CVE-2026-20086 | Cisco IOS XE up to 17.18.1 CAPWAP missing values (cisco-sa-wlc-dos-hnX5KGOm)

A vulnerability marked as critical has been reported in Cisco IOS XE up to 17.18.1. This impacts an unknown function of the component CAPWAP. Performing a manipulation results in improper handling of missing values.

This vulnerability is known as CVE-2026-20086. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.