CVE-2016-6415: Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

Required action (CISA's text)

Apply updates per vendor instructions.

Description (NVD)

Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1 (IKEv1) security negotiation requests. contains an information disclosure vulnerability in the Internet Key Exchange version 1 (IKEv1) that could allow an attacker to retrieve memory contents. Successful exploitation could allow the attacker to retrieve memory contents, which can lead to information disclosure.

SOURCES

• CISA KEVCISA Known Exploited Vulnerabilities catalog

Other Cisco flaws

• CVE-2026-20320: Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
• CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
• CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability
• CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
• CVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.