Riskcovery

CVE-2026-20125

State
Published
Severity
7.7 High
Published
Mar 25, 2026
Updated
Mar 25, 2026
Reserved
Oct 8, 2025

Read the record on cve.org

Description

A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending malformed HTTP requests to an affected device. A successful exploit could allow the attacker to cause a watchdog timer to expire and the device to reload, resulting in a DoS condition. To exploit this vulnerability, the attacker must have a valid user account.

Scores

CVSSScoreVectorSource
3.17.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:Hcisco

Weaknesses

  • CWE-228 Improper Handling of Syntactically Invalid Structure

Affected Products

ProductVersions
IOSCisco
  • 12.2(33)CYAffected
  • 12.2(33)CY1Affected
  • 12.2(33)CY2Affected
  • 12.2(55)SEAffected
  • 12.2(55)SE3Affected
  • 12.2(55)SE2Affected
  • 12.2(58)SEAffected
  • 12.2(55)SE1Affected
  • 12.2(58)SE1Affected
  • 12.2(55)SE4Affected
  • 12.2(58)SE2Affected
  • 12.2(55)SE5Affected
  • 12.2(55)SE6Affected
  • 12.2(55)SE7Affected
  • 12.2(55)SE8Affected
  • 12.2(55)SE9Affected
  • 12.2(55)SE10Affected
  • 12.2(55)SE11Affected
  • 12.2(55)SE12Affected
  • 12.2(55)SE13Affected
  • 12.2(25)EZAffected
  • 12.2(25)EZ1Affected
  • 12.2(58)EZAffected
  • 12.2(53)EZAffected
  • 12.2(55)EZAffected
  • and 918 more versions
Cisco IOS XE SoftwareCisco
  • 3.5.0EAffected
  • 3.5.1EAffected
  • 3.5.2EAffected
  • 3.5.3EAffected
  • 3.11.1SAffected
  • 3.11.2SAffected
  • 3.11.0SAffected
  • 3.11.3SAffected
  • 3.11.4SAffected
  • 3.12.0SAffected
  • 3.12.1SAffected
  • 3.12.2SAffected
  • 3.12.3SAffected
  • 3.12.0aSAffected
  • 3.12.4SAffected
  • 3.13.0SAffected
  • 3.13.1SAffected
  • 3.13.2SAffected
  • 3.13.3SAffected
  • 3.13.4SAffected
  • 3.13.5SAffected
  • 3.13.2aSAffected
  • 3.13.0aSAffected
  • 3.13.5aSAffected
  • 3.13.6SAffected
  • and 132 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.