17.10.1"}, {"status": "affected", "version": "16.9.8a"}, {"status": "affected", "version": "17.6.1z1"}, {"status": "affected", "version": "17.10.1a"}, {"status": "affected", "version": "17.9.2"}, {"status": "affected", "version": "17.6.5"}, {"status": "affected", "version": "17.9.1x"}, {"status": "affected", "version": "17.9.1y"}, {"status": "affected", "version": "16.9.8b"}, {"status": "affected", "version": "17.3.7"}, {"status": "affected", "version": "17.9.2a"}, {"status": "affected", "version": "17.9.3"}, {"status": "affected", "version": "16.12.9"}, {"status": "affected", "version": "17.11.1"}, {"status": "affected", "version": "17.10.1b"}, {"status": "affected", "version": "17.6.6"}, {"status": "affected", "version": "17.9.1x1"}, {"status": "affected", "version": "17.11.1a"}, {"status": "affected", "version": "17.9.3a"}, {"status": "affected", "version": "17.12.1"}, {"status": "affected", "version": "17.3.8"}, {"status": "affected", "version": "17.9.4"}, {"status": "affected", "version": "16.12.10"}, {"status": "affected", "version": "17.12.1w"}, {"status": "affected", "version": "17.9.1y1"}, {"status": "affected", "version": "17.12.1a"}, {"status": "affected", "version": "17.9.5"}, {"status": "affected", "version": "17.13.1"}, {"status": "affected", "version": "17.12.1x"}, {"status": "affected", "version": "17.12.2"}, {"status": "affected", "version": "17.14.1"}, {"status": "affected", "version": "17.9.4a"}, {"status": "affected", "version": "17.3.8a"}, {"status": "affected", "version": "17.6.6a"}, {"status": "affected", "version": "17.6.5a"}, {"status": "affected", "version": "17.6.7"}, {"status": "affected", "version": "16.12.10a"}, {"status": "affected", "version": "17.15.1"}, {"status": "affected", "version": "17.13.1a"}, {"status": "affected", "version": "17.12.2a"}, {"status": "affected", "version": "16.12.11"}, {"status": "affected", "version": "17.12.3"}, {"status": "affected", "version": "17.12.1y"}, {"status": "affected", "version": "17.12.1z"}, {"status": "affected", "version": "17.9.5a"}, {"status": "affected", "version": "17.14.1a"}, {"status": "affected", "version": "17.9.5b"}, {"status": "affected", "version": "17.6.8"}, {"status": "affected", "version": "16.12.12"}, {"status": "affected", "version": "17.12.4"}, {"status": "affected", "version": "17.9.6"}, {"status": "affected", "version": "17.17.1"}, {"status": "affected", "version": "17.16.1"}, {"status": "affected", "version": "17.15.1w"}, {"status": "affected", "version": "17.12.3a"}, {"status": "affected", "version": "17.9.5c"}, {"status": "affected", "version": "17.15.1a"}, {"status": "affected", "version": "17.12.1z1"}, {"status": "affected", "version": "17.15.2"}, {"status": "affected", "version": "17.15.1b"}, {"status": "affected", "version": "17.9.5d"}, {"status": "affected", "version": "17.15.1x"}, {"status": "affected", "version": "17.9.6a"}, {"status": "affected", "version": "17.12.1z2"}, {"status": "affected", "version": "17.6.8a"}, {"status": "affected", "version": "17.16.1a"}, {"status": "affected", "version": "16.12.13"}, {"status": "affected", "version": "17.15.3"}, {"status": "affected", "version": "17.9.7"}, {"status": "affected", "version": "17.12.5"}, {"status": "affected", "version": "17.15.1y"}, {"status": "affected", "version": "17.9.5e"}, {"status": "affected", "version": "17.12.4a"}, {"status": "affected", "version": "17.15.2a"}, {"status": "affected", "version": "17.15.2c"}, {"status": "affected", "version": "17.15.2b"}, {"status": "affected", "version": "17.12.1z3"}, {"status": "affected", "version": "17.9.5f"}, {"status": "affected", "version": "17.12.4b"}, {"status": "affected", "version": "17.12.5a"}, {"status": "affected", "version": "17.18.1"}, {"status": "affected", "version": "17.12.6"}, {"status": "affected", "version": "17.12.1z4"}, {"status": "affected", "version": "17.9.8"}, {"status": "affected", "version": "17.9.7a"}, {"status": "affected", "version": "17.15.3a"}, {"status": "affected", "version": "17.15.4"}, {"status": "affected", "version": "17.12.5b"}, {"status": "affected", "version": "17.15.3b"}, {"status": "affected", "version": "16.12.14"}, {"status": "affected", "version": "17.18.1z"}, {"status": "affected", "version": "17.9.7b"}, {"status": "affected", "version": "17.12.5c"}, {"status": "affected", "version": "26.1.1"}, {"status": "affected", "version": "17.18.1a"}, {"status": "affected", "version": "17.15.4a"}, {"status": "affected", "version": "17.18.2"}, {"status": "affected", "version": "17.18.1w"}, {"status": "affected", "version": "17.15.4b"}, {"status": "affected", "version": "17.12.6a"}, {"status": "affected", "version": "17.12.7"}, {"status": "affected", "version": "17.15.4c"}, {"status": "affected", "version": "17.9.9"}, {"status": "affected", "version": "17.12.5d"}, {"status": "affected", "version": "16.12.15"}, {"status": "affected", "version": "17.15.4s1"}, {"status": "affected", "version": "17.15.5"}, {"status": "affected", "version": "17.12.1z5"}, {"status": "affected", "version": "17.18.1x"}, {"status": "affected", "version": "17.12.1z6"}, {"status": "affected", "version": "17.15.4d"}, {"status": "affected", "version": "17.12.6b"}, {"status": "affected", "version": "17.4.1c"}, {"status": "affected", "version": "17.15.5a"}, {"status": "affected", "version": "17.18.1y"}, {"status": "affected", "version": "17.12.7a"}, {"status": "affected", "version": "17.18.3"}, {"status": "affected", "version": "17.12.7b"}, {"status": "affected", "version": "17.18.3a"}, {"status": "affected", "version": "26.1.1a"}, {"status": "affected", "version": "26.2.1ea"}, {"status": "affected", "version": "16.12.16"}], "defaultStatus": "unknown"}]}], "published": "2026-08-05T17:16:51.280", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-dos-qdc7qx3", "source": "psirt@cisco.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service (DoS) attack against an affected device.\r\n\r\nThis vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the web-based management interface to become unresponsive."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz de gesti\u00f3n basada en web del software Cisco IOS XE podr\u00eda permitir a un atacante remoto autenticado con privilegios bajos realizar un ataque de denegaci\u00f3n de servicio (DoS) contra un dispositivo afectado.\n\nEsta vulnerabilidad se debe a una validaci\u00f3n de entrada insuficiente. Un atacante podr\u00eda explotar esta vulnerabilidad enviando una entrada manipulada a la interfaz de gesti\u00f3n basada en web de un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante hacer que la interfaz de gesti\u00f3n basada en web deje de responder."}], "lastModified": "2026-10-23T21:10:00.157", "sourceIdentifier": "psirt@cisco.com"}