AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

CiscoCVE-2026-20263

Cisco IOS XE Software: denial of service

Cisco

CVE-2026-20263 · Published Aug 5, 2026 · updated Sep 28, 2026

High8.6
No fix yet
Cisco advisory

A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper handling when parsing a specific BEEP SOAP request. An attacker could exploit this vulnerability by sending a specific BEEP SOAP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

Affected versions

PackageAffectedFixed in
Cisco IOS XE Software
Product
<= 17.2.1aNo fix yet
<= 16.12.1yNo fix yet
<= 16.12.3sNo fix yet
<= 16.7.1bNo fix yet
Details and references

More Cisco advisories

All Cisco