CVE-2026-20115mediumCWE-319

CVE-2026-20115: medium-severity vulnerability in Cisco IOS XE Software

Published

Follow this CVE+ Monitor Cisco IOS XE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 0.2%
A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information. This vulnerability is due to a device configuration upload being performed over an insecure tunnel. An attacker could exploit this vulnerability by conducting an on-path attack between the affected device and the Cisco Meraki Dashboard. A successful exploit could allow the attacker to view sensitive device configuration information.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
Affected products
Cisco · Cisco IOS XE Software
Related CVEs — Cisco IOS XE Software

In the same product, most dangerous first.

CVE-2023-20198CRITICALCVE-2023-20198EPSS 99.8%KEVCVE-2023-20273HIGHCVE-2023-20273EPSS 92.9%KEVCVE-2025-20352HIGHCVE-2025-20352EPSS 40.6%KEVCVE-2017-6742HIGHCVE-2017-6742EPSS 21.3%KEVCVE-2017-6738HIGHCVE-2017-6738EPSS 10.9%KEVCVE-2023-20109MEDIUMCVE-2023-20109EPSS 2.5%KEV