CVE-2026-20311

Wednesday, August 05, 2026

6.3

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

Summary

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to insufficient error handling in the web-based management interface. An attacker could exploit this vulnerability by authenticating with a malformed certificate. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Affected Software

Vendor	Product	Version Range	Status
Cisco	Cisco IOS XE Software	`17.3.1`	affected
Cisco	Cisco IOS XE Software	`17.3.1a`	affected
Cisco	Cisco IOS XE Software	`17.3.2a`	affected
Cisco	Cisco IOS XE Software	`17.3.1w`	affected
Cisco	Cisco IOS XE Software	`17.3.2`	affected
Cisco	Cisco IOS XE Software	`17.4.1`	affected
Cisco	Cisco IOS XE Software	`17.4.1a`	affected
Cisco	Cisco IOS XE Software	`17.3.1x`	affected
Cisco	Cisco IOS XE Software	`17.3.3`	affected
Cisco	Cisco IOS XE Software	`17.5.1`	affected
Cisco	Cisco IOS XE Software	`17.4.1b`	affected
Cisco	Cisco IOS XE Software	`17.3.1z`	affected
Cisco	Cisco IOS XE Software	`17.4.2`	affected
Cisco	Cisco IOS XE Software	`17.3.3a`	affected
Cisco	Cisco IOS XE Software	`17.3.5`	affected
Cisco	Cisco IOS XE Software	`17.3.4`	affected
Cisco	Cisco IOS XE Software	`17.5.1a`	affected
Cisco	Cisco IOS XE Software	`17.6.1`	affected
Cisco	Cisco IOS XE Software	`17.3.4a`	affected
Cisco	Cisco IOS XE Software	`17.6.1a`	affected
Cisco	Cisco IOS XE Software	`17.7.1`	affected
Cisco	Cisco IOS XE Software	`17.6.1x`	affected
Cisco	Cisco IOS XE Software	`17.6.2`	affected
Cisco	Cisco IOS XE Software	`17.3.4c`	affected
Cisco	Cisco IOS XE Software	`17.4.2a`	affected
Cisco	Cisco IOS XE Software	`17.3.4b`	affected
Cisco	Cisco IOS XE Software	`17.7.1a`	affected
Cisco	Cisco IOS XE Software	`17.8.1a`	affected
Cisco	Cisco IOS XE Software	`17.6.3a`	affected
Cisco	Cisco IOS XE Software	`17.6.3`	affected
Cisco	Cisco IOS XE Software	`17.7.2`	affected
Cisco	Cisco IOS XE Software	`17.7.1b`	affected
Cisco	Cisco IOS XE Software	`17.9.1w`	affected
Cisco	Cisco IOS XE Software	`17.3.5a`	affected
Cisco	Cisco IOS XE Software	`17.6.1z`	affected
Cisco	Cisco IOS XE Software	`17.8.1`	affected
Cisco	Cisco IOS XE Software	`17.9.1`	affected
Cisco	Cisco IOS XE Software	`17.6.4`	affected
Cisco	Cisco IOS XE Software	`17.3.5b`	affected
Cisco	Cisco IOS XE Software	`17.9.1a`	affected
Cisco	Cisco IOS XE Software	`17.3.6`	affected
Cisco	Cisco IOS XE Software	`17.10.1`	affected
Cisco	Cisco IOS XE Software	`17.6.1z1`	affected
Cisco	Cisco IOS XE Software	`17.10.1a`	affected
Cisco	Cisco IOS XE Software	`17.9.2`	affected
Cisco	Cisco IOS XE Software	`17.6.5`	affected
Cisco	Cisco IOS XE Software	`17.9.1x`	affected
Cisco	Cisco IOS XE Software	`17.9.1y`	affected
Cisco	Cisco IOS XE Software	`17.3.7`	affected
Cisco	Cisco IOS XE Software	`17.9.2a`	affected
Cisco	Cisco IOS XE Software	`17.9.3`	affected
Cisco	Cisco IOS XE Software	`17.11.1`	affected
Cisco	Cisco IOS XE Software	`17.10.1b`	affected
Cisco	Cisco IOS XE Software	`17.6.6`	affected
Cisco	Cisco IOS XE Software	`17.9.1x1`	affected
Cisco	Cisco IOS XE Software	`17.11.1a`	affected
Cisco	Cisco IOS XE Software	`17.9.3a`	affected
Cisco	Cisco IOS XE Software	`17.12.1`	affected
Cisco	Cisco IOS XE Software	`17.3.8`	affected
Cisco	Cisco IOS XE Software	`17.9.4`	affected
Cisco	Cisco IOS XE Software	`17.12.1w`	affected
Cisco	Cisco IOS XE Software	`17.9.1y1`	affected
Cisco	Cisco IOS XE Software	`17.12.1a`	affected
Cisco	Cisco IOS XE Software	`17.9.5`	affected
Cisco	Cisco IOS XE Software	`17.13.1`	affected
Cisco	Cisco IOS XE Software	`17.12.1x`	affected
Cisco	Cisco IOS XE Software	`17.12.2`	affected
Cisco	Cisco IOS XE Software	`17.14.1`	affected
Cisco	Cisco IOS XE Software	`17.9.4a`	affected
Cisco	Cisco IOS XE Software	`17.3.8a`	affected
Cisco	Cisco IOS XE Software	`17.6.6a`	affected
Cisco	Cisco IOS XE Software	`17.6.5a`	affected
Cisco	Cisco IOS XE Software	`17.6.7`	affected
Cisco	Cisco IOS XE Software	`17.15.1`	affected
Cisco	Cisco IOS XE Software	`17.13.1a`	affected
Cisco	Cisco IOS XE Software	`17.12.2a`	affected
Cisco	Cisco IOS XE Software	`17.12.3`	affected
Cisco	Cisco IOS XE Software	`17.12.1y`	affected
Cisco	Cisco IOS XE Software	`17.12.1z`	affected
Cisco	Cisco IOS XE Software	`17.9.5a`	affected
Cisco	Cisco IOS XE Software	`17.14.1a`	affected
Cisco	Cisco IOS XE Software	`17.9.5b`	affected
Cisco	Cisco IOS XE Software	`17.6.8`	affected
Cisco	Cisco IOS XE Software	`17.12.4`	affected
Cisco	Cisco IOS XE Software	`17.9.6`	affected
Cisco	Cisco IOS XE Software	`17.17.1`	affected
Cisco	Cisco IOS XE Software	`17.16.1`	affected
Cisco	Cisco IOS XE Software	`17.15.1w`	affected
Cisco	Cisco IOS XE Software	`17.12.3a`	affected
Cisco	Cisco IOS XE Software	`17.9.5c`	affected
Cisco	Cisco IOS XE Software	`17.15.1a`	affected
Cisco	Cisco IOS XE Software	`17.12.1z1`	affected
Cisco	Cisco IOS XE Software	`17.15.2`	affected
Cisco	Cisco IOS XE Software	`17.15.1b`	affected
Cisco	Cisco IOS XE Software	`17.9.5d`	affected
Cisco	Cisco IOS XE Software	`17.15.1x`	affected
Cisco	Cisco IOS XE Software	`17.9.6a`	affected
Cisco	Cisco IOS XE Software	`17.12.1z2`	affected
Cisco	Cisco IOS XE Software	`17.6.8a`	affected
Cisco	Cisco IOS XE Software	`17.16.1a`	affected
Cisco	Cisco IOS XE Software	`17.15.3`	affected
Cisco	Cisco IOS XE Software	`17.9.7`	affected
Cisco	Cisco IOS XE Software	`17.12.5`	affected
Cisco	Cisco IOS XE Software	`17.15.1y`	affected
Cisco	Cisco IOS XE Software	`17.9.5e`	affected
Cisco	Cisco IOS XE Software	`17.12.4a`	affected
Cisco	Cisco IOS XE Software	`17.15.2a`	affected
Cisco	Cisco IOS XE Software	`17.15.2c`	affected
Cisco	Cisco IOS XE Software	`17.15.2b`	affected
Cisco	Cisco IOS XE Software	`17.12.1z3`	affected
Cisco	Cisco IOS XE Software	`17.9.5f`	affected
Cisco	Cisco IOS XE Software	`17.12.4b`	affected
Cisco	Cisco IOS XE Software	`17.12.5a`	affected
Cisco	Cisco IOS XE Software	`17.18.1`	affected
Cisco	Cisco IOS XE Software	`17.12.6`	affected
Cisco	Cisco IOS XE Software	`17.12.1z4`	affected
Cisco	Cisco IOS XE Software	`17.9.8`	affected
Cisco	Cisco IOS XE Software	`17.9.7a`	affected
Cisco	Cisco IOS XE Software	`17.15.3a`	affected
Cisco	Cisco IOS XE Software	`17.15.4`	affected
Cisco	Cisco IOS XE Software	`17.12.5b`	affected
Cisco	Cisco IOS XE Software	`17.15.3b`	affected
Cisco	Cisco IOS XE Software	`17.18.1z`	affected
Cisco	Cisco IOS XE Software	`17.9.7b`	affected
Cisco	Cisco IOS XE Software	`17.12.5c`	affected
Cisco	Cisco IOS XE Software	`26.1.1`	affected
Cisco	Cisco IOS XE Software	`17.18.1a`	affected
Cisco	Cisco IOS XE Software	`17.15.4a`	affected
Cisco	Cisco IOS XE Software	`17.18.2`	affected
Cisco	Cisco IOS XE Software	`17.18.1w`	affected
Cisco	Cisco IOS XE Software	`17.15.4b`	affected
Cisco	Cisco IOS XE Software	`17.12.6a`	affected
Cisco	Cisco IOS XE Software	`17.12.7`	affected
Cisco	Cisco IOS XE Software	`17.15.4c`	affected
Cisco	Cisco IOS XE Software	`17.9.9`	affected
Cisco	Cisco IOS XE Software	`17.12.5d`	affected
Cisco	Cisco IOS XE Software	`17.15.4s1`	affected
Cisco	Cisco IOS XE Software	`17.15.5`	affected
Cisco	Cisco IOS XE Software	`17.12.1z5`	affected
Cisco	Cisco IOS XE Software	`17.18.1x`	affected
Cisco	Cisco IOS XE Software	`17.12.1z6`	affected
Cisco	Cisco IOS XE Software	`17.15.4d`	affected
Cisco	Cisco IOS XE Software	`17.12.6b`	affected
Cisco	Cisco IOS XE Software	`17.4.1c`	affected
Cisco	Cisco IOS XE Software	`17.15.5a`	affected
Cisco	Cisco IOS XE Software	`17.18.1y`	affected
Cisco	Cisco IOS XE Software	`17.12.7a`	affected
Cisco	Cisco IOS XE Software	`17.18.3`	affected
Cisco	Cisco IOS XE Software	`17.12.7b`	affected
Cisco	Cisco IOS XE Software	`17.18.3a`	affected
Cisco	Cisco IOS XE Software	`26.1.1a`	affected
Cisco	Cisco IOS XE Software	`26.2.1ea`	affected

Weaknesses

CWE-126: Buffer Over-read

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: no
- Technical Impact: partial

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-PtAODAWW

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.