Cisco Industrial Ethernet Switches vulnerabilities

2 CVEs affecting Cisco Industrial Ethernet Switches, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20232, published 2026-08-19.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-20177, published 2026-08-19. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an unauthenticated, remote attacker to cause the device manager,…
• CVE-2026-20232, published 2026-08-19. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting…