Riskcovery

CVE-2026-20113

State
Published
Severity
5.3 Medium
Published
Mar 25, 2026
Updated
Mar 27, 2026
Reserved
Oct 8, 2025

Read the record on cve.org

Description

A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a carriage return line feed (CRLF) injection attack against a user. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by sending crafted packets to an affected device. A successful exploit could allow the attacker to arbitrarily inject log entries, manipulate the structure of log files, or obscure legitimate log events.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Ncisco

Weaknesses

  • CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection')

Affected Products

ProductVersions
Cisco IOS XE SoftwareCisco
  • 16.6.1Affected
  • 16.6.2Affected
  • 16.6.3Affected
  • 16.6.4Affected
  • 16.6.5Affected
  • 16.6.4aAffected
  • 16.6.5aAffected
  • 16.6.6Affected
  • 16.6.7Affected
  • 16.6.8Affected
  • 16.6.9Affected
  • 16.6.10Affected
  • 16.7.1Affected
  • 16.7.1aAffected
  • 16.7.1bAffected
  • 16.7.2Affected
  • 16.7.3Affected
  • 16.7.4Affected
  • 16.8.1Affected
  • 16.8.1aAffected
  • 16.8.1bAffected
  • 16.8.1sAffected
  • 16.8.1cAffected
  • 16.8.1dAffected
  • 16.8.2Affected
  • and 202 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.