This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Cisco fixes 6 vulnerabilities
Cisco fixes 6 vulnerabilities in various products. Individual products and their fixed versions: Cisco IOS - 25.2.21, 25.4.2 [1][2][4] Cisco Unified Intelligence Center - 15.0(1)ES202511 [3] Cisco Finesse - 15.0(1)ES202511 [3] Cisco Unified CCX Release - 15.0 ES02 [3]
An authenticated local attacker can execute commands in the device's operating system with root privileges in Cisco IOS XR [1].
The vulnerability is present in product:
- Cisco IOS XR; >=25.1.0, <25.2.21; >=25.3.0, <25.4.2;
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
More information:
- CVE-2026-20040 at cve.org, NVD
- CVE-2026-20046 at cve.org, NVD
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') at cwe.mitre.org
The vulnerability was publicly disclosed 11. 3. 2026.
An unauthenticated remote attacker can carry out a DoS attack on Cisco IOS XR by repeatedly sending specially crafted packets [2].
The vulnerability is present in product:
- Cisco IOS XR; >=7.8.2, <7.12.0; >=24.1, <25.2.0;
CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
More information:
- CVE-2026-20118 at cve.org, NVD
- CWE-460: Improper Cleanup on Thrown Exception at cwe.mitre.org
The vulnerability was publicly disclosed 11. 3. 2026.
An unauthenticated remote attacker can carry out an XSS attack in Cisco Unified Intelligence Center, Finesse and Unified CCX Release through the web management interface [3]
The vulnerability is present in products:
- Cisco Unified Intelligence Center; >=12.6, <15.0(1)ES202511;
- Cisco Finesse; >=12.6, <15.0(1)ES202511;
- Cisco Unified CCX Release; >=12.5 SU3, <15.0 ES02;
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
More information:
- CVE-2026-20116 at cve.org, NVD
- CVE-2026-20117 at cve.org, NVD
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') at cwe.mitre.org
The vulnerability was publicly disclosed 11. 3. 2026.
An unauthenticated adjacent attacker can carry out a DoS attack on Cisco IOS XR by sending specially crafted IS-IS packets [4].
The vulnerability is present in product:
- Cisco IOS XR; >=7.8.0, <7.12; >=24.1.0, <25.2.2;
CVSS: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
More information:
- CVE-2026-20074 at cve.org, NVD
- CWE-1287: Improper Validation of Specified Type of Input at cwe.mitre.org
The vulnerability was publicly disclosed 11. 3. 2026.
Links
- [1] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-privesc-bF8D5U4W?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XR%20Software%20CLI%20Privilege%20Escalation%20Vulnerabilities%26vs_k=1
- [2] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xrncs-epni-int-dos-TWMffUsN?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XR%20Egress%20Packet%20Network%20Interface%20Aligner%20Interrupt%20Denial%20of%20Service%20Vulnerability%26vs_k=1
- [3] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-xss-MrNAH5Jh?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Multiple%20Cisco%20Contact%20Center%20Products%20Cross-Site%20Scripting%20Vulnerabilities%26vs_k=1
- [4] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-isis-dos-kDMxpSzK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XR%20Software%20Multi-Instance%20Intermediate%20System-to-Intermediate%20System%20Denial%20of%20Service%20Vulnerability%26vs_k=1
By CESNET, z.s.p.o. Martin Krajči on 18. 3. 2026.