CVE-2026-20084 - Vulnerability Analysis

Overview

Cisco IOS XE Software contains a denial of service vulnerability caused by improper handling of BOOTP packets in DHCP snooping on Catalyst 9000 Series Switches, letting unauthenticated remote attackers forward BOOTP packets between VLANs, exploit requires sending crafted BOOTP request packets.

Severity & Score

Impact

Attackers can cause high CPU utilization and device unreachability, resulting in denial of service.

Mitigation

Apply available workarounds or update to the latest Cisco IOS XE Software version.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bootp-WuBhNBxA

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner