cisco-sa-iosxe-bing-MGHrFAkdHighCVSS 8.6

Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability

Published
August 5, 2026
Last Modified
August 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-20263 →

📋 Description

A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper handling when parsing a specific BEEP SOAP request. An attacker could exploit this vulnerability by sending a specific BEEP SOAP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

Cisco has released software updates that address this vulnerability. There are no workarounds that address these vulnerabilities.

CVE-2026-20263 — Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability (CVSS 3.1 8.6, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)

🎯 Affected products272

  • Cisco IOS XE Software
  • Cisco IOS XE Software 16.10.1
  • Cisco IOS XE Software 16.10.1a
  • Cisco IOS XE Software 16.10.1b
  • Cisco IOS XE Software 16.10.1c
  • Cisco IOS XE Software 16.10.1d
  • Cisco IOS XE Software 16.10.1e
  • Cisco IOS XE Software 16.10.1f
  • Cisco IOS XE Software 16.10.1g
  • Cisco IOS XE Software 16.10.1s
  • Cisco IOS XE Software 16.10.2
  • Cisco IOS XE Software 16.10.3
  • Cisco IOS XE Software 16.11.1
  • Cisco IOS XE Software 16.11.1a
  • Cisco IOS XE Software 16.11.1b
  • Cisco IOS XE Software 16.11.1c
  • Cisco IOS XE Software 16.11.1s
  • Cisco IOS XE Software 16.11.2
  • Cisco IOS XE Software 16.12.1
  • Cisco IOS XE Software 16.12.10
  • Cisco IOS XE Software 16.12.10a
  • Cisco IOS XE Software 16.12.11
  • Cisco IOS XE Software 16.12.12
  • Cisco IOS XE Software 16.12.13
  • Cisco IOS XE Software 16.12.14
  • Cisco IOS XE Software 16.12.15
  • Cisco IOS XE Software 16.12.1a
  • Cisco IOS XE Software 16.12.1c
  • Cisco IOS XE Software 16.12.1s
  • Cisco IOS XE Software 16.12.1t
  • +242 more not shown

✅ Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com Workarounds: There are no workarounds that address this vulnerability.

🔗 References (2)