Skip to content
fr Sign in
6.1 Medium

CVE-2026-20115 A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view…

Description

A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information. This vulnerability is due to a device configuration upload being performed over an insecure tunnel. An attacker could exploit this vulnerability by conducting an on-path attack between the affected device and the Cisco Meraki Dashboard. A successful exploit could allow the attacker to view sensitive device configuration information.

Affected products and versions

Product Affected versions Fixed in
Cisco IOS XE Software 17.18 17.18.1w → 17.18.1 No fix stated
Cisco IOS XE Software 17.17.1 No fix stated
Cisco IOS XE Software 17.16 17.16.1a → 17.16.1 No fix stated
Cisco IOS XE Software 17.15 17.15.1w → 17.15.4 No fix stated
Cisco IOS XE Software 17.14 17.14.1a → 17.14.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco IOS XE Software

The 248 CVEs of Cisco IOS XE Software →
CVE-2026-20311 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote… 6.3 Medium CVE-2026-20301 A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of… 8.6 High CVE-2026-20308 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote… 4.3 Medium CVE-2026-20273 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering… 8.6 High
Track this CVE