Denial of Service Vulnerability in Cisco IOS XE Software BEEP Feature
CVE-2026-20263

8.6HIGH

Key Information:

Vendor

Cisco
Status
Cisco iOS Xe Software
Vendor
CVE Published:
5 August 2026

Badges

👾 Exploit Exists

What is CVE-2026-20263?

A security flaw in the Blocks Extensible Exchange Protocol (BEEP) functionality of Cisco IOS XE Software allows an unauthenticated, remote attacker to initiate a denial of service. This occurs due to incorrect parsing of a BEEP SOAP request, enabling an attacker to send a specially crafted request that may lead to an unexpected device reload, causing service disruption.

Affected Version(s)

Cisco IOS XE Software 17.2.1a

Cisco IOS XE Software 16.12.1y

Cisco IOS XE Software 16.12.3s

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.