Denial of Service Vulnerability in Cisco IOS XE SNMP Subsystem

CVE-2026-20124

What is CVE-2026-20124?

A flaw in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software can be exploited by an authenticated remote attacker to induce a denial of service condition. This vulnerability arises from improper error handling when processing malformed SNMP requests. All SNMP versions, including 1, 2c, and 3, are susceptible. An attacker with appropriate SNMPv1 or v2c community strings or valid SNMPv3 credentials can trigger this exploit, leading to unexpected device reloads.

References