8.6

CVE-2026-20276

Medienbericht

Cisco IOS XR Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20276 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-691.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xr Version 6.5.25
Cisco ≫ Ios Xr Version 6.5.26
Cisco ≫ Ios Xr Version 6.5.28
Cisco ≫ Ios Xr Version 6.5.29
Cisco ≫ Ios Xr Version 6.5.31
Cisco ≫ Ios Xr Version 6.5.32
Cisco ≫ Ios Xr Version 6.5.33
Cisco ≫ Ios Xr Version 6.5.35
Cisco ≫ Ios Xr Version 6.5.90
Cisco ≫ Ios Xr Version 6.5.351
Cisco ≫ Ios Xr Version 6.5.352
Cisco ≫ Ios Xr Version 6.5.353
Cisco ≫ Ios Xr Version 6.7.1
Cisco ≫ Ios Xr Version 6.7.2
Cisco ≫ Ios Xr Version 6.7.3
Cisco ≫ Ios Xr Version 6.7.4
Cisco ≫ Ios Xr Version 6.7.35
Cisco ≫ Ios Xr Version 6.8.1
Cisco ≫ Ios Xr Version 6.8.2
Cisco ≫ Ios Xr Version 6.9.1
Cisco ≫ Ios Xr Version 6.9.2
Cisco ≫ Ios Xr Version 7.0.0
Cisco ≫ Ios Xr Version 7.0.1
Cisco ≫ Ios Xr Version 7.0.2
Cisco ≫ Ios Xr Version 7.0.11
Cisco ≫ Ios Xr Version 7.0.12
Cisco ≫ Ios Xr Version 7.0.14
Cisco ≫ Ios Xr Version 7.0.90
Cisco ≫ Ios Xr Version 7.1.1
Cisco ≫ Ios Xr Version 7.1.2
Cisco ≫ Ios Xr Version 7.1.3
Cisco ≫ Ios Xr Version 7.1.15
Cisco ≫ Ios Xr Version 7.1.25
Cisco ≫ Ios Xr Version 7.2.0
Cisco ≫ Ios Xr Version 7.2.1
Cisco ≫ Ios Xr Version 7.2.2
Cisco ≫ Ios Xr Version 7.2.12
Cisco ≫ Ios Xr Version 7.3.1
Cisco ≫ Ios Xr Version 7.3.2
Cisco ≫ Ios Xr Version 7.3.3
Cisco ≫ Ios Xr Version 7.3.4
Cisco ≫ Ios Xr Version 7.3.5
Cisco ≫ Ios Xr Version 7.3.6
Cisco ≫ Ios Xr Version 7.3.15
Cisco ≫ Ios Xr Version 7.3.16
Cisco ≫ Ios Xr Version 7.3.27
Cisco ≫ Ios Xr Version 7.4.1
Cisco ≫ Ios Xr Version 7.4.2
Cisco ≫ Ios Xr Version 7.4.15
Cisco ≫ Ios Xr Version 7.4.16
Cisco ≫ Ios Xr Version 7.5.1
Cisco ≫ Ios Xr Version 7.5.2
Cisco ≫ Ios Xr Version 7.5.3
Cisco ≫ Ios Xr Version 7.5.4
Cisco ≫ Ios Xr Version 7.5.5
Cisco ≫ Ios Xr Version 7.5.12
Cisco ≫ Ios Xr Version 7.5.52
Cisco ≫ Ios Xr Version 7.6.1
Cisco ≫ Ios Xr Version 7.6.2
Cisco ≫ Ios Xr Version 7.6.3
Cisco ≫ Ios Xr Version 7.6.15
Cisco ≫ Ios Xr Version 7.7.1
Cisco ≫ Ios Xr Version 7.7.2
Cisco ≫ Ios Xr Version 7.7.21
Cisco ≫ Ios Xr Version 7.8.1
Cisco ≫ Ios Xr Version 7.8.2
Cisco ≫ Ios Xr Version 7.8.12
Cisco ≫ Ios Xr Version 7.8.22
Cisco ≫ Ios Xr Version 7.8.23
Cisco ≫ Ios Xr Version 7.9.1
Cisco ≫ Ios Xr Version 7.9.2
Cisco ≫ Ios Xr Version 7.9.21
Cisco ≫ Ios Xr Version 7.10.1
Cisco ≫ Ios Xr Version 7.10.2
Cisco ≫ Ios Xr Version 7.11.1
Cisco ≫ Ios Xr Version 7.11.2
Cisco ≫ Ios Xr Version 7.11.21
Cisco ≫ Ios Xr Version 24.1.1
Cisco ≫ Ios Xr Version 24.1.2
Cisco ≫ Ios Xr Version 24.2.1
Cisco ≫ Ios Xr Version 24.2.2
Cisco ≫ Ios Xr Version 24.2.11
Cisco ≫ Ios Xr Version 24.2.20
Cisco ≫ Ios Xr Version 24.2.21
Cisco ≫ Ios Xr Version 24.3.1
Cisco ≫ Ios Xr Version 24.3.2
Cisco ≫ Ios Xr Version 24.3.20
Cisco ≫ Ios Xr Version 24.3.30
Cisco ≫ Ios Xr Version 24.4.1
Cisco ≫ Ios Xr Version 24.4.2
Cisco ≫ Ios Xr Version 24.4.10
Cisco ≫ Ios Xr Version 24.4.15
Cisco ≫ Ios Xr Version 24.4.30
Cisco ≫ Ios Xr Version 25.1.1
Cisco ≫ Ios Xr Version 25.1.2
Cisco ≫ Ios Xr Version 25.1.30
Cisco ≫ Ios Xr Version 25.2.1
Cisco ≫ Ios Xr Version 25.2.2
Cisco ≫ Ios Xr Version 25.2.15
Cisco ≫ Ios Xr Version 25.2.30
Cisco ≫ Ios Xr Version 25.3.1
Cisco ≫ Ios Xr Version 25.3.15
Cisco ≫ Ios Xr Version 25.4.1
Cisco ≫ Ios Xr Version 25.4.2
Cisco ≫ Ios Xr Version 25.4.30
Cisco ≫ Ios Xr Version 25.4.201
Cisco ≫ Ios Xr Version 26.1.1
Cisco ≫ Ios Xr Version 26.1.2
Cisco ≫ Ios Xr Version 26.2.1
Cisco ≫ Ios Xr Version 26.2.100
Cisco ≫ Ios Xr Version 26.2.101
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.164
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Cisco PSIRT 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-691 Insufficient Control Flow Management

The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
07.09.2026 18:21
https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification
Not Applicable
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM
Vendor Advisory