CVE-2026-20004
CVE-2026-20004: 1 tracked advisory record across Cisco. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Cisco
1 advisory- Advisory severityHigh7.4
High [CVE-2026-20004] Cisco IOS XE Software TLS Memory Exhaustion Denial of Service Vulnerability
cisco-sa-iosxe-tls-dos-TVgLDEZLSource published Source updated
A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device. This vulnerability is due to improper management of memory resources during TLS connection setup. An attacker could exploit this vulnerability by repeatedly triggering the conditions that cause the memory increase. This could be done in a variety of ways, such as by repeatedly attempting Extensible Authentication Protocol (EAP) authentication when local EAP is enabled on an affected device or by using a machine-in-the-middle att…
- Related products — impact not confirmed
- Cisco IOS XE Software 16.9.2
- Cisco IOS XE Software 16.9.1a
- Cisco IOS XE Software 16.9.1b
- Cisco IOS XE Software 16.9.1s
3 more entries in the full advisory.
- Source-reported affected versions
- Scope: This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS XE Software if they are configured with features that may establish TLS connections, including but not limited to:
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
- Workarounds
- There are no workarounds that address this vulnerability.
Android app · Google Play
Monitor future Cisco CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.