What’s Vulnerable › Products

Cisco IOS XE vulnerabilities

579 known vulnerabilities, 28 confirmed exploited in the wild (CISA KEV), 69 published in the last 12 months.

Check whether your Cisco IOS XE version is affected

Exploited Cisco IOS XE vulnerabilities

• CVE-2025-20352 — Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
• CVE-2023-20273 — Cisco IOS XE Web UI Command Injection Vulnerability
• CVE-2023-20198 — Cisco IOS XE Web UI Privilege Escalation Vulnerability
• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability
• CVE-2023-20109 — Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
• CVE-2016-6415 — Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
• CVE-2017-6742 — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
• CVE-2017-3881 — Cisco IOS and IOS XE Remote Code Execution Vulnerability
• CVE-2018-0175 — Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
• CVE-2018-0174 — Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
• CVE-2018-0173 — Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
• CVE-2018-0172 — Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
• CVE-2018-0167 — Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
• CVE-2018-0159 — Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
• CVE-2018-0158 — Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
• CVE-2018-0156 — Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
• CVE-2018-0155 — Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
• CVE-2018-0151 — Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
• CVE-2017-6743 — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
• CVE-2017-6740 — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
• CVE-2017-6739 — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
• CVE-2017-6738 — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
• CVE-2017-6737 — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
• CVE-2017-6736 — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
• CVE-2017-6663 — Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability

Latest Cisco IOS XE vulnerabilities

• CVE-2026-20311 — Cisco IOS XE Software Web UI Denial of Service Vulnerability (CVSS 6.3)
• CVE-2026-20308 — Cisco IOS XE Software Web-Based Management Interface Vulnerability (CVSS 4.3)
• CVE-2026-20301 — Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability (CVSS 8.6)
• CVE-2026-20273 — Cisco IOS XE Software Security Hardening Release (CVSS 8.6)
• CVE-2026-20272 — Cisco IOS XE Software Security Hardening Release (CVSS 9.8)
• CVE-2026-20271 — Cisco IOS XE Software Security Hardening Release (CVSS 8.6)
• CVE-2026-20270 — Cisco IOS XE Software Security Hardening Release (CVSS 8.6)
• CVE-2026-20269 — Cisco IOS XE Software Security Hardening Release (CVSS 8.6)
• CVE-2026-20268 — Cisco IOS XE Software Security Hardening Release (CVSS 8.6)
• CVE-2026-20267 — Cisco IOS XE Software Security Hardening Release (CVSS 9.0)
• CVE-2026-20263 — Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability (CVSS 8.6)
• CVE-2026-20124 — Cisco IOS XE Software SNMP Denial of Service Vulnerability (CVSS 7.7)
• CVE-2026-20125 — (CVSS 7.7)
• CVE-2026-20115 — (CVSS 6.1)
• CVE-2026-20114 — (CVSS 5.4)
• CVE-2026-20113 — (CVSS 5.3)
• CVE-2026-20112 — (CVSS 4.8)
• CVE-2026-20110 — (CVSS 6.5)
• CVE-2026-20104 — (CVSS 6.1)
• CVE-2026-20086 — (CVSS 8.6)
• CVE-2026-20084 — (CVSS 8.6)
• CVE-2026-20083 — (CVSS 6.5)
• CVE-2026-20012 — (CVSS 8.6)
• CVE-2026-20004 — (CVSS 7.4)
• CVE-2025-20363 — (CVSS 9.0)