Cisco Unified Communications Products Security Hardening Release: October 2026
cisco-sa-voice-hardening-twgbH9e3
Summary
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient error handling in the web-based management interface. An attacker could exploit this vulnerability by authenticating with a malformed certificate.
A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Security Impact Rating: Medium CVE: CVE-2026-20311
Products covered
A separate affected-products list was not included in the collected bulletin.
Remediation
Cisco has released software updates that address this vulnerability.
CVEs in this advisory 1
Updates
- Published by Cisco
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.