CVE-2025-20199

Root privilege escalation via crafted configuration commands

Published May 7, 2025 · Updated Feb 26, 2026

Privilege escalation in Cisco IOS XE Software allows local users with privilege level 15 to gain root via crafted CLI configuration commands. The CLI insufficiently validates crafted input while processing specific configuration commands, but Cisco has not identified the commands or validation defect. Configuration-mode access, normally privilege level 15, is required; successful exploitation grants root access to the device's underlying operating system.

CVSS severity4.6
Medium
EPSS probability0.16%
Next 30 days · Sep 16, 2026
Known exploitationUnconfirmed
Based on sourced intelligence
Hinoki checkNot available
Coverage for this vulnerability

See if you're affected

Explore vulnerability checks for your environment with Hinoki.

Book a demo

Summary

What happened

Privilege escalation in Cisco IOS XE Software allows local users with privilege level 15 to gain root via crafted CLI configuration commands. The CLI insufficiently validates crafted input while processing specific configuration commands, but Cisco has not identified the commands or validation defect. Configuration-mode access, normally privilege level 15, is required; successful exploitation grants root access to the device's underlying operating system.

The record

CVE
CVE-2025-20199
Published
May 7, 2025
Updated
Feb 26, 2026
Vendor
ClamAV
Product
Cisco IOS XE Software
Classifications
CWE-20, CWE-754, T1068
Attack vector
local
Privileges
admin

Timeline

How it unfolded

  1. May 7, 2025CVE publishedPublication date reported by the CVE source.
  2. Feb 26, 2026Record updatedLatest update available in the CVE record.

Exploitability

Present is not the same as exploitable

Compare your product and version with the public record. A matching version still requires validation against your environment.

Is a vulnerable build present?

Compare these published version ranges with your installed build and any vendor patches.

  1. Affected versionversion=16.10.1
  2. Affected versionversion=16.10.1a
  3. Affected versionversion=16.10.1b
  4. Affected versionversion=16.10.1c
  5. Affected versionversion=16.10.1d
  6. Affected versionversion=16.10.1e
  7. Affected versionversion=16.10.1f
  8. Affected versionversion=16.10.1g
  9. Affected versionversion=16.10.1s
  10. Affected versionversion=16.10.2
  11. Affected versionversion=16.10.3
  12. Affected versionversion=16.1.1
  13. Affected versionversion=16.11.1
  14. Affected versionversion=16.11.1a
  15. Affected versionversion=16.11.1b
  16. Affected versionversion=16.11.1s
  17. Affected versionversion=16.11.2
  18. Affected versionversion=16.1.2
  19. Affected versionversion=16.12.1
  20. Affected versionversion=16.12.10
  21. Affected versionversion=16.12.10a
  22. Affected versionversion=16.12.11
  23. Affected versionversion=16.12.12
  24. Affected versionversion=16.12.1a
  25. Affected versionversion=16.12.1c
  26. Affected versionversion=16.12.1s
  27. Affected versionversion=16.12.1t
  28. Affected versionversion=16.12.1w
  29. Affected versionversion=16.12.1x
  30. Affected versionversion=16.12.1y
  31. Affected versionversion=16.12.1z1
  32. Affected versionversion=16.12.1z2
  33. Affected versionversion=16.12.2
  34. Affected versionversion=16.12.2a
  35. Affected versionversion=16.12.2s
  36. Affected versionversion=16.12.3
  37. Affected versionversion=16.12.3a
  38. Affected versionversion=16.12.3s
  39. Affected versionversion=16.12.4
  40. Affected versionversion=16.12.4a
  41. Affected versionversion=16.12.5
  42. Affected versionversion=16.12.5a
  43. Affected versionversion=16.12.5b
  44. Affected versionversion=16.12.6
  45. Affected versionversion=16.12.6a
  46. Affected versionversion=16.12.7
  47. Affected versionversion=16.12.8
  48. Affected versionversion=16.12.9
  49. Affected versionversion=16.1.3
  50. Affected versionversion=16.2.1
  51. Affected versionversion=16.2.2
  52. Affected versionversion=16.3.1
  53. Affected versionversion=16.3.10
  54. Affected versionversion=16.3.11
  55. Affected versionversion=16.3.1a
  56. Affected versionversion=16.3.2
  57. Affected versionversion=16.3.3
  58. Affected versionversion=16.3.4
  59. Affected versionversion=16.3.5
  60. Affected versionversion=16.3.5b
  61. Affected versionversion=16.3.6
  62. Affected versionversion=16.3.7
  63. Affected versionversion=16.3.8
  64. Affected versionversion=16.3.9
  65. Affected versionversion=16.4.1
  66. Affected versionversion=16.4.2
  67. Affected versionversion=16.4.3
  68. Affected versionversion=16.5.1
  69. Affected versionversion=16.5.1a
  70. Affected versionversion=16.5.1b
  71. Affected versionversion=16.5.2
  72. Affected versionversion=16.5.3
  73. Affected versionversion=16.6.1
  74. Affected versionversion=16.6.10
  75. Affected versionversion=16.6.2
  76. Affected versionversion=16.6.3
  77. Affected versionversion=16.6.4
  78. Affected versionversion=16.6.4a
  79. Affected versionversion=16.6.5
  80. Affected versionversion=16.6.5a
  81. Affected versionversion=16.6.6
  82. Affected versionversion=16.6.7
  83. Affected versionversion=16.6.8
  84. Affected versionversion=16.6.9
  85. Affected versionversion=16.7.1
  86. Affected versionversion=16.7.1a
  87. Affected versionversion=16.7.1b
  88. Affected versionversion=16.7.2
  89. Affected versionversion=16.7.3
  90. Affected versionversion=16.7.4
  91. Affected versionversion=16.8.1
  92. Affected versionversion=16.8.1a
  93. Affected versionversion=16.8.1b
  94. Affected versionversion=16.8.1c
  95. Affected versionversion=16.8.1d
  96. Affected versionversion=16.8.1e
  97. Affected versionversion=16.8.1s
  98. Affected versionversion=16.8.2
  99. Affected versionversion=16.8.3
  100. Affected versionversion=16.9.1
  101. Affected versionversion=16.9.1a
  102. Affected versionversion=16.9.1b
  103. Affected versionversion=16.9.1s
  104. Affected versionversion=16.9.2
  105. Affected versionversion=16.9.3
  106. Affected versionversion=16.9.3a
  107. Affected versionversion=16.9.4
  108. Affected versionversion=16.9.5
  109. Affected versionversion=16.9.5f
  110. Affected versionversion=16.9.6
  111. Affected versionversion=16.9.7
  112. Affected versionversion=16.9.8
  113. Affected versionversion=17.10.1
  114. Affected versionversion=17.10.1a
  115. Affected versionversion=17.10.1b
  116. Affected versionversion=17.1.1
  117. Affected versionversion=17.11.1
  118. Affected versionversion=17.11.1a
  119. Affected versionversion=17.11.99SW
  120. Affected versionversion=17.1.1a
  121. Affected versionversion=17.1.1s
  122. Affected versionversion=17.1.1t
  123. Affected versionversion=17.12.1
  124. Affected versionversion=17.12.1a
  125. Affected versionversion=17.12.1w
  126. Affected versionversion=17.12.1x
  127. Affected versionversion=17.12.1y
  128. Affected versionversion=17.12.1z
  129. Affected versionversion=17.12.1z1
  130. Affected versionversion=17.12.2
  131. Affected versionversion=17.12.2a
  132. Affected versionversion=17.12.3
  133. Affected versionversion=17.12.3a
  134. Affected versionversion=17.12.4
  135. Affected versionversion=17.12.4b
  136. Affected versionversion=17.1.3
  137. Affected versionversion=17.13.1
  138. Affected versionversion=17.13.1a
  139. Affected versionversion=17.14.1
  140. Affected versionversion=17.14.1a
  141. Affected versionversion=17.15.1
  142. Affected versionversion=17.15.1a
  143. Affected versionversion=17.15.1b
  144. Affected versionversion=17.15.1w
  145. Affected versionversion=17.2.1
  146. Affected versionversion=17.2.1a
  147. Affected versionversion=17.2.1r
  148. Affected versionversion=17.2.1v
  149. Affected versionversion=17.2.2
  150. Affected versionversion=17.2.3
  151. Affected versionversion=17.3.1
  152. Affected versionversion=17.3.1a
  153. Affected versionversion=17.3.1w
  154. Affected versionversion=17.3.1x
  155. Affected versionversion=17.3.1z
  156. Affected versionversion=17.3.2
  157. Affected versionversion=17.3.2a
  158. Affected versionversion=17.3.3
  159. Affected versionversion=17.3.4
  160. Affected versionversion=17.3.4a
  161. Affected versionversion=17.3.4b
  162. Affected versionversion=17.3.4c
  163. Affected versionversion=17.3.5
  164. Affected versionversion=17.3.5a
  165. Affected versionversion=17.3.5b
  166. Affected versionversion=17.3.6
  167. Affected versionversion=17.3.7
  168. Affected versionversion=17.3.8
  169. Affected versionversion=17.3.8a
  170. Affected versionversion=17.4.1
  171. Affected versionversion=17.4.1a
  172. Affected versionversion=17.4.1b
  173. Affected versionversion=17.4.2
  174. Affected versionversion=17.4.2a
  175. Affected versionversion=17.5.1
  176. Affected versionversion=17.5.1a
  177. Affected versionversion=17.6.1
  178. Affected versionversion=17.6.1a
  179. Affected versionversion=17.6.1w
  180. Affected versionversion=17.6.1x
  181. Affected versionversion=17.6.1y
  182. Affected versionversion=17.6.1z
  183. Affected versionversion=17.6.1z1
  184. Affected versionversion=17.6.2
  185. Affected versionversion=17.6.3
  186. Affected versionversion=17.6.3a
  187. Affected versionversion=17.6.4
  188. Affected versionversion=17.6.5
  189. Affected versionversion=17.6.5a
  190. Affected versionversion=17.6.6
  191. Affected versionversion=17.6.6a
  192. Affected versionversion=17.6.7
  193. Affected versionversion=17.6.8
  194. Affected versionversion=17.6.8a
  195. Affected versionversion=17.7.1
  196. Affected versionversion=17.7.1a
  197. Affected versionversion=17.7.1b
  198. Affected versionversion=17.7.2
  199. Affected versionversion=17.8.1
  200. Affected versionversion=17.8.1a
  201. Affected versionversion=17.9.1
  202. Affected versionversion=17.9.1a
  203. Affected versionversion=17.9.1w
  204. Affected versionversion=17.9.1x
  205. Affected versionversion=17.9.1x1
  206. Affected versionversion=17.9.1y
  207. Affected versionversion=17.9.1y1
  208. Affected versionversion=17.9.2
  209. Affected versionversion=17.9.2a
  210. Affected versionversion=17.9.3
  211. Affected versionversion=17.9.3a
  212. Affected versionversion=17.9.4
  213. Affected versionversion=17.9.4a
  214. Affected versionversion=17.9.5
  215. Affected versionversion=17.9.5a
  216. Affected versionversion=17.9.5b
  217. Affected versionversion=17.9.5e
  218. Affected versionversion=17.9.5f
  219. Affected versionversion=17.9.6
  220. Affected versionversion=17.9.6a
  221. Affected versionversion=3.10.0cE
  222. Affected versionversion=3.10.0E
  223. Affected versionversion=3.10.1E
  224. Affected versionversion=3.10.2E
  225. Affected versionversion=3.10.3E
  226. Affected versionversion=3.11.0E
  227. Affected versionversion=3.11.0S
  228. Affected versionversion=3.11.10E
  229. Affected versionversion=3.11.11E
  230. Affected versionversion=3.11.1aE
  231. Affected versionversion=3.11.1E
  232. Affected versionversion=3.11.1S
  233. Affected versionversion=3.11.2E
  234. Affected versionversion=3.11.2S
  235. Affected versionversion=3.11.3aE
  236. Affected versionversion=3.11.3E
  237. Affected versionversion=3.11.3S
  238. Affected versionversion=3.11.4E
  239. Affected versionversion=3.11.4S
  240. Affected versionversion=3.11.5E
  241. Affected versionversion=3.11.6E
  242. Affected versionversion=3.11.7E
  243. Affected versionversion=3.11.8E
  244. Affected versionversion=3.11.9E
  245. Affected versionversion=3.12.0aS
  246. Affected versionversion=3.12.0S
  247. Affected versionversion=3.12.1S
  248. Affected versionversion=3.12.2S
  249. Affected versionversion=3.12.3S
  250. Affected versionversion=3.12.4S
  251. Affected versionversion=3.13.0aS
  252. Affected versionversion=3.13.0S
  253. Affected versionversion=3.13.10S
  254. Affected versionversion=3.13.1S
  255. Affected versionversion=3.13.2aS
  256. Affected versionversion=3.13.2S
  257. Affected versionversion=3.13.3S
  258. Affected versionversion=3.13.4S
  259. Affected versionversion=3.13.5aS
  260. Affected versionversion=3.13.5S
  261. Affected versionversion=3.13.6aS
  262. Affected versionversion=3.13.6S
  263. Affected versionversion=3.13.7aS
  264. Affected versionversion=3.13.7S
  265. Affected versionversion=3.13.8S
  266. Affected versionversion=3.13.9S
  267. Affected versionversion=3.14.0S
  268. Affected versionversion=3.14.1S
  269. Affected versionversion=3.14.2S
  270. Affected versionversion=3.14.3S
  271. Affected versionversion=3.14.4S
  272. Affected versionversion=3.15.0S
  273. Affected versionversion=3.15.1cS
  274. Affected versionversion=3.15.1S
  275. Affected versionversion=3.15.2S
  276. Affected versionversion=3.15.3S
  277. Affected versionversion=3.15.4S
  278. Affected versionversion=3.16.0cS
  279. Affected versionversion=3.16.0S
  280. Affected versionversion=3.16.10S
  281. Affected versionversion=3.16.1aS
  282. Affected versionversion=3.16.1S
  283. Affected versionversion=3.16.2aS
  284. Affected versionversion=3.16.2bS
  285. Affected versionversion=3.16.2S
  286. Affected versionversion=3.16.3aS
  287. Affected versionversion=3.16.3S
  288. Affected versionversion=3.16.4aS
  289. Affected versionversion=3.16.4bS
  290. Affected versionversion=3.16.4dS
  291. Affected versionversion=3.16.4S
  292. Affected versionversion=3.16.5S
  293. Affected versionversion=3.16.6bS
  294. Affected versionversion=3.16.6S
  295. Affected versionversion=3.16.7aS
  296. Affected versionversion=3.16.7bS
  297. Affected versionversion=3.16.7S
  298. Affected versionversion=3.16.8S
  299. Affected versionversion=3.16.9S
  300. Affected versionversion=3.17.0S
  301. Affected versionversion=3.17.1aS
  302. Affected versionversion=3.17.1S
  303. Affected versionversion=3.17.2S
  304. Affected versionversion=3.17.3S
  305. Affected versionversion=3.17.4S
  306. Affected versionversion=3.18.0aS
  307. Affected versionversion=3.18.0S
  308. Affected versionversion=3.18.0SP
  309. Affected versionversion=3.18.1aSP
  310. Affected versionversion=3.18.1bSP
  311. Affected versionversion=3.18.1cSP
  312. Affected versionversion=3.18.1S
  313. Affected versionversion=3.18.1SP
  314. Affected versionversion=3.18.2aSP
  315. Affected versionversion=3.18.2S
  316. Affected versionversion=3.18.2SP
  317. Affected versionversion=3.18.3aSP
  318. Affected versionversion=3.18.3bSP
  319. Affected versionversion=3.18.3S
  320. Affected versionversion=3.18.3SP
  321. Affected versionversion=3.18.4S
  322. Affected versionversion=3.18.4SP
  323. Affected versionversion=3.18.5SP
  324. Affected versionversion=3.18.6SP
  325. Affected versionversion=3.18.7SP
  326. Affected versionversion=3.18.8aSP
  327. Affected versionversion=3.18.9SP
  328. Affected versionversion=3.2.0SE
  329. Affected versionversion=3.2.1SE
  330. Affected versionversion=3.2.2SE
  331. Affected versionversion=3.2.3SE
  332. Affected versionversion=3.3.0SE
  333. Affected versionversion=3.3.1SE
  334. Affected versionversion=3.3.2SE
  335. Affected versionversion=3.3.3SE
  336. Affected versionversion=3.3.4SE
  337. Affected versionversion=3.3.5SE
  338. Affected versionversion=3.4.0SG
  339. Affected versionversion=3.4.1SG
  340. Affected versionversion=3.4.2SG
  341. Affected versionversion=3.4.3SG
  342. Affected versionversion=3.4.4SG
  343. Affected versionversion=3.4.5SG
  344. Affected versionversion=3.4.6SG
  345. Affected versionversion=3.4.7SG
  346. Affected versionversion=3.4.8SG
  347. Affected versionversion=3.5.0E
  348. Affected versionversion=3.5.1E
  349. Affected versionversion=3.5.2E
  350. Affected versionversion=3.5.3E
  351. Affected versionversion=3.6.0E
  352. Affected versionversion=3.6.10E
  353. Affected versionversion=3.6.1E
  354. Affected versionversion=3.6.2aE
  355. Affected versionversion=3.6.2E
  356. Affected versionversion=3.6.3E
  357. Affected versionversion=3.6.4E
  358. Affected versionversion=3.6.5aE
  359. Affected versionversion=3.6.5bE
  360. Affected versionversion=3.6.5E
  361. Affected versionversion=3.6.6E
  362. Affected versionversion=3.6.7bE
  363. Affected versionversion=3.6.7E
  364. Affected versionversion=3.6.8E
  365. Affected versionversion=3.6.9E
  366. Affected versionversion=3.7.0bS
  367. Affected versionversion=3.7.0E
  368. Affected versionversion=3.7.0S
  369. Affected versionversion=3.7.1aS
  370. Affected versionversion=3.7.1E
  371. Affected versionversion=3.7.1S
  372. Affected versionversion=3.7.2E
  373. Affected versionversion=3.7.2S
  374. Affected versionversion=3.7.2tS
  375. Affected versionversion=3.7.3E
  376. Affected versionversion=3.7.3S
  377. Affected versionversion=3.7.4aS
  378. Affected versionversion=3.7.4E
  379. Affected versionversion=3.7.4S
  380. Affected versionversion=3.7.5E
  381. Affected versionversion=3.7.5S
  382. Affected versionversion=3.7.6S
  383. Affected versionversion=3.7.7S
  384. Affected versionversion=3.8.0E
  385. Affected versionversion=3.8.0S
  386. Affected versionversion=3.8.10E
  387. Affected versionversion=3.8.1E
  388. Affected versionversion=3.8.1S
  389. Affected versionversion=3.8.2E
  390. Affected versionversion=3.8.2S
  391. Affected versionversion=3.8.3E
  392. Affected versionversion=3.8.4E
  393. Affected versionversion=3.8.5aE
  394. Affected versionversion=3.8.5E
  395. Affected versionversion=3.8.6E
  396. Affected versionversion=3.8.7E
  397. Affected versionversion=3.8.8E
  398. Affected versionversion=3.8.9E
  399. Affected versionversion=3.9.0aS
  400. Affected versionversion=3.9.0E
  401. Affected versionversion=3.9.0S
  402. Affected versionversion=3.9.1aS
  403. Affected versionversion=3.9.1E
  404. Affected versionversion=3.9.1S
  405. Affected versionversion=3.9.2E
  406. Affected versionversion=3.9.2S

What conditions does exploitation require?

Attack vectorlocal
Required privilegesadmin

What is affected?

ClamAV · Cisco IOS XE Softwareversion=16.10.1; version=16.10.1a; version=16.10.1b; version=16.10.1c; version=16.10.1d; version=16.10.1e; version=16.10.1f; version=16.10.1g; version=16.10.1s; version=16.10.2; version=16.10.3; version=16.1.1; version=16.11.1; version=16.11.1a; version=16.11.1b; version=16.11.1s; version=16.11.2; version=16.1.2; version=16.12.1; version=16.12.10; version=16.12.10a; version=16.12.11; version=16.12.12; version=16.12.1a; version=16.12.1c; version=16.12.1s; version=16.12.1t; version=16.12.1w; version=16.12.1x; version=16.12.1y; version=16.12.1z1; version=16.12.1z2; version=16.12.2; version=16.12.2a; version=16.12.2s; version=16.12.3; version=16.12.3a; version=16.12.3s; version=16.12.4; version=16.12.4a; version=16.12.5; version=16.12.5a; version=16.12.5b; version=16.12.6; version=16.12.6a; version=16.12.7; version=16.12.8; version=16.12.9; version=16.1.3; version=16.2.1; version=16.2.2; version=16.3.1; version=16.3.10; version=16.3.11; version=16.3.1a; version=16.3.2; version=16.3.3; version=16.3.4; version=16.3.5; version=16.3.5b; version=16.3.6; version=16.3.7; version=16.3.8; version=16.3.9; version=16.4.1; version=16.4.2; version=16.4.3; version=16.5.1; version=16.5.1a; version=16.5.1b; version=16.5.2; version=16.5.3; version=16.6.1; version=16.6.10; version=16.6.2; version=16.6.3; version=16.6.4; version=16.6.4a; version=16.6.5; version=16.6.5a; version=16.6.6; version=16.6.7; version=16.6.8; version=16.6.9; version=16.7.1; version=16.7.1a; version=16.7.1b; version=16.7.2; version=16.7.3; version=16.7.4; version=16.8.1; version=16.8.1a; version=16.8.1b; version=16.8.1c; version=16.8.1d; version=16.8.1e; version=16.8.1s; version=16.8.2; version=16.8.3; version=16.9.1; version=16.9.1a; version=16.9.1b; version=16.9.1s; version=16.9.2; version=16.9.3; version=16.9.3a; version=16.9.4; version=16.9.5; version=16.9.5f; version=16.9.6; version=16.9.7; version=16.9.8; version=17.10.1; version=17.10.1a; version=17.10.1b; version=17.1.1; version=17.11.1; version=17.11.1a; version=17.11.99SW; version=17.1.1a; version=17.1.1s; version=17.1.1t; version=17.12.1; version=17.12.1a; version=17.12.1w; version=17.12.1x; version=17.12.1y; version=17.12.1z; version=17.12.1z1; version=17.12.2; version=17.12.2a; version=17.12.3; version=17.12.3a; version=17.12.4; version=17.12.4b; version=17.1.3; version=17.13.1; version=17.13.1a; version=17.14.1; version=17.14.1a; version=17.15.1; version=17.15.1a; version=17.15.1b; version=17.15.1w; version=17.2.1; version=17.2.1a; version=17.2.1r; version=17.2.1v; version=17.2.2; version=17.2.3; version=17.3.1; version=17.3.1a; version=17.3.1w; version=17.3.1x; version=17.3.1z; version=17.3.2; version=17.3.2a; version=17.3.3; version=17.3.4; version=17.3.4a; version=17.3.4b; version=17.3.4c; version=17.3.5; version=17.3.5a; version=17.3.5b; version=17.3.6; version=17.3.7; version=17.3.8; version=17.3.8a; version=17.4.1; version=17.4.1a; version=17.4.1b; version=17.4.2; version=17.4.2a; version=17.5.1; version=17.5.1a; version=17.6.1; version=17.6.1a; version=17.6.1w; version=17.6.1x; version=17.6.1y; version=17.6.1z; version=17.6.1z1; version=17.6.2; version=17.6.3; version=17.6.3a; version=17.6.4; version=17.6.5; version=17.6.5a; version=17.6.6; version=17.6.6a; version=17.6.7; version=17.6.8; version=17.6.8a; version=17.7.1; version=17.7.1a; version=17.7.1b; version=17.7.2; version=17.8.1; version=17.8.1a; version=17.9.1; version=17.9.1a; version=17.9.1w; version=17.9.1x; version=17.9.1x1; version=17.9.1y; version=17.9.1y1; version=17.9.2; version=17.9.2a; version=17.9.3; version=17.9.3a; version=17.9.4; version=17.9.4a; version=17.9.5; version=17.9.5a; version=17.9.5b; version=17.9.5e; version=17.9.5f; version=17.9.6; version=17.9.6a; version=3.10.0cE; version=3.10.0E; version=3.10.1E; version=3.10.2E; version=3.10.3E; version=3.11.0E; version=3.11.0S; version=3.11.10E; version=3.11.11E; version=3.11.1aE; version=3.11.1E; version=3.11.1S; version=3.11.2E; version=3.11.2S; version=3.11.3aE; version=3.11.3E; version=3.11.3S; version=3.11.4E; version=3.11.4S; version=3.11.5E; version=3.11.6E; version=3.11.7E; version=3.11.8E; version=3.11.9E; version=3.12.0aS; version=3.12.0S; version=3.12.1S; version=3.12.2S; version=3.12.3S; version=3.12.4S; version=3.13.0aS; version=3.13.0S; version=3.13.10S; version=3.13.1S; version=3.13.2aS; version=3.13.2S; version=3.13.3S; version=3.13.4S; version=3.13.5aS; version=3.13.5S; version=3.13.6aS; version=3.13.6S; version=3.13.7aS; version=3.13.7S; version=3.13.8S; version=3.13.9S; version=3.14.0S; version=3.14.1S; version=3.14.2S; version=3.14.3S; version=3.14.4S; version=3.15.0S; version=3.15.1cS; version=3.15.1S; version=3.15.2S; version=3.15.3S; version=3.15.4S; version=3.16.0cS; version=3.16.0S; version=3.16.10S; version=3.16.1aS; version=3.16.1S; version=3.16.2aS; version=3.16.2bS; version=3.16.2S; version=3.16.3aS; version=3.16.3S; version=3.16.4aS; version=3.16.4bS; version=3.16.4dS; version=3.16.4S; version=3.16.5S; version=3.16.6bS; version=3.16.6S; version=3.16.7aS; version=3.16.7bS; version=3.16.7S; version=3.16.8S; version=3.16.9S; version=3.17.0S; version=3.17.1aS; version=3.17.1S; version=3.17.2S; version=3.17.3S; version=3.17.4S; version=3.18.0aS; version=3.18.0S; version=3.18.0SP; version=3.18.1aSP; version=3.18.1bSP; version=3.18.1cSP; version=3.18.1S; version=3.18.1SP; version=3.18.2aSP; version=3.18.2S; version=3.18.2SP; version=3.18.3aSP; version=3.18.3bSP; version=3.18.3S; version=3.18.3SP; version=3.18.4S; version=3.18.4SP; version=3.18.5SP; version=3.18.6SP; version=3.18.7SP; version=3.18.8aSP; version=3.18.9SP; version=3.2.0SE; version=3.2.1SE; version=3.2.2SE; version=3.2.3SE; version=3.3.0SE; version=3.3.1SE; version=3.3.2SE; version=3.3.3SE; version=3.3.4SE; version=3.3.5SE; version=3.4.0SG; version=3.4.1SG; version=3.4.2SG; version=3.4.3SG; version=3.4.4SG; version=3.4.5SG; version=3.4.6SG; version=3.4.7SG; version=3.4.8SG; version=3.5.0E; version=3.5.1E; version=3.5.2E; version=3.5.3E; version=3.6.0E; version=3.6.10E; version=3.6.1E; version=3.6.2aE; version=3.6.2E; version=3.6.3E; version=3.6.4E; version=3.6.5aE; version=3.6.5bE; version=3.6.5E; version=3.6.6E; version=3.6.7bE; version=3.6.7E; version=3.6.8E; version=3.6.9E; version=3.7.0bS; version=3.7.0E; version=3.7.0S; version=3.7.1aS; version=3.7.1E; version=3.7.1S; version=3.7.2E; version=3.7.2S; version=3.7.2tS; version=3.7.3E; version=3.7.3S; version=3.7.4aS; version=3.7.4E; version=3.7.4S; version=3.7.5E; version=3.7.5S; version=3.7.6S; version=3.7.7S; version=3.8.0E; version=3.8.0S; version=3.8.10E; version=3.8.1E; version=3.8.1S; version=3.8.2E; version=3.8.2S; version=3.8.3E; version=3.8.4E; version=3.8.5aE; version=3.8.5E; version=3.8.6E; version=3.8.7E; version=3.8.8E; version=3.8.9E; version=3.9.0aS; version=3.9.0E; version=3.9.0S; version=3.9.1aS; version=3.9.1E; version=3.9.1S; version=3.9.2E; version=3.9.2S

Published CVSS scores

8.2NIST NVDCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
4.6Cisco Systems, Inc.CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

CVSS describes severity. EPSS estimates exploitation probability.

Attacks

What attackers are doing with it

Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.

Daily unique IPsNo honeypot observations are available for this CVE in the selected window.

No observations available

Sep 10, 2026Sep 16, 2026
Latest reporting daySep 16, 2026
Latest daily unique IPsUnavailable
Prior 30-day averageUnavailable
SourceShadowserver honeypots (KEV)
Vectorlocal
Privilegesadmin
Known exploitationUnconfirmed
Public exploitUnconfirmed

Weakness, pattern, technique

CWE-20Improper Input Validation
CWE-754Improper Check for Unusual or Exceptional Conditions
T1068Exploitation for Privilege Escalation

Public exploit references

No public exploit references are available in this record.

Labels summarize the accepted research assessment. They do not indicate a test against your environment.

Technologies

Your stack

See the directory against your own environment.

Your stack

Check the software in your environment

Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.

Book a demo