CISCO-CVE-2026-20086

HIGH8.6

Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Denial of Service Vulnerbility

Published Mar 25, 2026

Modified 5 months ago

Affected Packages

Cisco IOS XE

CiscoIOSXE

Affected versions:

17.14.117.14.1a17.15.117.15.1a17.15.1b17.15.1w17.15.1x17.15.1y17.15.1z17.15.2+20 more

CVSS Analysis

CVSS v3.1

8.6

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Upstream

Ecosystems

Timeline

PublishedMar 25, 2026

ModifiedMar 25, 2026