CVE-2026-20275

Medienbericht

EPSS 0.18%
Veröffentlicht 02.09.2026 16:13:46
Zuletzt bearbeitet 18.09.2026 13:17:27
Erkennungen
Login

Cisco IOS XR Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20275 are related to incorrect calculation issues that are grouped under the Common Weakness Enumeration (CWE) CWE-682.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

CNA 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

HerstellerCisco

≫

Produkt Cisco IOS XR Software

Default Statusunknown

Version 6.5.29

Status affected

Version 7.0.1

Status affected

Version 6.5.26

Status affected

Version 6.5.25

Status affected

Version 6.5.28

Status affected

Version 6.5.90

Status affected

Version 7.1.1

Status affected

Version 7.0.90

Status affected

Version 6.7.1

Status affected

Version 7.0.2

Status affected

Version 7.1.15

Status affected

Version 7.2.1

Status affected

Version 7.1.2

Status affected

Version 6.7.2

Status affected

Version 7.0.11

Status affected

Version 7.0.12

Status affected

Version 7.0.14

Status affected

Version 7.1.25

Status affected

Version 7.2.12

Status affected

Version 7.3.1

Status affected

Version 7.1.3

Status affected

Version 6.7.3

Status affected

Version 7.4.1

Status affected

Version 7.2.2

Status affected

Version 6.7.4

Status affected

Version 6.5.31

Status affected

Version 7.3.15

Status affected

Version 7.3.16

Status affected

Version 6.8.1

Status affected

Version 7.4.15

Status affected

Version 6.5.32

Status affected

Version 7.3.2

Status affected

Version 7.5.1

Status affected

Version 7.4.16

Status affected

Version 7.3.27

Status affected

Version 7.6.1

Status affected

Version 7.5.2

Status affected

Version 7.8.1

Status affected

Version 7.6.15

Status affected

Version 7.5.12

Status affected

Version 7.8.12

Status affected

Version 7.3.3

Status affected

Version 7.7.1

Status affected

Version 6.8.2

Status affected

Version 7.3.4

Status affected

Version 7.4.2

Status affected

Version 6.7.35

Status affected

Version 6.9.1

Status affected

Version 7.6.2

Status affected

Version 7.5.3

Status affected

Version 7.7.2

Status affected

Version 6.9.2

Status affected

Version 7.9.1

Status affected

Version 7.10.1

Status affected

Version 7.8.2

Status affected

Version 7.5.4

Status affected

Version 6.5.33

Status affected

Version 7.8.22

Status affected

Version 7.7.21

Status affected

Version 7.9.2

Status affected

Version 7.3.5

Status affected

Version 7.5.5

Status affected

Version 7.11.1

Status affected

Version 7.9.21

Status affected

Version 7.10.2

Status affected

Version 24.1.1

Status affected

Version 7.6.3

Status affected

Version 7.3.6

Status affected

Version 7.5.52

Status affected

Version 7.11.2

Status affected

Version 24.2.1

Status affected

Version 24.1.2

Status affected

Version 24.2.11

Status affected

Version 24.3.1

Status affected

Version 24.4.1

Status affected

Version 24.2.2

Status affected

Version 7.8.23

Status affected

Version 7.11.21

Status affected

Version 24.2.20

Status affected

Version 24.3.2

Status affected

Version 24.4.10

Status affected

Version 6.5.35

Status affected

Version 25.1.1

Status affected

Version 24.4.2

Status affected

Version 24.3.20

Status affected

Version 24.4.15

Status affected

Version 25.2.1

Status affected

Version 6.5.351

Status affected

Version 25.1.2

Status affected

Version 24.3.30

Status affected

Version 25.3.1

Status affected

Version 6.5.352

Status affected

Version 24.4.30

Status affected

Version 24.2.21

Status affected

Version 25.4.1

Status affected

Version 25.2.2

Status affected

Version 25.2.15

Status affected

Version 7.2.0

Status affected

Version 7.0.0

Status affected

Version 25.2.30

Status affected

Version 6.5.353

Status affected

Version 26.1.1

Status affected

Version 25.1.30

Status affected

Version 25.3.15

Status affected

Version 26.2.100

Status affected

Version 25.4.2

Status affected

Version 26.2.1

Status affected

Version 25.4.30

Status affected

Version 26.1.2

Status affected

Version 25.4.201

Status affected

Version 26.2.101

Status affected

Version 25.2.21

Status affected

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.18%	0.08

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Cisco PSIRT	8.8	2.8	5.9	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-682 Incorrect Calculation

The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

07.09.2026 18:21

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

03.09.2026 18:52

https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM

https://nvd.nist.gov/vuln/detail/CVE-2026-20275

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-20275

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-20275

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-20275