⚡ Exploit-DB.ai CRITICAL
CRITICAL

CVE-2023-20198

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

Cisco IOS XE zero-day — disable HTTP/HTTPS server on internet-facing devices immediately. This was actively exploited to create backdoor admin accounts. If exposed, assume compromise and follow Cisco PSIRT guidance.

📋 Official Description

Cisco IOS XE Software Web UI Feature Elevation of Privilege Vulnerability allows a remote, unauthenticated attacker to create an account on an affected system with privilege level 15 access.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →