The vulnerability of the DHCP message tracking function in Cisco IOS XE Catalyst 9000 switches allows a intruder to execute arbitrary code.

🗓️ 30 Mar 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

DHCP tracking flaw in Cisco IOS XE Catalyst 9000 enables remote code execution via crafted BOOTP packets.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2026-20084	25 Mar 202617:05	–	circl
Cisco	Cisco IOS XE Software for Catalyst 9000 Series Switches DHCP Snooping Denial of Service Vulnerability	25 Mar 202616:00	–	cisco
CNNVD	Cisco IOS XE Software 资源管理错误漏洞	25 Mar 202600:00	–	cnnvd
CVE	CVE-2026-20084	25 Mar 202616:02	–	cve
Cvelist	CVE-2026-20084	25 Mar 202616:02	–	cvelist
EUVD	EUVD-2026-15431	25 Mar 202618:31	–	euvd
NCSC	Vulnerabilities fixed in Cisco IOS XE Software	26 Mar 202609:50	–	ncsc
NVD	CVE-2026-20084	25 Mar 202616:16	–	nvd
Positive Technologies	PT-2026-27790	25 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-20084	26 Mar 202617:00	–	redhatcve

Vulners

Node

cisco_systems cisco_ios_xeMatch16.12.1

OR

cisco_systems cisco_ios_xeMatch17.2.1

OR

cisco_systems cisco_ios_xeMatch16.10.1

OR

cisco_systems cisco_ios_xeMatch17.1.1

OR

cisco_systems cisco_ios_xeMatch17.3.3

OR

cisco_systems cisco_ios_xeMatch17.1.1s

OR

cisco_systems cisco_ios_xeMatch17.1.2

OR

cisco_systems cisco_ios_xeMatch17.1.1t

OR

cisco_systems cisco_ios_xeMatch17.1.3

OR

cisco_systems cisco_ios_xeMatch17.2.1a

OR

cisco_systems cisco_ios_xeMatch17.3.1

OR

cisco_systems cisco_ios_xeMatch17.3.2

OR

cisco_systems cisco_ios_xeMatch17.3.2a

OR

cisco_systems cisco_ios_xeMatch17.3.4

OR

cisco_systems cisco_ios_xeMatch17.3.5

OR

cisco_systems cisco_ios_xeMatch17.3.6

OR

cisco_systems cisco_ios_xeMatch17.3.7

OR

cisco_systems cisco_ios_xeMatch17.3.8

OR

cisco_systems cisco_ios_xeMatch17.3.8a

OR

cisco_systems cisco_ios_xeMatch17.4.1

OR

cisco_systems cisco_ios_xeMatch17.4.1c

OR

cisco_systems cisco_ios_xeMatch17.5.1

OR

cisco_systems cisco_ios_xeMatch17.6.1

OR

cisco_systems cisco_ios_xeMatch17.6.2

OR

cisco_systems cisco_ios_xeMatch17.6.3

OR

cisco_systems cisco_ios_xeMatch17.6.1y

OR

cisco_systems cisco_ios_xeMatch17.6.4

OR

cisco_systems cisco_ios_xeMatch17.6.5

OR

cisco_systems cisco_ios_xeMatch17.6.6

OR

cisco_systems cisco_ios_xeMatch17.6.6a

OR

cisco_systems cisco_ios_xeMatch17.6.5a

OR

cisco_systems cisco_ios_xeMatch17.7.1

OR

cisco_systems cisco_ios_xeMatch17.10.1

OR

cisco_systems cisco_ios_xeMatch17.10.1b

OR

cisco_systems cisco_ios_xeMatch17.8.1

OR

cisco_systems cisco_ios_xeMatch17.9.1

OR

cisco_systems cisco_ios_xeMatch17.9.2

OR

cisco_systems cisco_ios_xeMatch17.9.3

OR

cisco_systems cisco_ios_xeMatch17.9.4

OR

cisco_systems cisco_ios_xeMatch17.9.4a

OR

cisco_systems cisco_ios_xeMatch17.11.1

OR

cisco_systems cisco_ios_xeMatch17.12.1

OR

cisco_systems cisco_ios_xeMatch16.6.1

OR

cisco_systems cisco_ios_xeMatch16.6.2

OR

cisco_systems cisco_ios_xeMatch16.6.3

OR

cisco_systems cisco_ios_xeMatch16.6.4

OR

cisco_systems cisco_ios_xeMatch16.6.5

OR

cisco_systems cisco_ios_xeMatch16.6.4s

OR

cisco_systems cisco_ios_xeMatch16.6.4a

OR

cisco_systems cisco_ios_xeMatch16.6.6

OR

cisco_systems cisco_ios_xeMatch16.6.7

OR

cisco_systems cisco_ios_xeMatch16.6.8

OR

cisco_systems cisco_ios_xeMatch16.6.9

OR

cisco_systems cisco_ios_xeMatch16.6.10

OR

cisco_systems cisco_ios_xeMatch16.7.1

OR

cisco_systems cisco_ios_xeMatch16.8.1

OR

cisco_systems cisco_ios_xeMatch16.8.1a

OR

cisco_systems cisco_ios_xeMatch16.8.1s

OR

cisco_systems cisco_ios_xeMatch16.9.1

OR

cisco_systems cisco_ios_xeMatch16.9.2

OR

cisco_systems cisco_ios_xeMatch16.9.1s

OR

cisco_systems cisco_ios_xeMatch16.9.3

OR

cisco_systems cisco_ios_xeMatch16.9.2s

OR

cisco_systems cisco_ios_xeMatch16.9.4

OR

cisco_systems cisco_ios_xeMatch16.9.3s

OR

cisco_systems cisco_ios_xeMatch16.9.5

OR

cisco_systems cisco_ios_xeMatch16.9.6

OR

cisco_systems cisco_ios_xeMatch16.9.7

OR

cisco_systems cisco_ios_xeMatch16.9.8

OR

cisco_systems cisco_ios_xeMatch16.10.1s

OR

cisco_systems cisco_ios_xeMatch16.10.1e

OR

cisco_systems cisco_ios_xeMatch16.11.1

OR

cisco_systems cisco_ios_xeMatch16.11.1b

OR

cisco_systems cisco_ios_xeMatch16.11.1s

OR

cisco_systems cisco_ios_xeMatch16.11.1c

OR

cisco_systems cisco_ios_xeMatch16.12.1s

OR

cisco_systems cisco_ios_xeMatch16.12.1c

OR

cisco_systems cisco_ios_xeMatch16.12.2

OR

cisco_systems cisco_ios_xeMatch16.12.3

OR

cisco_systems cisco_ios_xeMatch16.12.8

OR

cisco_systems cisco_ios_xeMatch16.12.2s

OR

cisco_systems cisco_ios_xeMatch16.12.2t

OR

cisco_systems cisco_ios_xeMatch16.12.4

OR

cisco_systems cisco_ios_xeMatch16.12.3s

OR

cisco_systems cisco_ios_xeMatch16.12.3a

OR

cisco_systems cisco_ios_xeMatch16.12.4a

OR

cisco_systems cisco_ios_xeMatch16.12.5

OR

cisco_systems cisco_ios_xeMatch16.12.6

OR

cisco_systems cisco_ios_xeMatch16.12.5b

OR

cisco_systems cisco_ios_xeMatch16.12.6a

OR

cisco_systems cisco_ios_xeMatch16.12.7

OR

cisco_systems cisco_ios_xeMatch17.5.1b

OR

cisco_systems cisco_ios_xeMatch17.5.1c

OR

cisco_systems cisco_ios_xeMatch17.6.7

OR

cisco_systems cisco_ios_xeMatch17.6.8

OR

cisco_systems cisco_ios_xeMatch17.9.5

OR

cisco_systems cisco_ios_xeMatch17.9.6

OR

cisco_systems cisco_ios_xeMatch17.9.6a

OR

cisco_systems cisco_ios_xeMatch17.9.6b

OR

cisco_systems cisco_ios_xeMatch17.9.7

OR

cisco_systems cisco_ios_xeMatch17.9.8

OR

cisco_systems cisco_ios_xeMatch17.12.2

OR

cisco_systems cisco_ios_xeMatch17.12.3

OR

cisco_systems cisco_ios_xeMatch17.12.4

OR

cisco_systems cisco_ios_xeMatch17.12.5

OR

cisco_systems cisco_ios_xeMatch17.12.1z5

OR

cisco_systems cisco_ios_xeMatch17.13.1

OR

cisco_systems cisco_ios_xeMatch17.14.1

OR

cisco_systems cisco_ios_xeMatch17.15.1

OR

cisco_systems cisco_ios_xeMatch17.15.2

OR

cisco_systems cisco_ios_xeMatch17.15.3

OR

cisco_systems cisco_ios_xeMatch17.15.2b

OR

cisco_systems cisco_ios_xeMatch17.15.4

OR

cisco_systems cisco_ios_xeMatch17.15.4b

OR

cisco_systems cisco_ios_xeMatch17.15.4s1

OR

cisco_systems cisco_ios_xeMatch17.15.4d

OR

cisco_systems cisco_ios_xeMatch17.16.1

OR

cisco_systems cisco_ios_xeMatch17.17.1

OR

cisco_systems cisco_ios_xeMatch17.18.1

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bootp-WuBhNBxA
web	www.web.nvd.nist.gov/view/vuln/detail

30 Mar 2026 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 27.8

CVSS 38.6

EPSS0.00354

dhcp tracking flaw catalyst nine thousand remote code execution bootp packets resource exhaustion