CVE-2026-20263

HIGH

Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-20263 has a selected CVSS score of 8.6 (high).

Description

A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling when parsing a specific BEEP SOAP request. An attacker could exploit this vulnerability by sending a specific BEEP SOAP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 5, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Cisco IOS XE Software

Browse Cisco / Cisco IOS XE Software

Default status: unknown

CVE List17.2.1aaffected
16.12.1yaffected
16.12.3saffected
16.7.1baffected
16.6.2affected
16.6.5affected
16.12.1waffected
16.9.1daffected
17.3.1affected
16.9.4caffected
16.7.1affected
17.2.1affected
Showing 12 of 267 version ranges

References

2