CVE-2025-20160 | Cisco IOS/IOS XE TACACS+ improper authentication (cisco-sa-ios-tacacs-hdB7thJw)

September 24, 2025 Yanac

A vulnerability, which was classified as critical, was found in Cisco IOS and IOS XE. Affected by this vulnerability is an unknown functionality of the component TACACS+. Such manipulation leads to improper authentication.

This vulnerability is traded as CVE-2025-20160. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More