Remote Information Disclosure Vulnerability in Cisco Meraki

CVE-2026-20115

What is CVE-2026-20115?

A vulnerability in Cisco IOS XE Software for Cisco Meraki exposes sensitive device configuration information to remote, unauthenticated attackers. This occurs because device configuration uploads are made over an insecure tunnel. Attackers can execute an on-path attack between the compromised device and the Cisco Meraki Dashboard, which allows them to access confidential device details. Protecting your devices from this vulnerability requires immediate attention to secure communication channels.

References