{"api_version":"1","generated_at":"2026-09-11T02:45:37+00:00","cve":"CVE-2026-20281","urls":{"html":"https://cve.report/CVE-2026-20281","api":"https://cve.report/api/cve/CVE-2026-20281.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-20281","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-20281"},"summary":{"title":"Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability","description":"A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Protocol (SIP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper memory management when an affected device processes HTTP packets. An attacker could exploit this vulnerability by sending a continuous stream of crafted HTTP packets to the device. A successful exploit could allow the attacker to cause the affected device to continuously consume memory, resulting in a DoS condition. A manual reboot of the device is required to recover from this condition.\r\nNote: For this vulnerability to be exploitable, the phone must be registered to Cisco Unified Communications Manager (Unified CM) and have Web Access enabled. Web Access is disabled by default.","state":"PUBLISHED","assigner":"cisco","published_at":"2026-09-02 17:17:33","updated_at":"2026-09-02 19:23:13"},"problem_types":["CWE-401","CWE-401 Missing Release of Memory after Effective Lifetime"],"metrics":[{"version":"3.1","source":"psirt@cisco.com","type":"Secondary","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSSV3_1","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-dos-txMYNRzv","name":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-dos-txMYNRzv","refsource":"psirt@cisco.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-20281","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20281","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.1(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.5(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.3(2)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.2(2)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.3(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.3(1)SR4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.4(1)SR2 3rd Party","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.7(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.1(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(0.7) MPP","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 9.3(4) 3rd Party","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.5(1)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.2(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 9.3(4)SR3 3rd Party","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.2(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.5(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.3(1)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11-0-1MSR1-1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.4(1) 3rd Party","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.5(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.5(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.1(1)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.0(1)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.6(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.3(1.11) 3rd Party","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.0(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.0(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 9.3(3)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.5(1)SR3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.3(1)SR4b","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 9.3(4)SR1 3rd Party","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.3(1)SR5","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.1(1.9)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.3(1.9) 3rd Party","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 9.3(4)SR2 3rd Party","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.3(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.3(1)SR3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.1(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.0(1)SR3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.6(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.7(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.3(1)SR6","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.8(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.7(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(2)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(4)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(2)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(4)SR3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(5)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(3)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(3)SR4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(3)SR3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(2)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(4)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(5)SR3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(3)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(5)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(3)SR6","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(5)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(4)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(3)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(3)SR5","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(6)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.8(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 12.8(1)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.0(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.0(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(6)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 10.3(1)SR7","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.0(1)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.1(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.0(1)SR3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(6)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.1(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.1(1)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(6)SR4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.2(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.2(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(6)SR5","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.1(1)SR3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.2(1)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 3.1(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 3.0(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 2.3(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 2.3(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 2.2(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 2.1(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 2.0(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.2(1)SR3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 3.1(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.3(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 3.2(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.3(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.2(1)SR4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 3.3(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(6)SR6","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.3(1)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 3.4(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.3(1)SR3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 3.5(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 11.0(6)SR7","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 3.5(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.4(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 3.6(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 4.0(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.4(1)SR1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 4.1(1)","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 14.4(1)SR2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Session Initiation Protocol (SIP) Software","version":"affected 4.1(1)SR1","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[{"source":"CNA","title":"","value":"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.","time":"","lang":"en"}],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"20281","cve":"CVE-2026-20281","epss":"0.003320000","percentile":"0.259200000","score_date":"2026-09-06","updated_at":"2026-09-07 00:06:19"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-20281","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-09-02T16:45:26.338821Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-09-02T17:58:58.216Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unknown","product":"Cisco Session Initiation Protocol (SIP) Software","vendor":"Cisco","versions":[{"status":"affected","version":"12.1(1)SR1"},{"status":"affected","version":"11.5(1)"},{"status":"affected","version":"10.3(2)"},{"status":"affected","version":"10.2(2)"},{"status":"affected","version":"10.3(1)"},{"status":"affected","version":"10.3(1)SR4"},{"status":"affected","version":"11.0(1)"},{"status":"affected","version":"10.4(1)SR2 3rd Party"},{"status":"affected","version":"11.7(1)"},{"status":"affected","version":"12.1(1)"},{"status":"affected","version":"11.0(0.7) MPP"},{"status":"affected","version":"9.3(4) 3rd Party"},{"status":"affected","version":"12.5(1)SR2"},{"status":"affected","version":"10.2(1)SR1"},{"status":"affected","version":"9.3(4)SR3 3rd Party"},{"status":"affected","version":"10.2(1)"},{"status":"affected","version":"12.5(1)"},{"status":"affected","version":"10.3(1)SR2"},{"status":"affected","version":"11-0-1MSR1-1"},{"status":"affected","version":"10.4(1) 3rd Party"},{"status":"affected","version":"12.5(1)SR1"},{"status":"affected","version":"11.5(1)SR1"},{"status":"affected","version":"10.1(1)SR2"},{"status":"affected","version":"12.0(1)SR2"},{"status":"affected","version":"12.6(1)"},{"status":"affected","version":"10.3(1.11) 3rd Party"},{"status":"affected","version":"12.0(1)"},{"status":"affected","version":"12.0(1)SR1"},{"status":"affected","version":"9.3(3)"},{"status":"affected","version":"12.5(1)SR3"},{"status":"affected","version":"10.3(1)SR4b"},{"status":"affected","version":"9.3(4)SR1 3rd Party"},{"status":"affected","version":"10.3(1)SR5"},{"status":"affected","version":"10.1(1.9)"},{"status":"affected","version":"10.3(1.9) 3rd Party"},{"status":"affected","version":"9.3(4)SR2 3rd Party"},{"status":"affected","version":"10.3(1)SR1"},{"status":"affected","version":"10.3(1)SR3"},{"status":"affected","version":"10.1(1)SR1"},{"status":"affected","version":"12.0(1)SR3"},{"status":"affected","version":"12.6(1)SR1"},{"status":"affected","version":"12.7(1)"},{"status":"affected","version":"10.3(1)SR6"},{"status":"affected","version":"12.8(1)"},{"status":"affected","version":"12.7(1)SR1"},{"status":"affected","version":"11.0(2)SR1"},{"status":"affected","version":"11.0(4)"},{"status":"affected","version":"11.0(2)"},{"status":"affected","version":"11.0(4)SR3"},{"status":"affected","version":"11.0(5)"},{"status":"affected","version":"11.0(3)SR2"},{"status":"affected","version":"11.0(3)SR4"},{"status":"affected","version":"11.0(3)SR3"},{"status":"affected","version":"11.0(2)SR2"},{"status":"affected","version":"11.0(4)SR1"},{"status":"affected","version":"11.0(5)SR3"},{"status":"affected","version":"11.0(3)"},{"status":"affected","version":"11.0(5)SR2"},{"status":"affected","version":"11.0(3)SR6"},{"status":"affected","version":"11.0(5)SR1"},{"status":"affected","version":"11.0(4)SR2"},{"status":"affected","version":"11.0(3)SR1"},{"status":"affected","version":"11.0(3)SR5"},{"status":"affected","version":"11.0(6)"},{"status":"affected","version":"12.8(1)SR1"},{"status":"affected","version":"12.8(1)SR2"},{"status":"affected","version":"14.0(1)"},{"status":"affected","version":"14.0(1)SR1"},{"status":"affected","version":"11.0(6)SR1"},{"status":"affected","version":"10.3(1)SR7"},{"status":"affected","version":"14.0(1)SR2"},{"status":"affected","version":"14.1(1)"},{"status":"affected","version":"14.0(1)SR3"},{"status":"affected","version":"11.0(6)SR2"},{"status":"affected","version":"14.1(1)SR1"},{"status":"affected","version":"14.1(1)SR2"},{"status":"affected","version":"11.0(6)SR4"},{"status":"affected","version":"14.2(1)"},{"status":"affected","version":"14.2(1)SR1"},{"status":"affected","version":"11.0(6)SR5"},{"status":"affected","version":"14.1(1)SR3"},{"status":"affected","version":"14.2(1)SR2"},{"status":"affected","version":"3.1(1)"},{"status":"affected","version":"3.0(1)"},{"status":"affected","version":"2.3(1)"},{"status":"affected","version":"2.3(1)SR1"},{"status":"affected","version":"2.2(1)"},{"status":"affected","version":"2.1(1)"},{"status":"affected","version":"2.0(1)"},{"status":"affected","version":"14.2(1)SR3"},{"status":"affected","version":"3.1(1)SR1"},{"status":"affected","version":"14.3(1)"},{"status":"affected","version":"3.2(1)"},{"status":"affected","version":"14.3(1)SR1"},{"status":"affected","version":"14.2(1)SR4"},{"status":"affected","version":"3.3(1)"},{"status":"affected","version":"11.0(6)SR6"},{"status":"affected","version":"14.3(1)SR2"},{"status":"affected","version":"3.4(1)"},{"status":"affected","version":"14.3(1)SR3"},{"status":"affected","version":"3.5(1)"},{"status":"affected","version":"11.0(6)SR7"},{"status":"affected","version":"3.5(1)SR1"},{"status":"affected","version":"14.4(1)"},{"status":"affected","version":"3.6(1)"},{"status":"affected","version":"4.0(1)"},{"status":"affected","version":"14.4(1)SR1"},{"status":"affected","version":"4.1(1)"},{"status":"affected","version":"14.4(1)SR2"},{"status":"affected","version":"4.1(1)SR1"}]}],"descriptions":[{"lang":"en","value":"A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Protocol (SIP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper memory management when an affected device processes HTTP packets. An attacker could exploit this vulnerability by sending a continuous stream of crafted HTTP packets to the device. A successful exploit could allow the attacker to cause the affected device to continuously consume memory, resulting in a DoS condition. A manual reboot of the device is required to recover from this condition.\r\nNote: For this vulnerability to be exploitable, the phone must be registered to Cisco Unified Communications Manager (Unified CM) and have Web Access enabled. Web Access is disabled by default."}],"exploits":[{"lang":"en","value":"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"cvssV3_1"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-401","description":"Missing Release of Memory after Effective Lifetime","lang":"en","type":"cwe"}]}],"providerMetadata":{"dateUpdated":"2026-09-02T16:14:26.432Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"cisco-sa-phone-dos-txMYNRzv","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-dos-txMYNRzv"}],"source":{"advisory":"cisco-sa-phone-dos-txMYNRzv","defects":["CSCwu46404"],"discovery":"EXTERNAL"},"title":"Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability"}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2026-20281","datePublished":"2026-09-02T16:14:26.432Z","dateReserved":"2025-10-08T11:59:15.403Z","dateUpdated":"2026-09-02T17:58:58.216Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-09-02 17:17:33","lastModifiedDate":"2026-09-02 19:23:13","problem_types":["CWE-401","CWE-401 Missing Release of Memory after Effective Lifetime"],"metrics":{"cvssMetricV31":[{"source":"psirt@cisco.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-02T16:45:26.338821Z","id":"CVE-2026-20281","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"20281","Ordinal":"1","Title":"Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and","CVE":"CVE-2026-20281","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"20281","Ordinal":"1","NoteData":"A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Protocol (SIP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper memory management when an affected device processes HTTP packets. An attacker could exploit this vulnerability by sending a continuous stream of crafted HTTP packets to the device. A successful exploit could allow the attacker to cause the affected device to continuously consume memory, resulting in a DoS condition. A manual reboot of the device is required to recover from this condition.\r\nNote: For this vulnerability to be exploitable, the phone must be registered to Cisco Unified Communications Manager (Unified CM) and have Web Access enabled. Web Access is disabled by default.","Type":"Description","Title":"Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and"}]}}}