Cisco IOS XE vulnerabilities and fixes

CVEs that mention Cisco IOS XE, ranked by priority. 11 tracked.

Cisco IOS XE has 11 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 9. Most recent: 2026-08-05. Highest priority: CVE-2026-20272 (score 54/100).

• CVE-2026-20272 CRITICAL 9.8 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20263 HIGH 8.6 MITIGATE A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow
• CVE-2026-20268 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20269 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20270 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20271 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20273 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20267 CRITICAL 9.0 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng
• CVE-2026-20124 HIGH 7.7 MITIGATE A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allo
• CVE-2026-20311 MEDIUM 6.3 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, r
• CVE-2026-20308 MEDIUM 4.3 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, r

FAQ

How do I fix Cisco IOS XE vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Cisco IOS XE being exploited right now?

None of the tracked Cisco IOS XE CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Cisco IOS XE CVE should I patch first?

CVE-2026-20272 currently ranks highest (54/100): As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software eng.

← Back to latest CVEs