CVE-2026-20311

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description Insufficient error handling in the web-based management interface allows an authenticated remote attacker with low privileges to trigger a denial of service (DoS) condition. The issue occurs when an attacker authenticates using a malformed certificate, which can cause the affected device to reload.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.