CVE-2026-20113 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unauthenticated, remote…
Medium CVSS: 5.3

CVE-2026-20113

A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a carriage return line feed (CRLF) injection attack against a user.

This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by sending crafted packets to an affected device. A successful exploit could allow the attacker to arbitrarily inject log entries, manipulate the structure of log files, or obscure legitimate log events.
Vendor
-
Product
-
CWE
CWE-93
Yayın Tarihi
2026-03-25 16:16:15
Güncelleme
2026-03-26 15:13:15
Source Identifier
psirt@cisco.com
KEV Date Added
-

Kategoriler

Referanslar