CVE Tools
Track your stack

Cisco IOS XE

600 CVEs tracked. 30 of them are in CISA KEV.

This hub aggregates every CVE we track for Cisco IOS XE, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Cisco IOS XE CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Cisco IOS XE CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-028
2025-030
2025-040
2025-0521
2025-060
2025-070
2025-080
2025-0912
2025-100
2025-110
2025-120
2026-010
2026-020
2026-0310
2026-040
2026-050
2026-060
2026-070
2026-0810
2026-090
2026-100

Severity

How the 600 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical234%
  • High34457%
  • Medium23239%
  • Low10%

Latest CVEs

The 15 most recently published vulnerabilities affecting Cisco IOS XE.

  1. CVE-2026-20301Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability8.6
  2. CVE-2026-20273Cisco IOS XE Software Security Hardening Release8.6
  3. CVE-2026-20272Cisco IOS XE Software Security Hardening Release9.8
  4. CVE-2026-20271Cisco IOS XE Software Security Hardening Release8.6
  5. CVE-2026-20270Cisco IOS XE Software Security Hardening Release8.6
  6. CVE-2026-20269Cisco IOS XE Software Security Hardening Release8.6
  7. CVE-2026-20268Cisco IOS XE Software Security Hardening Release8.6
  8. CVE-2026-20267Cisco IOS XE Software Security Hardening Release9.0
  9. CVE-2026-20263Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability8.6
  10. CVE-2026-20124Cisco IOS XE Software SNMP Denial of Service Vulnerability7.7
  11. CVE-2026-20112A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site...4.8
  12. CVE-2026-20113A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a carriage return...5.3
  13. CVE-2026-20114A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access management APIs that w...5.4
  14. CVE-2026-20115A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information. This vulnerability is due to a device configurat...6.1
  15. CVE-2026-20110A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists bec...6.5

Product grouping is registry-driven, with AI assist and human review. How it works