CVE-2026-201135.3MediumCWE-93
Cisco IOS XE Software vulnerability
Cisco · Cisco IOS XE Software
Not in CISA KEV
0.4%probability of exploitation in the next 30 days
30th percentile
050100
Higher than 30% of scored CVEs
5.3MediumCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a carriage return line feed (CRLF) injection attack against a user. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by sending crafted packets to an affected device. A successful exploit could allow the attacker to arbitrarily inject log entries, manipulate the structure of log files, or obscure legitimate log events.
Coverage1 article · 1 outlet
First in our coverage: SecurityWeek, 26 Mar.
- Cisco Patches Multiple Vulnerabilities in IOS SoftwareSecurityWeek · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.