CVE-2026-20301High· 8.6▾ TwilightA vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of se…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 47.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 17.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.6%
A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to improper handling of malformed XMCP packets. An attacker could exploit this vulnerability by sending a malformed XMCP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload unexpectedly, resulting in a DoS condition. The attacker does not need the XMCP client username to exploit this vulnerability.
ios = 15.2(1)sy6ios = 15.2(1)sy7ios = 15.2(1)sy8ios = 15.2(2)e8ios = 15.2(2)e9ios = 15.2(2)e9aios = 15.2(2)e10ios = 15.2(2)e10aios = 15.2(2)e10bios = 15.2(2)e10cios = 15.2(4)e6ios = 15.2(4)e7ios = 15.2(4)e8ios = 15.2(4)e9ios = 15.2(4)e10ios = 15.2(4)e10aios = 15.2(4)e10bios = 15.2(4)e10cios = 15.2(4)e10dios = 15.2(4)e10eios = 15.2(4)ea7ios = 15.2(4)ea8ios = 15.2(4)ea9ios = 15.2(4)ea9aios = 15.2(6)e1ios = 15.2(6)e1aios = 15.2(6)e1sios = 15.2(6)e2ios = 15.2(6)e2aios = 15.2(6)e2bios = 15.2(6)e3ios = 15.2(7)eios = 15.2(7)e0aios = 15.2(7)e0bios = 15.2(7)e0sios = 15.2(7)e1ios = 15.2(7)e1aios = 15.2(7)e2ios = 15.2(7)e2bios = 15.2(7)e3ios = 15.2(7)e3kios = 15.2(7)e4ios = 15.2(7)e5ios = 15.2(7)e6ios = 15.2(7)e7ios = 15.2(7)e8ios = 15.2(7)e9ios = 15.2(7)e10ios = 15.2(7)e11ios = 15.2(7)e12ios = 15.2(7)e13ios = 15.2(7)e14ios = 15.2(8)eios = 15.2(8)e1ios = 15.2(8)e2ios = 15.2(8)e3ios = 15.2(8)e4ios = 15.2(8)e5ios = 15.2(8)e6ios = 15.2(8)e7ios = 15.2(8)e8ios = 15.4(1)sy4ios = 15.5(1)sy1ios = 15.5(1)sy2ios = 15.5(1)sy3ios = 15.5(1)sy4ios = 15.5(1)sy5ios = 15.5(1)sy6ios = 15.5(1)sy7ios = 15.5(1)sy8ios = 15.5(1)sy9ios = 15.5(1)sy10ios = 15.5(1)sy11ios = 15.5(1)sy12ios = 15.5(1)sy13ios = 15.5(1)sy14ios = 15.5(1)sy15ios = 15.5(1)sy16ios = 15.5(1)sy17ios = 15.6(2)sp4ios = 15.6(2)sp5ios = 15.6(2)sp6ios = 15.6(2)sp7ios = 15.6(2)sp8ios = 15.6(2)sp8aios = 15.6(2)sp9ios = 15.7(3)m2ios = 15.7(3)m3ios = 15.7(3)m4ios = 15.7(3)m4aios = 15.7(3)m4bios = 15.7(3)m5ios = 15.7(3)m6ios = 15.7(3)m7ios = 15.7(3)m8ios = 15.7(3)m9ios = 15.7(3)m10ios = 15.7(3)m10aios = 15.7(3)m10bios = 15.8(3)mRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2017-6770Medium· 4.2Multiple Cisco Products OSPF LSA Manipulation Vulnerability (CVE-2017-6770)
CVE-2019-1748High· 7.4Cisco IOS and IOS XE Software Network Plug-and-Play Agent Certificate Validation Vulnerability (CVE-2019-1748)
CVE-2025-20169High· 7.7Cisco IOS, IOS XE, and IOS XR SNMP Denial of Service Vulnerabilities
CVE-2025-20175High· 7.7Cisco IOS and IOS XE SNMP Denial of Service Vulnerabilities
CVE-2025-20170High· 7.7Cisco IOS and IOS XE SNMP Denial of Service Vulnerabilities
CVE-2025-20171High· 7.7Cisco IOS and IOS XE SNMP Denial of Service Vulnerabilities