CVE-2026-20125

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software Release 3E

Description A flaw exists in the HTTP Server feature that could allow a remote attacker with valid user credentials to cause an unexpected device reload, leading to a denial of service (DoS) condition. This is due to insufficient validation of user-provided input. An attacker can exploit this by sending crafted HTTP requests to the affected device. A successful exploit causes a watchdog timer to expire, triggering a device reload and resulting in a DoS. The attacker requires a valid user account to exploit this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.