CVE-2026-20232

Name of the Vulnerable Software and Affected Versions Cisco Industrial Ethernet (IE) 1000 Series Switches (affected versions not specified)

Description An issue in the web-based management interface allows an authenticated remote attacker to perform a stored cross-site scripting (XSS) attack. This occurs because the interface does not sufficiently validate user-supplied input, enabling an attacker with valid credentials to inject malicious code into specific pages. A successful exploit allows the execution of arbitrary script code within the session context of another user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.