Vulnerabilities fixed in Cisco IOS XE Software

🗓️ 26 Mar 2026 09:50:03Reported by NCSCType

Cisco fixed IOS XE vulnerabilities across Catalyst devices, CW9800, and Meraki, including IKEv2 leak, DoS, API access, privilege issues, bootloader flaw, and SCP DoS; updates released.

Reporter	Title	Published	Views	Family All 123
BDU FSTEC	The vulnerability of the DHCP message tracking function in Cisco IOS XE Catalyst 9000 switches allows a intruder to execute arbitrary code.	30 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Internet Key Exchange Version 2 (IKEv2) function in Cisco IOS operating systems, as well as in the Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) network devices, allows attackers to induce service interruptions.	30 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Cisco IOS XE Catalyst 9800 network device’s operating system, related to incorrect handling of missing values, allows a intruder to trigger a service failure.	30 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Cisco IOS and Cisco IOS XE operating system HTTP servers allows attackers to induce service failures.	12 May 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco IOS XE operating system allows attackers to enhance their privileges and gain access to the management API.	12 May 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco IOS XE operating system, which allows a perpetrator to access confidential information	13 May 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco IOS XE operating system’s TLS library allows attackers to trigger memory exhaustion or service failure.	13 May 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the server function of the Cisco IOS XE operating system’s secure copying protocol allows a attacker to trigger a service failure.	13 May 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco IOS XE operating system’s loader allows a hacker to execute arbitrary code.	13 May 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco IOS XE operating system’s command-line interface allows a hacker to trigger a service failure.	13 May 202600:00	–	bdu_fstec

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bootp-WuBhNBxA
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-http-dos-sbv8XRpL
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-lobby-privesc-KwxBqJy
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-mntc-dos-LZweQcyq
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-tls-dos-TVgLDEZL
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe_infodis-6J847uEB
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-scp-dos-duAdXtCg
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-dos-hnX5KGOm

26 Mar 2026 09:50Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.6

EPSS0.00354

SSVC