CVE-2026-20086 - Vulnerability Analysis

Overview

Cisco IOS XE Wireless Controller Software for Catalyst CW9800 Family contains a denial of service vulnerability caused by improper handling of malformed CAPWAP packets, letting unauthenticated remote attackers cause device reloads, exploit requires sending malformed CAPWAP packets.

Severity & Score

Impact

Unauthenticated remote attackers can cause device reloads, resulting in denial of service.

Mitigation

Update to the latest available version of Cisco IOS XE Wireless Controller Software for Catalyst CW9800 Family.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-dos-hnX5KGOm

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner