Known vulnerabilities in Cisco IOS XE 17.12.7b

Software: Cisco IOS XE
Version: 17.12.7b
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xe:*:*:*:*:*:*:*:*
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco IOS XE version 17.12.7b Cisco IOS XE 17.12.7b is affected by 11 vulnerabilities: 2 high, 7 medium, 2 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141054 - Unchecked Input for Loop Condition
CVE-2026-20301
CWE-606 Medium
No
No
17.12.8, 17.15.6, 17.18.4 06.08.2026 SB2026080633
#VU141053 - Improper input validation
CVE-2026-20273
CWE-20 Medium
No
No
17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, 26.1.2 06.08.2026 SB2026080632
#VU141049 - Improper control of a resource through its lifetime
CVE-2026-20269
CWE-664 Medium
No
No
17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, 26.1.2 06.08.2026 SB2026080632
#VU141050 - Incorrect Calculation
CVE-2026-20270
CWE-682 Medium
No
No
17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, 26.1.2 06.08.2026 SB2026080632
#VU141051 - Insufficient Control Flow Management
CVE-2026-20271
CWE-691 Medium
No
No
17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, 26.1.2 06.08.2026 SB2026080632
#VU141052 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-20272
CWE-74 High
No
No
17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, 26.1.2 06.08.2026 SB2026080632
#VU141047 - Improper Access Control
CVE-2026-20267
CWE-284 Medium
No
No
17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, 26.1.2 06.08.2026 SB2026080632
#VU141048 - Memory corruption
CVE-2026-20268
CWE-119 Medium
No
No
17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, 26.1.2 06.08.2026 SB2026080632
#VU141046 - Buffer over-read
CVE-2026-20311
CWE-126 Low
No
No
17.12.8, 17.15.6, 17.18.4 06.08.2026 SB2026080631
#VU141045 - Error Handling
CVE-2026-20263
CWE-388 High
No
No
17.12.8, 17.15.6, 17.18.4 06.08.2026 SB2026080630
#VU141024 - Improper Privilege Management
CVE-2026-20308
CWE-269 Low
No
No
17.12.8, 17.15.6, 17.18.4 06.08.2026 SB2026080611