CVE-2026-20125
HIGH
7.7
CVSS Score
Published: March 25, 2026 at 04:04 PM UTC
Updated: June 17, 2026 at 10:17 AM UTC
2 products affected across 1 vendorIOSIOS Xe
Using IOS by Cisco?
Get instant alerts when new vulnerabilities affect IOS - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.7
Exploit prediction
EPSS 0.3%
SSVC
No known exploit
Description
A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending malformed HTTP requests to an affected device. A successful exploit could allow the attacker to cause a watchdog timer to expire and the device to reload, resulting in a DoS condition. To exploit this vulnerability, the attacker must have a valid user account.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
12.2(25)EZ12.2(25)EZ112.2(33)CY12.2(33)CY112.2(33)CY212.2(33)SCG12.2(33)SCG112.2(33)SCG212.2(33)SCG312.2(33)SCG412.2(33)SCG512.2(33)SCG612.2(33)SCG712.2(33)SCH12.2(33)SCH0a12.2(33)SCH112.2(33)SCH212.2(33)SCH2a12.2(33)SCH312.2(33)SCH412.2(33)SCH512.2(33)SCH612.2(33)SCI12.2(33)SCI112.2(33)SCI1a12.2(33)SCI212.2(33)SCI2a12.2(33)SCI312.2(33)SCJ12.2(33)SCJ1a12.2(33)SCJ212.2(33)SCJ2a12.2(33)SCJ2b12.2(33)SCJ2c12.2(33)SCJ312.2(33)SCJ412.2(33)SRE12.2(33)SRE0a12.2(33)SRE112.2(33)SRE1012.2(33)SRE1112.2(33)SRE1212.2(33)SRE1312.2(33)SRE1412.2(33)SRE1512.2(33)SRE15a12.2(33)SRE212.2(33)SRE312.2(33)SRE412.2(33)SRE512.2(33)SRE612.2(33)SRE712.2(33)SRE7a12.2(33)SRE812.2(33)SRE912.2(33)SRE9a12.2(33)SXI12.2(33)SXI112.2(33)SXI1012.2(33)SXI1112.2(33)SXI1212.2(33)SXI1312.2(33)SXI1412.2(33)SXI212.2(33)SXI2a12.2(33)SXI312.2(33)SXI412.2(33)SXI4a12.2(33)SXI512.2(33)SXI612.2(33)SXI712.2(33)SXI812.2(33)SXI8a12.2(33)SXI912.2(33)SXJ12.2(33)SXJ112.2(33)SXJ1012.2(33)SXJ212.2(33)SXJ312.2(33)SXJ412.2(33)SXJ512.2(33)SXJ612.2(33)SXJ712.2(33)SXJ812.2(33)SXJ912.2(44)SQ12.2(44)SQ212.2(50)SQ12.2(50)SQ112.2(50)SQ212.2(50)SQ312.2(50)SQ412.2(50)SQ512.2(50)SQ612.2(50)SQ712.2(53)EZ12.2(55)EZ12.2(55)SE12.2(55)SE112.2(55)SE1012.2(55)SE1112.2(55)SE1212.2(55)SE1312.2(55)SE212.2(55)SE312.2(55)SE412.2(55)SE512.2(55)SE612.2(55)SE712.2(55)SE812.2(55)SE912.2(58)EZ12.2(58)SE12.2(58)SE112.2(58)SE212.2(60)EZ12.2(60)EZ112.2(60)EZ1012.2(60)EZ1112.2(60)EZ1212.2(60)EZ1312.2(60)EZ1412.2(60)EZ1512.2(60)EZ212.2(60)EZ312.2(60)EZ412.2(60)EZ512.2(60)EZ612.2(60)EZ712.2(60)EZ812.2(60)EZ912.4(24)MDB12.4(24)MDB112.4(24)MDB1012.4(24)MDB1112.4(24)MDB1212.4(24)MDB1312.4(24)MDB1412.4(24)MDB1512.4(24)MDB1612.4(24)MDB1712.4(24)MDB1812.4(24)MDB1912.4(24)MDB312.4(24)MDB412.4(24)MDB512.4(24)MDB5a12.4(24)MDB612.4(24)MDB712.4(24)MDB812.4(24)MDB912.4(25d)JAX12.4(25d)JAX112.4(25e)JAM12.4(25e)JAM212.4(25e)JAM312.4(25e)JAM412.4(25e)JAM512.4(25e)JAM612.4(25e)JAO12.4(25e)JAO112.4(25e)JAO212.4(25e)JAO312.4(25e)JAO412.4(25e)JAO512.4(25e)JAO612.4(25e)JAP12.4(25e)JAP112.4(25e)JAP1012.4(25e)JAP1112.4(25e)JAP1212.4(25e)JAP1n12.4(25e)JAP412.4(25e)JAP512.4(25e)JAP612.4(25e)JAP712.4(25e)JAP812.4(25e)JAX12.4(25e)JAX112.4(25e)JAX212.4(25e)JAZ12.4(3)JK12.4(3)JK112.4(3)JK212.4(3)JK312.4(3)JK415.0(1)EY15.0(1)EY115.0(1)EY215.0(1)SE15.0(1)SE115.0(1)SE215.0(1)SE315.0(1)SY15.0(1)SY115.0(1)SY1015.0(1)SY215.0(1)SY315.0(1)SY415.0(1)SY515.0(1)SY615.0(1)SY715.0(1)SY7a15.0(1)SY815.0(1)SY915.0(2)EA15.0(2)EA115.0(2)EJ15.0(2)EJ115.0(2)EK15.0(2)EK115.0(2)EY15.0(2)EY115.0(2)EY215.0(2)EY315.0(2)SE15.0(2)SE115.0(2)SE1015.0(2)SE10a15.0(2)SE1115.0(2)SE1215.0(2)SE1315.0(2)SE215.0(2)SE315.0(2)SE415.0(2)SE515.0(2)SE615.0(2)SE715.0(2)SE815.0(2)SE915.0(2)SG15.0(2)SG115.0(2)SG1015.0(2)SG1115.0(2)SG215.0(2)SG315.0(2)SG415.0(2)SG515.0(2)SG615.0(2)SG715.0(2)SG815.0(2)SG915.0(2)SQD15.0(2)SQD115.0(2)SQD215.0(2)SQD315.0(2)SQD415.0(2)SQD515.0(2)SQD615.0(2)SQD715.0(2)SQD815.1(1)S15.1(1)S115.1(1)S215.1(1)SG15.1(1)SG115.1(1)SG215.1(1)SY15.1(1)SY115.1(1)SY215.1(1)SY315.1(1)SY415.1(1)SY515.1(1)SY615.1(2)GC15.1(2)GC115.1(2)GC215.1(2)S15.1(2)S115.1(2)S215.1(2)SG15.1(2)SG115.1(2)SG215.1(2)SG315.1(2)SG415.1(2)SG515.1(2)SG615.1(2)SG715.1(2)SG815.1(2)SY15.1(2)SY115.1(2)SY1015.1(2)SY1115.1(2)SY1215.1(2)SY1315.1(2)SY1415.1(2)SY1515.1(2)SY1615.1(2)SY215.1(2)SY315.1(2)SY415.1(2)SY4a15.1(2)SY515.1(2)SY615.1(2)SY715.1(2)SY815.1(2)SY915.1(3)S15.1(3)S0a15.1(3)S115.1(3)S215.1(3)S315.1(3)S415.1(3)S515.1(3)S5a15.1(3)S615.1(4)GC15.1(4)GC115.1(4)GC215.1(4)M15.1(4)M115.1(4)M1015.1(4)M215.1(4)M315.1(4)M3a15.1(4)M415.1(4)M515.1(4)M615.1(4)M715.1(4)M815.1(4)M915.2(1)E15.2(1)E115.2(1)E215.2(1)E315.2(1)EY15.2(1)GC15.2(1)GC115.2(1)GC215.2(1)S15.2(1)S115.2(1)S215.2(1)SY15.2(1)SY0a15.2(1)SY115.2(1)SY1a15.2(1)SY215.2(1)SY315.2(1)SY415.2(1)SY515.2(1)SY615.2(1)SY715.2(1)SY815.2(2)E15.2(2)E115.2(2)E1015.2(2)E215.2(2)E315.2(2)E415.2(2)E515.2(2)E5a15.2(2)E5b15.2(2)E615.2(2)E715.2(2)E815.2(2)E915.2(2)EA15.2(2)EA115.2(2)EA215.2(2)EA315.2(2)GC15.2(2)JAX15.2(2)JB15.2(2)JB215.2(2)JB315.2(2)JB415.2(2)JB515.2(2)JB615.2(2)S15.2(2)S0a15.2(2)S0c15.2(2)S115.2(2)S215.2(2)SY15.2(2)SY115.2(2)SY215.2(2)SY315.2(2a)E115.2(2a)E215.2(3)E15.2(3)E115.2(3)E215.2(3)E315.2(3)E415.2(3)EA15.2(3)GC15.2(3)GC115.2(3a)E15.2(4)E15.2(4)E115.2(4)E1015.2(4)E10a15.2(4)E10d15.2(4)E215.2(4)E315.2(4)E415.2(4)E515.2(4)E615.2(4)E715.2(4)E815.2(4)E915.2(4)EA15.2(4)EA115.2(4)EA315.2(4)EA415.2(4)EA515.2(4)EA615.2(4)EA715.2(4)EA815.2(4)EA915.2(4)EA9a15.2(4)EC115.2(4)EC215.2(4)GC15.2(4)GC115.2(4)GC215.2(4)GC315.2(4)JB15.2(4)JB115.2(4)JB215.2(4)JB315.2(4)JB3a15.2(4)JB3b15.2(4)JB3h15.2(4)JB3s15.2(4)JB415.2(4)JB515.2(4)JB5m15.2(4)JB615.2(4)JN15.2(4)M15.2(4)M115.2(4)M1015.2(4)M1115.2(4)M215.2(4)M315.2(4)M415.2(4)M515.2(4)M615.2(4)M6a15.2(4)M715.2(4)M815.2(4)M915.2(4)S15.2(4)S115.2(4)S215.2(4)S315.2(4)S3a15.2(4)S415.2(4)S4a15.2(4)S515.2(4)S615.2(4)S715.2(5)E15.2(5)E115.2(5)E215.2(5)E2c15.2(5)EA15.2(5)EX15.2(5a)E15.2(5a)E115.2(5b)E15.2(5c)E15.2(6)E15.2(6)E0a15.2(6)E0c15.2(6)E115.2(6)E215.2(6)E2a15.2(6)E2b15.2(6)E315.2(7)E15.2(7)E0a15.2(7)E0b15.2(7)E0s15.2(7)E115.2(7)E1015.2(7)E1115.2(7)E1215.2(7)E1315.2(7)E1a15.2(7)E215.2(7)E2a15.2(7)E315.2(7)E3k15.2(7)E415.2(7)E515.2(7)E615.2(7)E715.2(7)E815.2(7)E915.2(7a)E0b15.2(7b)E0b15.2(8)E15.2(8)E115.2(8)E215.2(8)E315.2(8)E415.2(8)E515.2(8)E615.2(8)E715.2(8)E815.3(1)S15.3(1)S115.3(1)S215.3(1)SY15.3(1)SY115.3(1)SY215.3(1)T15.3(1)T115.3(1)T215.3(1)T315.3(1)T415.3(2)S15.3(2)S115.3(2)S215.3(2)T15.3(2)T115.3(2)T215.3(2)T315.3(2)T415.3(3)JA15.3(3)JA115.3(3)JA1015.3(3)JA1115.3(3)JA1215.3(3)JA1m15.3(3)JA415.3(3)JA515.3(3)JA615.3(3)JA715.3(3)JA815.3(3)JAA15.3(3)JAA1115.3(3)JAA1215.3(3)JAB15.3(3)JAX15.3(3)JAX115.3(3)JAX215.3(3)JB15.3(3)JBB15.3(3)JBB115.3(3)JBB215.3(3)JBB415.3(3)JBB515.3(3)JBB615.3(3)JBB6a15.3(3)JBB815.3(3)JC15.3(3)JC115.3(3)JC1415.3(3)JC215.3(3)JC315.3(3)JC415.3(3)JC515.3(3)JC615.3(3)JC815.3(3)JC915.3(3)JCA715.3(3)JCA815.3(3)JCA915.3(3)JD15.3(3)JD1115.3(3)JD1315.3(3)JD1415.3(3)JD1615.3(3)JD1715.3(3)JD215.3(3)JD315.3(3)JD415.3(3)JD515.3(3)JD615.3(3)JD715.3(3)JD815.3(3)JD915.3(3)JDA1115.3(3)JDA1315.3(3)JDA1415.3(3)JDA1615.3(3)JDA1715.3(3)JDA715.3(3)JDA815.3(3)JDA915.3(3)JE15.3(3)JF15.3(3)JF115.3(3)JF1015.3(3)JF1115.3(3)JF1215.3(3)JF12i15.3(3)JF1415.3(3)JF14i15.3(3)JF1515.3(3)JF215.3(3)JF415.3(3)JF515.3(3)JF615.3(3)JF715.3(3)JF815.3(3)JF915.3(3)JG15.3(3)JG115.3(3)JH15.3(3)JH115.3(3)JI115.3(3)JI315.3(3)JI415.3(3)JI515.3(3)JI615.3(3)JJ15.3(3)JJ115.3(3)JK15.3(3)JK115.3(3)JK1015.3(3)JK1115.3(3)JK1t15.3(3)JK215.3(3)JK2a15.3(3)JK315.3(3)JK415.3(3)JK515.3(3)JK615.3(3)JK715.3(3)JK815.3(3)JK8a15.3(3)JK8b15.3(3)JK915.3(3)JN315.3(3)JN415.3(3)JN715.3(3)JN815.3(3)JN915.3(3)JNB15.3(3)JNB115.3(3)JNB215.3(3)JNB315.3(3)JNB415.3(3)JNB515.3(3)JNB615.3(3)JNC15.3(3)JNC115.3(3)JNC415.3(3)JND15.3(3)JND115.3(3)JND215.3(3)JND315.3(3)JNP15.3(3)JNP115.3(3)JNP315.3(3)JPB15.3(3)JPB115.3(3)JPC15.3(3)JPC115.3(3)JPC215.3(3)JPC315.3(3)JPC515.3(3)JPD15.3(3)JPI115.3(3)JPI1015.3(3)JPI1t15.3(3)JPI415.3(3)JPI515.3(3)JPI6a15.3(3)JPI715.3(3)JPI8a15.3(3)JPI915.3(3)JPJ1015.3(3)JPJ1115.3(3)JPJ215.3(3)JPJ2t15.3(3)JPJ315.3(3)JPJ3a15.3(3)JPJ415.3(3)JPJ515.3(3)JPJ615.3(3)JPJ715.3(3)JPJ7c15.3(3)JPJ8a15.3(3)JPJ915.3(3)JPK15.3(3)JPK115.3(3)JPK215.3(3)JPK315.3(3)JPK415.3(3)JPK515.3(3)JPK615.3(3)JPK715.3(3)JPK815.3(3)JPK915.3(3)JPL15.3(3)JPM15.3(3)JPN15.3(3)JPN115.3(3)JPN215.3(3)JPN315.3(3)JPN415.3(3)JPN515.3(3)JPN615.3(3)JPN715.3(3)JPO15.3(3)JPP15.3(3)JPQ15.3(3)JPQ115.3(3)JPQ215.3(3)JPQ315.3(3)JPQ415.3(3)JPQ515.3(3)JPR15.3(3)JPS15.3(3)JPT15.3(3)JPT115.3(3)JPT215.3(3)JPT315.3(3)M15.3(3)M115.3(3)M1015.3(3)M215.3(3)M315.3(3)M415.3(3)M515.3(3)M615.3(3)M715.3(3)M815.3(3)M8a15.3(3)M915.3(3)S15.3(3)S115.3(3)S1015.3(3)S1a15.3(3)S215.3(3)S315.3(3)S415.3(3)S515.3(3)S615.3(3)S715.3(3)S815.3(3)S8a15.3(3)S915.4(1)CG15.4(1)CG115.4(1)S15.4(1)S115.4(1)S215.4(1)S315.4(1)S415.4(1)SY15.4(1)SY115.4(1)SY215.4(1)SY315.4(1)SY415.4(1)T15.4(1)T115.4(1)T215.4(1)T315.4(1)T415.4(2)CG15.4(2)S15.4(2)S115.4(2)S215.4(2)S315.4(2)S415.4(2)T15.4(2)T115.4(2)T215.4(2)T315.4(2)T415.4(3)S15.4(3)S115.4(3)S1015.4(3)S215.4(3)S315.4(3)S415.4(3)S515.4(3)S615.4(3)S6a15.4(3)S715.4(3)S815.4(3)S915.5(1)S15.5(1)S115.5(1)S215.5(1)S315.5(1)S415.5(1)SY15.5(1)SY115.5(1)SY1015.5(1)SY1115.5(1)SY1215.5(1)SY1315.5(1)SY1415.5(1)SY1515.5(1)SY1615.5(1)SY215.5(1)SY315.5(1)SY415.5(1)SY515.5(1)SY615.5(1)SY715.5(1)SY815.5(1)SY915.5(1)T15.5(1)T115.5(1)T215.5(1)T315.5(1)T415.5(2)S15.5(2)S115.5(2)S215.5(2)S315.5(2)S415.5(2)T15.5(2)T115.5(2)T215.5(2)T315.5(2)T415.5(3)M15.5(3)M0a15.5(3)M115.5(3)M1015.5(3)M215.5(3)M315.5(3)M415.5(3)M4a15.5(3)M515.5(3)M615.5(3)M6a15.5(3)M715.5(3)M815.5(3)M915.5(3)S15.5(3)S0a15.5(3)S115.5(3)S1015.5(3)S1a15.5(3)S215.5(3)S315.5(3)S415.5(3)S515.5(3)S615.5(3)S6a15.5(3)S6b15.5(3)S715.5(3)S815.5(3)S915.5(3)S9a15.5(3)SN15.6(1)S15.6(1)S115.6(1)S215.6(1)S315.6(1)S415.6(1)T15.6(1)T0a15.6(1)T115.6(1)T215.6(1)T315.6(2)S15.6(2)S115.6(2)S215.6(2)S315.6(2)S415.6(2)SN15.6(2)SP15.6(2)SP115.6(2)SP215.6(2)SP315.6(2)SP415.6(2)SP515.6(2)SP615.6(2)SP715.6(2)SP815.6(2)SP915.6(2)T15.6(2)T115.6(2)T215.6(2)T315.6(3)M15.6(3)M0a15.6(3)M115.6(3)M1b15.6(3)M215.6(3)M2a15.6(3)M315.6(3)M3a15.6(3)M415.6(3)M515.6(3)M615.6(3)M6a15.6(3)M6b15.6(3)M715.6(3)M815.6(3)M915.7(3)M15.7(3)M0a15.7(3)M115.7(3)M215.7(3)M315.7(3)M415.7(3)M4a15.7(3)M4b15.7(3)M515.7(3)M615.7(3)M715.7(3)M815.7(3)M915.8(3)M15.8(3)M0a15.8(3)M0b15.8(3)M115.8(3)M1a15.8(3)M215.8(3)M2a15.8(3)M315.8(3)M3a15.8(3)M3b15.8(3)M415.8(3)M515.8(3)M615.8(3)M715.8(3)M815.8(3)M915.9(3)M15.9(3)M0a15.9(3)M115.9(3)M1015.9(3)M1115.9(3)M1215.9(3)M215.9(3)M2a15.9(3)M315.9(3)M3a15.9(3)M3b15.9(3)M415.9(3)M4a15.9(3)M515.9(3)M615.9(3)M6a15.9(3)M6b15.9(3)M715.9(3)M7a15.9(3)M815.9(3)M8b15.9(3)M9
3.10.0E3.10.0cE3.10.1E3.10.2E3.10.3E3.11.0E3.11.0S3.11.10E3.11.11E3.11.12E3.11.13E3.11.1E3.11.1S3.11.1aE3.11.2E3.11.2S3.11.3E3.11.3S3.11.3aE3.11.4E3.11.4S3.11.5E3.11.6E3.11.7E3.11.8E3.11.9E3.12.0S3.12.0aS3.12.1S3.12.2S3.12.3S3.12.4S3.13.0S3.13.0aS3.13.10S3.13.1S3.13.2S3.13.2aS3.13.3S3.13.4S3.13.5S3.13.5aS3.13.6S3.13.6aS3.13.7S3.13.7aS3.13.8S3.13.9S3.14.0S3.14.1S3.14.2S3.14.3S3.14.4S3.15.0S3.15.1S3.15.1cS3.15.2S3.15.3S3.15.4S3.16.0S3.16.0cS3.16.10S3.16.1S3.16.1aS3.16.2S3.16.2aS3.16.2bS3.16.3S3.16.3aS3.16.4S3.16.4aS3.16.4bS3.16.4dS3.16.5S3.16.6S3.16.6bS3.16.7S3.16.7aS3.16.7bS3.16.8S3.16.9S3.17.0S3.17.1S3.17.1aS3.17.2S3.17.3S3.17.4S3.18.0S3.18.0SP3.18.0aS3.18.1S3.18.1SP3.18.1aSP3.18.1bSP3.18.1cSP3.18.2S3.18.2SP3.18.2aSP3.18.3S3.18.3SP3.18.3aSP3.18.3bSP3.18.4S3.18.4SP3.18.5SP3.18.6SP3.18.7SP3.18.8aSP3.18.9SP3.5.0E3.5.0SQ3.5.1E3.5.1SQ3.5.2E3.5.2SQ3.5.3E3.5.3SQ3.5.4SQ3.5.5SQ3.5.6SQ3.5.7SQ3.5.8SQ3.6.0E3.6.10E3.6.1E3.6.2E3.6.2aE3.6.3E3.6.4E3.6.5E3.6.5aE3.6.6E3.6.7E3.6.7bE3.6.8E3.6.9E3.7.0E3.7.1E3.7.2E3.7.3E3.7.4E3.7.5E3.8.0E3.8.10E3.8.1E3.8.2E3.8.3E3.8.4E3.8.5E3.8.5aE3.8.6E3.8.7E3.8.8E3.8.9E3.9.0E3.9.1E3.9.2E
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (1)
SSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
7.7HIGHcisco
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- CHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusAWAITING ANALYSIS
CWE
CWE-228
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card