cveboard RSS feed

CVE-2026-20084

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VLANs, resulting in a denial of service (DoS) condition. This vulnerability is due to improper handling of BOOTP packets on Cisco Catalyst 9000 Series Switches. An attacker could exploit this vulnerability by sending BOOTP request packets to an affected device. A successful exploit could allow an attacker to forward BOOTP packets from one VLAN to another, resulting in BOOTP VLAN leakage and potentially leading to high CPU utilization. This makes the device unreachable (either through console or remote management) and unable to forward traffic, resulting in a DoS condition. Note: This vulnerability can be exploited with either unicast or broadcast BOOTP packets. There are workarounds that address this vulnerability.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco IOS XE Software

Vendor
Cisco
Product
Cisco IOS XE Software
Platforms
Unknown
Default status
Unknown
Cisco IOS XE Software · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
16.6.1affectedUnavailableUnavailableUnavailableNone listed
16.6.2affectedUnavailableUnavailableUnavailableNone listed
16.6.3affectedUnavailableUnavailableUnavailableNone listed
16.6.4affectedUnavailableUnavailableUnavailableNone listed
16.6.5affectedUnavailableUnavailableUnavailableNone listed
16.6.4aaffectedUnavailableUnavailableUnavailableNone listed
16.6.6affectedUnavailableUnavailableUnavailableNone listed
16.6.7affectedUnavailableUnavailableUnavailableNone listed
16.6.8affectedUnavailableUnavailableUnavailableNone listed
16.6.9affectedUnavailableUnavailableUnavailableNone listed
16.6.10affectedUnavailableUnavailableUnavailableNone listed
16.7.1affectedUnavailableUnavailableUnavailableNone listed
16.8.1affectedUnavailableUnavailableUnavailableNone listed
16.8.1aaffectedUnavailableUnavailableUnavailableNone listed
16.8.1saffectedUnavailableUnavailableUnavailableNone listed
16.9.1affectedUnavailableUnavailableUnavailableNone listed
16.9.2affectedUnavailableUnavailableUnavailableNone listed
16.9.1saffectedUnavailableUnavailableUnavailableNone listed
16.9.3affectedUnavailableUnavailableUnavailableNone listed
16.9.4affectedUnavailableUnavailableUnavailableNone listed
16.9.5affectedUnavailableUnavailableUnavailableNone listed
16.9.6affectedUnavailableUnavailableUnavailableNone listed
16.9.7affectedUnavailableUnavailableUnavailableNone listed
16.9.8affectedUnavailableUnavailableUnavailableNone listed
16.10.1affectedUnavailableUnavailableUnavailableNone listed
16.10.1saffectedUnavailableUnavailableUnavailableNone listed
16.10.1eaffectedUnavailableUnavailableUnavailableNone listed
16.11.1affectedUnavailableUnavailableUnavailableNone listed
16.11.1baffectedUnavailableUnavailableUnavailableNone listed
16.11.1saffectedUnavailableUnavailableUnavailableNone listed
16.12.1affectedUnavailableUnavailableUnavailableNone listed
16.12.1saffectedUnavailableUnavailableUnavailableNone listed
16.12.1caffectedUnavailableUnavailableUnavailableNone listed
16.12.2affectedUnavailableUnavailableUnavailableNone listed
16.12.3affectedUnavailableUnavailableUnavailableNone listed
16.12.8affectedUnavailableUnavailableUnavailableNone listed
16.12.2saffectedUnavailableUnavailableUnavailableNone listed
16.12.4affectedUnavailableUnavailableUnavailableNone listed
16.12.3saffectedUnavailableUnavailableUnavailableNone listed
16.12.3aaffectedUnavailableUnavailableUnavailableNone listed
16.12.4aaffectedUnavailableUnavailableUnavailableNone listed
16.12.5affectedUnavailableUnavailableUnavailableNone listed
16.12.6affectedUnavailableUnavailableUnavailableNone listed
16.12.5baffectedUnavailableUnavailableUnavailableNone listed
16.12.6aaffectedUnavailableUnavailableUnavailableNone listed
16.12.7affectedUnavailableUnavailableUnavailableNone listed
17.1.1affectedUnavailableUnavailableUnavailableNone listed
17.1.1saffectedUnavailableUnavailableUnavailableNone listed
17.1.1taffectedUnavailableUnavailableUnavailableNone listed
17.1.3affectedUnavailableUnavailableUnavailableNone listed
17.2.1affectedUnavailableUnavailableUnavailableNone listed
17.2.1aaffectedUnavailableUnavailableUnavailableNone listed
17.3.1affectedUnavailableUnavailableUnavailableNone listed
17.3.2affectedUnavailableUnavailableUnavailableNone listed
17.3.3affectedUnavailableUnavailableUnavailableNone listed
17.3.2aaffectedUnavailableUnavailableUnavailableNone listed
17.3.4affectedUnavailableUnavailableUnavailableNone listed
17.3.5affectedUnavailableUnavailableUnavailableNone listed
17.3.6affectedUnavailableUnavailableUnavailableNone listed
17.3.7affectedUnavailableUnavailableUnavailableNone listed
17.3.8affectedUnavailableUnavailableUnavailableNone listed
17.3.8aaffectedUnavailableUnavailableUnavailableNone listed
17.4.1affectedUnavailableUnavailableUnavailableNone listed
17.5.1affectedUnavailableUnavailableUnavailableNone listed
17.6.1affectedUnavailableUnavailableUnavailableNone listed
17.6.2affectedUnavailableUnavailableUnavailableNone listed
17.6.3affectedUnavailableUnavailableUnavailableNone listed
17.6.1yaffectedUnavailableUnavailableUnavailableNone listed
17.6.4affectedUnavailableUnavailableUnavailableNone listed
17.6.5affectedUnavailableUnavailableUnavailableNone listed
17.6.6affectedUnavailableUnavailableUnavailableNone listed
17.6.6aaffectedUnavailableUnavailableUnavailableNone listed
17.6.5aaffectedUnavailableUnavailableUnavailableNone listed
17.6.7affectedUnavailableUnavailableUnavailableNone listed
17.6.8affectedUnavailableUnavailableUnavailableNone listed
17.7.1affectedUnavailableUnavailableUnavailableNone listed
17.10.1affectedUnavailableUnavailableUnavailableNone listed
17.10.1baffectedUnavailableUnavailableUnavailableNone listed
17.8.1affectedUnavailableUnavailableUnavailableNone listed
17.9.1affectedUnavailableUnavailableUnavailableNone listed
17.9.2affectedUnavailableUnavailableUnavailableNone listed
17.9.3affectedUnavailableUnavailableUnavailableNone listed
17.9.4affectedUnavailableUnavailableUnavailableNone listed
17.9.5affectedUnavailableUnavailableUnavailableNone listed
17.9.4aaffectedUnavailableUnavailableUnavailableNone listed
17.9.6affectedUnavailableUnavailableUnavailableNone listed
17.9.6aaffectedUnavailableUnavailableUnavailableNone listed
17.9.7affectedUnavailableUnavailableUnavailableNone listed
17.9.8affectedUnavailableUnavailableUnavailableNone listed
17.11.1affectedUnavailableUnavailableUnavailableNone listed
17.12.1affectedUnavailableUnavailableUnavailableNone listed
17.12.2affectedUnavailableUnavailableUnavailableNone listed
17.12.3affectedUnavailableUnavailableUnavailableNone listed
17.12.4affectedUnavailableUnavailableUnavailableNone listed
17.12.5affectedUnavailableUnavailableUnavailableNone listed
17.12.1z5affectedUnavailableUnavailableUnavailableNone listed
17.13.1affectedUnavailableUnavailableUnavailableNone listed
17.14.1affectedUnavailableUnavailableUnavailableNone listed
17.15.1affectedUnavailableUnavailableUnavailableNone listed
17.15.2affectedUnavailableUnavailableUnavailableNone listed
17.15.3affectedUnavailableUnavailableUnavailableNone listed
17.15.2baffectedUnavailableUnavailableUnavailableNone listed
17.15.4affectedUnavailableUnavailableUnavailableNone listed
17.15.4daffectedUnavailableUnavailableUnavailableNone listed
17.16.1affectedUnavailableUnavailableUnavailableNone listed
17.17.1affectedUnavailableUnavailableUnavailableNone listed
17.18.1affectedUnavailableUnavailableUnavailableNone listed