Action not permitted
Modal body text goes here.
Modal Title
Modal Body
GHSA-VFV8-7H88-HJ2W
Vulnerability from github – Published: 2026-08-05 18:31 – Updated: 2026-08-05 18:31
VLAI
Details
A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to improper handling of malformed XMCP packets. An attacker could exploit this vulnerability by sending a malformed XMCP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload unexpectedly, resulting in a DoS condition. The attacker does not need the XMCP client username to exploit this vulnerability.
Severity
8.6 (High)
{
"affected": [],
"aliases": [
"CVE-2026-20301"
],
"database_specific": {
"cwe_ids": [
"CWE-606"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-08-05T17:16:50Z",
"severity": "HIGH"
},
"details": "A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\n\nThis vulnerability is due to improper handling of malformed XMCP packets. An attacker could exploit this vulnerability by sending a malformed XMCP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload unexpectedly, resulting in a DoS condition. The attacker does not need the XMCP client username to exploit this vulnerability.",
"id": "GHSA-vfv8-7h88-hj2w",
"modified": "2026-08-05T18:31:39Z",
"published": "2026-08-05T18:31:39Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20301"
},
{
"type": "WEB",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xmcp-thbAr34t"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
CVE-2026-20301 (GCVE-0-2026-20301)
Vulnerability from cvelistv5 – Published: 2026-08-05 16:28 – Updated: 2026-08-05 17:45
VLAI
EPSS
VEX
Title
Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability
Summary
A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to improper handling of malformed XMCP packets. An attacker could exploit this vulnerability by sending a malformed XMCP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload unexpectedly, resulting in a DoS condition. The attacker does not need the XMCP client username to exploit this vulnerability.
Severity
8.6 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-606 - Unchecked Input for Loop Condition
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco IOS XE Software |
Affected:
17.2.1a
Affected: 16.12.1y Affected: 16.12.3s Affected: 16.7.1b Affected: 16.6.2 Affected: 16.6.5 Affected: 16.12.1w Affected: 16.9.1d Affected: 17.3.1 Affected: 16.9.4c Affected: 16.7.1 Affected: 17.2.1 Affected: 16.6.8 Affected: 16.9.1b Affected: 16.9.2s Affected: 16.12.4 Affected: 16.12.3a Affected: 17.1.1s Affected: 16.11.1a Affected: 16.7.2 Affected: 16.11.1b Affected: 16.9.1s Affected: 16.9.3h Affected: 16.9.1c Affected: 16.6.5a Affected: 16.6.3 Affected: 16.10.1f Affected: 17.2.1v Affected: 16.8.1e Affected: 16.9.3a Affected: 16.12.1a Affected: 16.12.1x Affected: 3.16.10aS Affected: 16.6.4s Affected: 16.10.1c Affected: 16.12.3 Affected: 16.11.2 Affected: 16.6.5b Affected: 16.12.2s Affected: 16.10.1b Affected: 16.7.3 Affected: 16.6.7 Affected: 16.9.6 Affected: 16.9.2 Affected: 16.10.1 Affected: 16.12.1t Affected: 16.9.1 Affected: 16.8.1a Affected: 3.18.8aSP Affected: 16.9.3s Affected: 16.6.7a Affected: 16.12.2 Affected: 16.11.1 Affected: 16.9.3 Affected: 16.11.1s Affected: 16.12.1 Affected: 17.1.1 Affected: 17.1.2 Affected: 16.10.1d Affected: 17.1.1t Affected: 16.9.4 Affected: 16.8.3 Affected: 16.12.2t Affected: 16.9.5 Affected: 16.8.1s Affected: 16.10.1e Affected: 16.8.2 Affected: 16.6.4 Affected: 16.8.1b Affected: 16.10.1a Affected: 16.12.1z Affected: 16.8.1c Affected: 16.9.1a Affected: 16.9.5f Affected: 16.6.4a Affected: 16.10.1g Affected: 16.8.1 Affected: 16.6.6 Affected: 16.9.2a Affected: 16.8.1d Affected: 16.10.3 Affected: 16.7.1a Affected: 16.11.1c Affected: 16.10.1s Affected: 17.2.1r Affected: 17.1.1a Affected: 16.10.2 Affected: 16.12.2a Affected: 16.12.1c Affected: 16.12.1s Affected: 16.7.4 Affected: 3.18.9SP Affected: 17.2.2 Affected: 3.11.3E Affected: 16.9.8 Affected: 16.9.7 Affected: 17.1.3 Affected: 17.3.1a Affected: 3.11.4E Affected: 17.3.2a Affected: 16.12.5 Affected: 17.3.1w Affected: 17.3.2 Affected: 3.11.3aE Affected: 17.4.1 Affected: 16.12.4a Affected: 17.4.1a Affected: 3.16.10bS Affected: 17.3.1x Affected: 17.3.3 Affected: 16.6.9 Affected: 17.2.3 Affected: 17.5.1 Affected: 16.12.1z1 Affected: 16.12.5a Affected: 17.4.1b Affected: 17.3.1z Affected: 16.12.5b Affected: 17.4.2 Affected: 17.3.3a Affected: 3.11.5E Affected: 17.3.5 Affected: 17.3.4 Affected: 17.5.1a Affected: 16.12.6 Affected: 17.6.1 Affected: 16.12.1z2 Affected: 16.6.10 Affected: 17.3.4a Affected: 17.6.1a Affected: 3.8.10cE Affected: 17.7.1 Affected: 17.6.1x Affected: 17.6.2 Affected: 16.12.6a Affected: 17.3.4c Affected: 17.4.2a Affected: 17.3.4b Affected: 17.7.1a Affected: 16.12.7 Affected: 17.8.1a Affected: 17.6.3a Affected: 17.6.3 Affected: 17.7.2 Affected: 17.7.1b Affected: 17.9.1w Affected: 17.3.5a Affected: 17.6.1z Affected: 3.8.10dE Affected: 16.12.8 Affected: 17.8.1 Affected: 17.9.1 Affected: 3.11.6E Affected: 17.6.4 Affected: 3.11.7E Affected: 17.3.5b Affected: 17.9.1a Affected: 17.3.6 Affected: 17.10.1 Affected: 3.11.8E Affected: 16.9.8a Affected: 17.6.1z1 Affected: 17.10.1a Affected: 17.9.2 Affected: 17.6.5 Affected: 17.9.1x Affected: 17.9.1y Affected: 16.9.8b Affected: 17.3.7 Affected: 17.9.2a Affected: 17.9.3 Affected: 16.12.9 Affected: 17.11.1 Affected: 17.10.1b Affected: 17.6.6 Affected: 17.9.1x1 Affected: 17.11.1a Affected: 17.9.3a Affected: 17.12.1 Affected: 17.3.8 Affected: 17.9.4 Affected: 16.12.10 Affected: 17.12.1w Affected: 17.9.1y1 Affected: 17.12.1a Affected: 3.11.9E Affected: 17.9.5 Affected: 17.13.1 Affected: 17.12.1x Affected: 17.12.2 Affected: 17.14.1 Affected: 17.9.4a Affected: 17.3.8a Affected: 17.6.6a Affected: 17.6.5a Affected: 17.6.7 Affected: 16.12.10a Affected: 17.15.1 Affected: 17.13.1a Affected: 17.12.2a Affected: 16.12.11 Affected: 17.12.3 Affected: 17.12.1y Affected: 3.11.10E Affected: 17.12.1z Affected: 17.9.5a Affected: 17.14.1a Affected: 17.9.5b Affected: 17.6.8 Affected: 16.12.12 Affected: 17.12.4 Affected: 17.9.6 Affected: 17.17.1 Affected: 17.16.1 Affected: 17.15.1w Affected: 17.12.3a Affected: 3.11.11E Affected: 17.9.5c Affected: 17.15.1a Affected: 17.12.1z1 Affected: 17.15.2 Affected: 17.15.1b Affected: 17.9.5d Affected: 17.15.1x Affected: 17.9.6a Affected: 17.12.1z2 Affected: 17.6.8a Affected: 17.16.1a Affected: 16.12.13 Affected: 17.15.3 Affected: 17.9.7 Affected: 17.12.5 Affected: 17.15.1y Affected: 17.9.5e Affected: 17.12.4a Affected: 17.15.2a Affected: 17.15.2c Affected: 17.15.2b Affected: 17.12.1z3 Affected: 17.9.5f Affected: 17.12.4b Affected: 3.11.12E Affected: 17.12.5a Affected: 17.18.1 Affected: 17.12.6 Affected: 17.12.1z4 Affected: 17.9.8 Affected: 17.9.7a Affected: 17.15.3a Affected: 17.15.4 Affected: 3.11.13E Affected: 17.12.5b Affected: 17.15.3b Affected: 16.12.14 Affected: 17.18.1z Affected: 17.9.7b Affected: 17.12.5c Affected: 26.1.1 Affected: 17.18.1a Affected: 17.15.4a Affected: 17.18.2 Affected: 17.18.1w Affected: 17.15.4b Affected: 17.12.6a Affected: 17.12.7 Affected: 17.15.4c Affected: 17.9.9 Affected: 17.12.5d Affected: 16.12.15 Affected: 17.15.4s1 Affected: 17.15.5 Affected: 17.12.1z5 Affected: 17.18.1x Affected: 17.12.1z6 Affected: 17.15.4d Affected: 17.12.6b Affected: 17.4.1c Affected: 3.11.14E Affected: 17.15.5a Affected: 17.18.1y Affected: 17.12.7a Affected: 17.18.3 Affected: 17.12.7b Affected: 17.18.3a Affected: 26.1.1a Affected: 26.2.1ea Affected: 16.12.16 |
|
| Cisco | IOS |
Affected:
15.2(7)E7
Affected: 15.2(8)E3 Affected: 15.7(3)M10 Affected: 15.8(3)M9 Affected: 15.9(3)M7 Affected: 15.2(7)E8 Affected: 15.2(8)E4 Affected: 15.9(3)M7a Affected: 15.2(2)E10c Affected: 15.2(4)E10d Affected: 15.9(3)M6a Affected: 15.9(3)M6b Affected: 15.5(1)SY10 Affected: 15.5(1)SY11 Affected: 15.2(6)E1a Affected: 15.4(1)SY4 Affected: 15.5(1)SY1 Affected: 15.2(2)E8 Affected: 15.2(6)E1 Affected: 15.7(3)M2 Affected: 15.2(4)E6 Affected: 15.2(1)SY6 Affected: 15.2(4)EA7 Affected: 15.2(6)E1s Affected: 15.7(3)M3 Affected: 15.8(3)M Affected: 15.2(1)SY7 Affected: 15.2(4)EA8 Affected: 15.8(3)M0a Affected: 15.2(2)E9 Affected: 15.2(6)E2 Affected: 15.5(1)SY2 Affected: 15.2(4)E7 Affected: 15.2(6)E2a Affected: 15.2(2)E9a Affected: 15.8(3)M0b Affected: 15.2(6)E2b Affected: 15.8(3)M1 Affected: 15.8(3)M1a Affected: 15.7(3)M4 Affected: 15.2(1)SY8 Affected: 15.2(4)E8 Affected: 15.5(1)SY3 Affected: 15.2(7)E Affected: 15.7(3)M4a Affected: 15.8(3)M2 Affected: 15.2(7)E0a Affected: 15.8(3)M2a Affected: 15.7(3)M4b Affected: 15.2(2)E10 Affected: 15.2(7)E0s Affected: 15.2(4)EA9 Affected: 15.2(7)E0b Affected: 15.2(6)E3 Affected: 15.9(3)M Affected: 15.8(3)M3 Affected: 15.5(1)SY4 Affected: 15.7(3)M5 Affected: 15.2(2)E10a Affected: 15.2(4)E9 Affected: 15.2(7)E1 Affected: 15.8(3)M3b Affected: 15.9(3)M0a Affected: 15.2(7)E1a Affected: 15.2(4)E10 Affected: 15.5(1)SY5 Affected: 15.2(4)EA9a Affected: 15.9(3)M1 Affected: 15.8(3)M4 Affected: 15.7(3)M6 Affected: 15.2(7)E2 Affected: 15.5(1)SY6 Affected: 15.2(7)E3 Affected: 15.8(3)M5 Affected: 15.7(3)M7 Affected: 15.9(3)M2 Affected: 15.2(7)E2b Affected: 15.9(3)M2a Affected: 15.2(4)E10a Affected: 15.2(7)E4 Affected: 15.5(1)SY7 Affected: 15.2(4)E10b Affected: 15.2(7)E3k Affected: 15.2(8)E Affected: 15.9(3)M3 Affected: 15.8(3)M6 Affected: 15.7(3)M8 Affected: 15.8(3)M7 Affected: 15.5(1)SY8 Affected: 15.2(7)E5 Affected: 15.2(8)E1 Affected: 15.9(3)M4 Affected: 15.2(8)E2 Affected: 15.2(4)E10c Affected: 15.7(3)M9 Affected: 15.2(2)E10b Affected: 15.2(7)E6 Affected: 15.9(3)M4a Affected: 15.5(1)SY9 Affected: 15.9(3)M5 Affected: 15.8(3)M8 Affected: 15.9(3)M6 Affected: 15.9(3)M9 Affected: 15.5(1)SY13 Affected: 15.9(3)M8b Affected: 15.2(7)E9 Affected: 15.5(1)SY12 Affected: 15.7(3)M10a Affected: 15.9(3)M8 Affected: 15.9(3)M8a Affected: 15.2(8)E5 Affected: 15.2(7)E10 Affected: 15.7(3)M10b Affected: 15.9(3)M3a Affected: 15.8(3)M3a Affected: 15.9(3)M3b Affected: 15.6(2)SP7 Affected: 15.6(2)SP5 Affected: 15.6(2)SP8 Affected: 15.6(2)SP6 Affected: 15.6(2)SP4 Affected: 15.6(2)SP9 Affected: 15.6(2)SP8a Affected: 15.9(3)M9a Affected: 15.2(8)E6 Affected: 15.9(3)M10 Affected: 15.2(7)E11 Affected: 15.5(1)SY14 Affected: 15.2(8)E7 Affected: 15.2(4)E10e Affected: 15.9(3)M11 Affected: 15.2(7)E12 Affected: 15.5(1)SY15 Affected: 15.2(8)E8 Affected: 15.5(1)SY16 Affected: 15.2(7)E13 Affected: 15.9(3)M12 Affected: 15.5(1)SY17 Affected: 15.2(7)E14 Affected: 15.9(3)M13 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20301",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T17:35:10.643585Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T17:45:13.376Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco IOS XE Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "17.2.1a"
},
{
"status": "affected",
"version": "16.12.1y"
},
{
"status": "affected",
"version": "16.12.3s"
},
{
"status": "affected",
"version": "16.7.1b"
},
{
"status": "affected",
"version": "16.6.2"
},
{
"status": "affected",
"version": "16.6.5"
},
{
"status": "affected",
"version": "16.12.1w"
},
{
"status": "affected",
"version": "16.9.1d"
},
{
"status": "affected",
"version": "17.3.1"
},
{
"status": "affected",
"version": "16.9.4c"
},
{
"status": "affected",
"version": "16.7.1"
},
{
"status": "affected",
"version": "17.2.1"
},
{
"status": "affected",
"version": "16.6.8"
},
{
"status": "affected",
"version": "16.9.1b"
},
{
"status": "affected",
"version": "16.9.2s"
},
{
"status": "affected",
"version": "16.12.4"
},
{
"status": "affected",
"version": "16.12.3a"
},
{
"status": "affected",
"version": "17.1.1s"
},
{
"status": "affected",
"version": "16.11.1a"
},
{
"status": "affected",
"version": "16.7.2"
},
{
"status": "affected",
"version": "16.11.1b"
},
{
"status": "affected",
"version": "16.9.1s"
},
{
"status": "affected",
"version": "16.9.3h"
},
{
"status": "affected",
"version": "16.9.1c"
},
{
"status": "affected",
"version": "16.6.5a"
},
{
"status": "affected",
"version": "16.6.3"
},
{
"status": "affected",
"version": "16.10.1f"
},
{
"status": "affected",
"version": "17.2.1v"
},
{
"status": "affected",
"version": "16.8.1e"
},
{
"status": "affected",
"version": "16.9.3a"
},
{
"status": "affected",
"version": "16.12.1a"
},
{
"status": "affected",
"version": "16.12.1x"
},
{
"status": "affected",
"version": "3.16.10aS"
},
{
"status": "affected",
"version": "16.6.4s"
},
{
"status": "affected",
"version": "16.10.1c"
},
{
"status": "affected",
"version": "16.12.3"
},
{
"status": "affected",
"version": "16.11.2"
},
{
"status": "affected",
"version": "16.6.5b"
},
{
"status": "affected",
"version": "16.12.2s"
},
{
"status": "affected",
"version": "16.10.1b"
},
{
"status": "affected",
"version": "16.7.3"
},
{
"status": "affected",
"version": "16.6.7"
},
{
"status": "affected",
"version": "16.9.6"
},
{
"status": "affected",
"version": "16.9.2"
},
{
"status": "affected",
"version": "16.10.1"
},
{
"status": "affected",
"version": "16.12.1t"
},
{
"status": "affected",
"version": "16.9.1"
},
{
"status": "affected",
"version": "16.8.1a"
},
{
"status": "affected",
"version": "3.18.8aSP"
},
{
"status": "affected",
"version": "16.9.3s"
},
{
"status": "affected",
"version": "16.6.7a"
},
{
"status": "affected",
"version": "16.12.2"
},
{
"status": "affected",
"version": "16.11.1"
},
{
"status": "affected",
"version": "16.9.3"
},
{
"status": "affected",
"version": "16.11.1s"
},
{
"status": "affected",
"version": "16.12.1"
},
{
"status": "affected",
"version": "17.1.1"
},
{
"status": "affected",
"version": "17.1.2"
},
{
"status": "affected",
"version": "16.10.1d"
},
{
"status": "affected",
"version": "17.1.1t"
},
{
"status": "affected",
"version": "16.9.4"
},
{
"status": "affected",
"version": "16.8.3"
},
{
"status": "affected",
"version": "16.12.2t"
},
{
"status": "affected",
"version": "16.9.5"
},
{
"status": "affected",
"version": "16.8.1s"
},
{
"status": "affected",
"version": "16.10.1e"
},
{
"status": "affected",
"version": "16.8.2"
},
{
"status": "affected",
"version": "16.6.4"
},
{
"status": "affected",
"version": "16.8.1b"
},
{
"status": "affected",
"version": "16.10.1a"
},
{
"status": "affected",
"version": "16.12.1z"
},
{
"status": "affected",
"version": "16.8.1c"
},
{
"status": "affected",
"version": "16.9.1a"
},
{
"status": "affected",
"version": "16.9.5f"
},
{
"status": "affected",
"version": "16.6.4a"
},
{
"status": "affected",
"version": "16.10.1g"
},
{
"status": "affected",
"version": "16.8.1"
},
{
"status": "affected",
"version": "16.6.6"
},
{
"status": "affected",
"version": "16.9.2a"
},
{
"status": "affected",
"version": "16.8.1d"
},
{
"status": "affected",
"version": "16.10.3"
},
{
"status": "affected",
"version": "16.7.1a"
},
{
"status": "affected",
"version": "16.11.1c"
},
{
"status": "affected",
"version": "16.10.1s"
},
{
"status": "affected",
"version": "17.2.1r"
},
{
"status": "affected",
"version": "17.1.1a"
},
{
"status": "affected",
"version": "16.10.2"
},
{
"status": "affected",
"version": "16.12.2a"
},
{
"status": "affected",
"version": "16.12.1c"
},
{
"status": "affected",
"version": "16.12.1s"
},
{
"status": "affected",
"version": "16.7.4"
},
{
"status": "affected",
"version": "3.18.9SP"
},
{
"status": "affected",
"version": "17.2.2"
},
{
"status": "affected",
"version": "3.11.3E"
},
{
"status": "affected",
"version": "16.9.8"
},
{
"status": "affected",
"version": "16.9.7"
},
{
"status": "affected",
"version": "17.1.3"
},
{
"status": "affected",
"version": "17.3.1a"
},
{
"status": "affected",
"version": "3.11.4E"
},
{
"status": "affected",
"version": "17.3.2a"
},
{
"status": "affected",
"version": "16.12.5"
},
{
"status": "affected",
"version": "17.3.1w"
},
{
"status": "affected",
"version": "17.3.2"
},
{
"status": "affected",
"version": "3.11.3aE"
},
{
"status": "affected",
"version": "17.4.1"
},
{
"status": "affected",
"version": "16.12.4a"
},
{
"status": "affected",
"version": "17.4.1a"
},
{
"status": "affected",
"version": "3.16.10bS"
},
{
"status": "affected",
"version": "17.3.1x"
},
{
"status": "affected",
"version": "17.3.3"
},
{
"status": "affected",
"version": "16.6.9"
},
{
"status": "affected",
"version": "17.2.3"
},
{
"status": "affected",
"version": "17.5.1"
},
{
"status": "affected",
"version": "16.12.1z1"
},
{
"status": "affected",
"version": "16.12.5a"
},
{
"status": "affected",
"version": "17.4.1b"
},
{
"status": "affected",
"version": "17.3.1z"
},
{
"status": "affected",
"version": "16.12.5b"
},
{
"status": "affected",
"version": "17.4.2"
},
{
"status": "affected",
"version": "17.3.3a"
},
{
"status": "affected",
"version": "3.11.5E"
},
{
"status": "affected",
"version": "17.3.5"
},
{
"status": "affected",
"version": "17.3.4"
},
{
"status": "affected",
"version": "17.5.1a"
},
{
"status": "affected",
"version": "16.12.6"
},
{
"status": "affected",
"version": "17.6.1"
},
{
"status": "affected",
"version": "16.12.1z2"
},
{
"status": "affected",
"version": "16.6.10"
},
{
"status": "affected",
"version": "17.3.4a"
},
{
"status": "affected",
"version": "17.6.1a"
},
{
"status": "affected",
"version": "3.8.10cE"
},
{
"status": "affected",
"version": "17.7.1"
},
{
"status": "affected",
"version": "17.6.1x"
},
{
"status": "affected",
"version": "17.6.2"
},
{
"status": "affected",
"version": "16.12.6a"
},
{
"status": "affected",
"version": "17.3.4c"
},
{
"status": "affected",
"version": "17.4.2a"
},
{
"status": "affected",
"version": "17.3.4b"
},
{
"status": "affected",
"version": "17.7.1a"
},
{
"status": "affected",
"version": "16.12.7"
},
{
"status": "affected",
"version": "17.8.1a"
},
{
"status": "affected",
"version": "17.6.3a"
},
{
"status": "affected",
"version": "17.6.3"
},
{
"status": "affected",
"version": "17.7.2"
},
{
"status": "affected",
"version": "17.7.1b"
},
{
"status": "affected",
"version": "17.9.1w"
},
{
"status": "affected",
"version": "17.3.5a"
},
{
"status": "affected",
"version": "17.6.1z"
},
{
"status": "affected",
"version": "3.8.10dE"
},
{
"status": "affected",
"version": "16.12.8"
},
{
"status": "affected",
"version": "17.8.1"
},
{
"status": "affected",
"version": "17.9.1"
},
{
"status": "affected",
"version": "3.11.6E"
},
{
"status": "affected",
"version": "17.6.4"
},
{
"status": "affected",
"version": "3.11.7E"
},
{
"status": "affected",
"version": "17.3.5b"
},
{
"status": "affected",
"version": "17.9.1a"
},
{
"status": "affected",
"version": "17.3.6"
},
{
"status": "affected",
"version": "17.10.1"
},
{
"status": "affected",
"version": "3.11.8E"
},
{
"status": "affected",
"version": "16.9.8a"
},
{
"status": "affected",
"version": "17.6.1z1"
},
{
"status": "affected",
"version": "17.10.1a"
},
{
"status": "affected",
"version": "17.9.2"
},
{
"status": "affected",
"version": "17.6.5"
},
{
"status": "affected",
"version": "17.9.1x"
},
{
"status": "affected",
"version": "17.9.1y"
},
{
"status": "affected",
"version": "16.9.8b"
},
{
"status": "affected",
"version": "17.3.7"
},
{
"status": "affected",
"version": "17.9.2a"
},
{
"status": "affected",
"version": "17.9.3"
},
{
"status": "affected",
"version": "16.12.9"
},
{
"status": "affected",
"version": "17.11.1"
},
{
"status": "affected",
"version": "17.10.1b"
},
{
"status": "affected",
"version": "17.6.6"
},
{
"status": "affected",
"version": "17.9.1x1"
},
{
"status": "affected",
"version": "17.11.1a"
},
{
"status": "affected",
"version": "17.9.3a"
},
{
"status": "affected",
"version": "17.12.1"
},
{
"status": "affected",
"version": "17.3.8"
},
{
"status": "affected",
"version": "17.9.4"
},
{
"status": "affected",
"version": "16.12.10"
},
{
"status": "affected",
"version": "17.12.1w"
},
{
"status": "affected",
"version": "17.9.1y1"
},
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "3.11.9E"
},
{
"status": "affected",
"version": "17.9.5"
},
{
"status": "affected",
"version": "17.13.1"
},
{
"status": "affected",
"version": "17.12.1x"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.14.1"
},
{
"status": "affected",
"version": "17.9.4a"
},
{
"status": "affected",
"version": "17.3.8a"
},
{
"status": "affected",
"version": "17.6.6a"
},
{
"status": "affected",
"version": "17.6.5a"
},
{
"status": "affected",
"version": "17.6.7"
},
{
"status": "affected",
"version": "16.12.10a"
},
{
"status": "affected",
"version": "17.15.1"
},
{
"status": "affected",
"version": "17.13.1a"
},
{
"status": "affected",
"version": "17.12.2a"
},
{
"status": "affected",
"version": "16.12.11"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.12.1y"
},
{
"status": "affected",
"version": "3.11.10E"
},
{
"status": "affected",
"version": "17.12.1z"
},
{
"status": "affected",
"version": "17.9.5a"
},
{
"status": "affected",
"version": "17.14.1a"
},
{
"status": "affected",
"version": "17.9.5b"
},
{
"status": "affected",
"version": "17.6.8"
},
{
"status": "affected",
"version": "16.12.12"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.9.6"
},
{
"status": "affected",
"version": "17.17.1"
},
{
"status": "affected",
"version": "17.16.1"
},
{
"status": "affected",
"version": "17.15.1w"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "3.11.11E"
},
{
"status": "affected",
"version": "17.9.5c"
},
{
"status": "affected",
"version": "17.15.1a"
},
{
"status": "affected",
"version": "17.12.1z1"
},
{
"status": "affected",
"version": "17.15.2"
},
{
"status": "affected",
"version": "17.15.1b"
},
{
"status": "affected",
"version": "17.9.5d"
},
{
"status": "affected",
"version": "17.15.1x"
},
{
"status": "affected",
"version": "17.9.6a"
},
{
"status": "affected",
"version": "17.12.1z2"
},
{
"status": "affected",
"version": "17.6.8a"
},
{
"status": "affected",
"version": "17.16.1a"
},
{
"status": "affected",
"version": "16.12.13"
},
{
"status": "affected",
"version": "17.15.3"
},
{
"status": "affected",
"version": "17.9.7"
},
{
"status": "affected",
"version": "17.12.5"
},
{
"status": "affected",
"version": "17.15.1y"
},
{
"status": "affected",
"version": "17.9.5e"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.15.2a"
},
{
"status": "affected",
"version": "17.15.2c"
},
{
"status": "affected",
"version": "17.15.2b"
},
{
"status": "affected",
"version": "17.12.1z3"
},
{
"status": "affected",
"version": "17.9.5f"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "3.11.12E"
},
{
"status": "affected",
"version": "17.12.5a"
},
{
"status": "affected",
"version": "17.18.1"
},
{
"status": "affected",
"version": "17.12.6"
},
{
"status": "affected",
"version": "17.12.1z4"
},
{
"status": "affected",
"version": "17.9.8"
},
{
"status": "affected",
"version": "17.9.7a"
},
{
"status": "affected",
"version": "17.15.3a"
},
{
"status": "affected",
"version": "17.15.4"
},
{
"status": "affected",
"version": "3.11.13E"
},
{
"status": "affected",
"version": "17.12.5b"
},
{
"status": "affected",
"version": "17.15.3b"
},
{
"status": "affected",
"version": "16.12.14"
},
{
"status": "affected",
"version": "17.18.1z"
},
{
"status": "affected",
"version": "17.9.7b"
},
{
"status": "affected",
"version": "17.12.5c"
},
{
"status": "affected",
"version": "26.1.1"
},
{
"status": "affected",
"version": "17.18.1a"
},
{
"status": "affected",
"version": "17.15.4a"
},
{
"status": "affected",
"version": "17.18.2"
},
{
"status": "affected",
"version": "17.18.1w"
},
{
"status": "affected",
"version": "17.15.4b"
},
{
"status": "affected",
"version": "17.12.6a"
},
{
"status": "affected",
"version": "17.12.7"
},
{
"status": "affected",
"version": "17.15.4c"
},
{
"status": "affected",
"version": "17.9.9"
},
{
"status": "affected",
"version": "17.12.5d"
},
{
"status": "affected",
"version": "16.12.15"
},
{
"status": "affected",
"version": "17.15.4s1"
},
{
"status": "affected",
"version": "17.15.5"
},
{
"status": "affected",
"version": "17.12.1z5"
},
{
"status": "affected",
"version": "17.18.1x"
},
{
"status": "affected",
"version": "17.12.1z6"
},
{
"status": "affected",
"version": "17.15.4d"
},
{
"status": "affected",
"version": "17.12.6b"
},
{
"status": "affected",
"version": "17.4.1c"
},
{
"status": "affected",
"version": "3.11.14E"
},
{
"status": "affected",
"version": "17.15.5a"
},
{
"status": "affected",
"version": "17.18.1y"
},
{
"status": "affected",
"version": "17.12.7a"
},
{
"status": "affected",
"version": "17.18.3"
},
{
"status": "affected",
"version": "17.12.7b"
},
{
"status": "affected",
"version": "17.18.3a"
},
{
"status": "affected",
"version": "26.1.1a"
},
{
"status": "affected",
"version": "26.2.1ea"
},
{
"status": "affected",
"version": "16.12.16"
}
]
},
{
"defaultStatus": "unknown",
"product": "IOS",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "15.2(7)E7"
},
{
"status": "affected",
"version": "15.2(8)E3"
},
{
"status": "affected",
"version": "15.7(3)M10"
},
{
"status": "affected",
"version": "15.8(3)M9"
},
{
"status": "affected",
"version": "15.9(3)M7"
},
{
"status": "affected",
"version": "15.2(7)E8"
},
{
"status": "affected",
"version": "15.2(8)E4"
},
{
"status": "affected",
"version": "15.9(3)M7a"
},
{
"status": "affected",
"version": "15.2(2)E10c"
},
{
"status": "affected",
"version": "15.2(4)E10d"
},
{
"status": "affected",
"version": "15.9(3)M6a"
},
{
"status": "affected",
"version": "15.9(3)M6b"
},
{
"status": "affected",
"version": "15.5(1)SY10"
},
{
"status": "affected",
"version": "15.5(1)SY11"
},
{
"status": "affected",
"version": "15.2(6)E1a"
},
{
"status": "affected",
"version": "15.4(1)SY4"
},
{
"status": "affected",
"version": "15.5(1)SY1"
},
{
"status": "affected",
"version": "15.2(2)E8"
},
{
"status": "affected",
"version": "15.2(6)E1"
},
{
"status": "affected",
"version": "15.7(3)M2"
},
{
"status": "affected",
"version": "15.2(4)E6"
},
{
"status": "affected",
"version": "15.2(1)SY6"
},
{
"status": "affected",
"version": "15.2(4)EA7"
},
{
"status": "affected",
"version": "15.2(6)E1s"
},
{
"status": "affected",
"version": "15.7(3)M3"
},
{
"status": "affected",
"version": "15.8(3)M"
},
{
"status": "affected",
"version": "15.2(1)SY7"
},
{
"status": "affected",
"version": "15.2(4)EA8"
},
{
"status": "affected",
"version": "15.8(3)M0a"
},
{
"status": "affected",
"version": "15.2(2)E9"
},
{
"status": "affected",
"version": "15.2(6)E2"
},
{
"status": "affected",
"version": "15.5(1)SY2"
},
{
"status": "affected",
"version": "15.2(4)E7"
},
{
"status": "affected",
"version": "15.2(6)E2a"
},
{
"status": "affected",
"version": "15.2(2)E9a"
},
{
"status": "affected",
"version": "15.8(3)M0b"
},
{
"status": "affected",
"version": "15.2(6)E2b"
},
{
"status": "affected",
"version": "15.8(3)M1"
},
{
"status": "affected",
"version": "15.8(3)M1a"
},
{
"status": "affected",
"version": "15.7(3)M4"
},
{
"status": "affected",
"version": "15.2(1)SY8"
},
{
"status": "affected",
"version": "15.2(4)E8"
},
{
"status": "affected",
"version": "15.5(1)SY3"
},
{
"status": "affected",
"version": "15.2(7)E"
},
{
"status": "affected",
"version": "15.7(3)M4a"
},
{
"status": "affected",
"version": "15.8(3)M2"
},
{
"status": "affected",
"version": "15.2(7)E0a"
},
{
"status": "affected",
"version": "15.8(3)M2a"
},
{
"status": "affected",
"version": "15.7(3)M4b"
},
{
"status": "affected",
"version": "15.2(2)E10"
},
{
"status": "affected",
"version": "15.2(7)E0s"
},
{
"status": "affected",
"version": "15.2(4)EA9"
},
{
"status": "affected",
"version": "15.2(7)E0b"
},
{
"status": "affected",
"version": "15.2(6)E3"
},
{
"status": "affected",
"version": "15.9(3)M"
},
{
"status": "affected",
"version": "15.8(3)M3"
},
{
"status": "affected",
"version": "15.5(1)SY4"
},
{
"status": "affected",
"version": "15.7(3)M5"
},
{
"status": "affected",
"version": "15.2(2)E10a"
},
{
"status": "affected",
"version": "15.2(4)E9"
},
{
"status": "affected",
"version": "15.2(7)E1"
},
{
"status": "affected",
"version": "15.8(3)M3b"
},
{
"status": "affected",
"version": "15.9(3)M0a"
},
{
"status": "affected",
"version": "15.2(7)E1a"
},
{
"status": "affected",
"version": "15.2(4)E10"
},
{
"status": "affected",
"version": "15.5(1)SY5"
},
{
"status": "affected",
"version": "15.2(4)EA9a"
},
{
"status": "affected",
"version": "15.9(3)M1"
},
{
"status": "affected",
"version": "15.8(3)M4"
},
{
"status": "affected",
"version": "15.7(3)M6"
},
{
"status": "affected",
"version": "15.2(7)E2"
},
{
"status": "affected",
"version": "15.5(1)SY6"
},
{
"status": "affected",
"version": "15.2(7)E3"
},
{
"status": "affected",
"version": "15.8(3)M5"
},
{
"status": "affected",
"version": "15.7(3)M7"
},
{
"status": "affected",
"version": "15.9(3)M2"
},
{
"status": "affected",
"version": "15.2(7)E2b"
},
{
"status": "affected",
"version": "15.9(3)M2a"
},
{
"status": "affected",
"version": "15.2(4)E10a"
},
{
"status": "affected",
"version": "15.2(7)E4"
},
{
"status": "affected",
"version": "15.5(1)SY7"
},
{
"status": "affected",
"version": "15.2(4)E10b"
},
{
"status": "affected",
"version": "15.2(7)E3k"
},
{
"status": "affected",
"version": "15.2(8)E"
},
{
"status": "affected",
"version": "15.9(3)M3"
},
{
"status": "affected",
"version": "15.8(3)M6"
},
{
"status": "affected",
"version": "15.7(3)M8"
},
{
"status": "affected",
"version": "15.8(3)M7"
},
{
"status": "affected",
"version": "15.5(1)SY8"
},
{
"status": "affected",
"version": "15.2(7)E5"
},
{
"status": "affected",
"version": "15.2(8)E1"
},
{
"status": "affected",
"version": "15.9(3)M4"
},
{
"status": "affected",
"version": "15.2(8)E2"
},
{
"status": "affected",
"version": "15.2(4)E10c"
},
{
"status": "affected",
"version": "15.7(3)M9"
},
{
"status": "affected",
"version": "15.2(2)E10b"
},
{
"status": "affected",
"version": "15.2(7)E6"
},
{
"status": "affected",
"version": "15.9(3)M4a"
},
{
"status": "affected",
"version": "15.5(1)SY9"
},
{
"status": "affected",
"version": "15.9(3)M5"
},
{
"status": "affected",
"version": "15.8(3)M8"
},
{
"status": "affected",
"version": "15.9(3)M6"
},
{
"status": "affected",
"version": "15.9(3)M9"
},
{
"status": "affected",
"version": "15.5(1)SY13"
},
{
"status": "affected",
"version": "15.9(3)M8b"
},
{
"status": "affected",
"version": "15.2(7)E9"
},
{
"status": "affected",
"version": "15.5(1)SY12"
},
{
"status": "affected",
"version": "15.7(3)M10a"
},
{
"status": "affected",
"version": "15.9(3)M8"
},
{
"status": "affected",
"version": "15.9(3)M8a"
},
{
"status": "affected",
"version": "15.2(8)E5"
},
{
"status": "affected",
"version": "15.2(7)E10"
},
{
"status": "affected",
"version": "15.7(3)M10b"
},
{
"status": "affected",
"version": "15.9(3)M3a"
},
{
"status": "affected",
"version": "15.8(3)M3a"
},
{
"status": "affected",
"version": "15.9(3)M3b"
},
{
"status": "affected",
"version": "15.6(2)SP7"
},
{
"status": "affected",
"version": "15.6(2)SP5"
},
{
"status": "affected",
"version": "15.6(2)SP8"
},
{
"status": "affected",
"version": "15.6(2)SP6"
},
{
"status": "affected",
"version": "15.6(2)SP4"
},
{
"status": "affected",
"version": "15.6(2)SP9"
},
{
"status": "affected",
"version": "15.6(2)SP8a"
},
{
"status": "affected",
"version": "15.9(3)M9a"
},
{
"status": "affected",
"version": "15.2(8)E6"
},
{
"status": "affected",
"version": "15.9(3)M10"
},
{
"status": "affected",
"version": "15.2(7)E11"
},
{
"status": "affected",
"version": "15.5(1)SY14"
},
{
"status": "affected",
"version": "15.2(8)E7"
},
{
"status": "affected",
"version": "15.2(4)E10e"
},
{
"status": "affected",
"version": "15.9(3)M11"
},
{
"status": "affected",
"version": "15.2(7)E12"
},
{
"status": "affected",
"version": "15.5(1)SY15"
},
{
"status": "affected",
"version": "15.2(8)E8"
},
{
"status": "affected",
"version": "15.5(1)SY16"
},
{
"status": "affected",
"version": "15.2(7)E13"
},
{
"status": "affected",
"version": "15.9(3)M12"
},
{
"status": "affected",
"version": "15.5(1)SY17"
},
{
"status": "affected",
"version": "15.2(7)E14"
},
{
"status": "affected",
"version": "15.9(3)M13"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper handling of malformed XMCP packets. An attacker could exploit this vulnerability by sending a malformed XMCP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload unexpectedly, resulting in a DoS condition. The attacker does not need the XMCP client username to exploit this vulnerability."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-606",
"description": "Unchecked Input for Loop Condition",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T16:28:37.635Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ios-xmcp-thbAr34t",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xmcp-thbAr34t"
}
],
"source": {
"advisory": "cisco-sa-ios-xmcp-thbAr34t",
"defects": [
"CSCwu20827"
],
"discovery": "INTERNAL"
},
"title": "Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20301",
"datePublished": "2026-08-05T16:28:37.635Z",
"dateReserved": "2025-10-08T11:59:15.408Z",
"dateUpdated": "2026-08-05T17:45:13.376Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…