CVE-2026-20185
CVE-2026-20185: 1 tracked advisory record across Cisco. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Cisco
1 advisory- Advisory severityHigh7.7
High [CVE-2026-20185] Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vulnerability
cisco-sa-sg350-snmp-dos-GEFZr2TjSource published Source updated
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Series Managed Switches (SG350) and Cisco 350X Series Stackable Managed Switches (SG350X) firmware could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when parsing response data for a specific SNMP request. An attacker could exploit this vulnerability by sending a specific SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMPv2c or earlier, the attacker must know a valid read-write or…
- Related products — impact not confirmed
- Small Business Smart and Managed Switches
- Source-reported affected versions
- Scope: This vulnerability affects the following Cisco products if they are running Cisco SG350 and SG350X Series Managed Switch Firmware Release 2.5.9.54 or 2.5.9.55 and have two or more 60-watt Power over Ethernet (PoE) ports enabled:
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
- Workarounds
- There are no workarounds that address this vulnerability. However, as a mitigation, administrators may disable the vulnerable object ID (OID) on a device.
- To disable and exclude the OID, complete the following steps:
- 1. Create a new SNMP view excluding the affected OID. Use the following commands:
- snmp-server view SNMP_DOS iso included
6 more entries in the full advisory.
Android app · Google Play
Monitor future Cisco CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.