CVE-2026-20311: Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability

2 karet z 2 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-20311

EPSS 0.00 EPSS k 3. 11. 2026

Hodnocení závažnosti

6.3 CVSS 3.1 cisco

útok odkudkoli z internetu útok vyžaduje přípravu stačí běžný účet bez zásahu uživatele
dopad bez úniku dat beze změny dat úplný výpadek
přesah dopad i mimo zranitelnou součást

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

Cisco Advance Notification for Publication of August 5, 2026, Security Advisories

On August 5, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026 CVE-2026-20303CVE-2026-20304CVE-2026-20310CVE-2026-20312CVE-2026-20313 Critical 9.9 Cisco IOS XE Software Security Hardening Release: August 2026 CVE-2026-20267CVE-2026-20268CVE-2026-20269CVE-2026-20270CVE-2026-20271CVE-2026-20272CVE-2026-20273…

EPSS 0.01 CVE-2026-20028 CVE-2026-20124 CVE-2026-20198 CVE-2026-20263 CVE-2026-20289 CVE-2026-20294 CVE-2026-20301 CVE-2026-20311 Cisco US

· Cisco PSIRT · Cisco Advance Notification for Publication of August 5, 2026, Security Advisories

Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient error handling in the web-based management interface. An attacker could exploit this vulnerability by authenticating with a malformed certificate. A successful exploit could allow the attacker to cause the affected device to reload, resulting…

EPSS 0.00 CVE-2026-20311 Cisco US

· Cisco PSIRT · Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability