CVE-2026-20279

Medienbericht

EPSS 0.28%
Veröffentlicht 02.09.2026 16:13:58
Zuletzt bearbeitet 18.09.2026 13:17:28
Erkennungen
Login

Cisco IOS XR Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20279 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

CNA 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

HerstellerCisco

≫

Produkt Cisco IOS XR Software

Default Statusunknown

Version 6.5.29

Status affected

Version 7.0.1

Status affected

Version 6.5.26

Status affected

Version 6.5.25

Status affected

Version 6.5.28

Status affected

Version 6.5.90

Status affected

Version 7.1.1

Status affected

Version 7.0.90

Status affected

Version 6.7.1

Status affected

Version 7.0.2

Status affected

Version 7.1.15

Status affected

Version 7.2.1

Status affected

Version 7.1.2

Status affected

Version 6.7.2

Status affected

Version 7.0.11

Status affected

Version 7.0.12

Status affected

Version 7.0.14

Status affected

Version 7.1.25

Status affected

Version 7.2.12

Status affected

Version 7.3.1

Status affected

Version 7.1.3

Status affected

Version 6.7.3

Status affected

Version 7.4.1

Status affected

Version 7.2.2

Status affected

Version 6.7.4

Status affected

Version 6.5.31

Status affected

Version 7.3.15

Status affected

Version 7.3.16

Status affected

Version 6.8.1

Status affected

Version 7.4.15

Status affected

Version 6.5.32

Status affected

Version 7.3.2

Status affected

Version 7.5.1

Status affected

Version 7.4.16

Status affected

Version 7.3.27

Status affected

Version 7.6.1

Status affected

Version 7.5.2

Status affected

Version 7.8.1

Status affected

Version 7.6.15

Status affected

Version 7.5.12

Status affected

Version 7.8.12

Status affected

Version 7.3.3

Status affected

Version 7.7.1

Status affected

Version 6.8.2

Status affected

Version 7.3.4

Status affected

Version 7.4.2

Status affected

Version 6.7.35

Status affected

Version 6.9.1

Status affected

Version 7.6.2

Status affected

Version 7.5.3

Status affected

Version 7.7.2

Status affected

Version 6.9.2

Status affected

Version 7.9.1

Status affected

Version 7.10.1

Status affected

Version 7.8.2

Status affected

Version 7.5.4

Status affected

Version 6.5.33

Status affected

Version 7.8.22

Status affected

Version 7.7.21

Status affected

Version 7.9.2

Status affected

Version 7.3.5

Status affected

Version 7.5.5

Status affected

Version 7.11.1

Status affected

Version 7.9.21

Status affected

Version 7.10.2

Status affected

Version 24.1.1

Status affected

Version 7.6.3

Status affected

Version 7.3.6

Status affected

Version 7.5.52

Status affected

Version 7.11.2

Status affected

Version 24.2.1

Status affected

Version 24.1.2

Status affected

Version 24.2.11

Status affected

Version 24.3.1

Status affected

Version 24.4.1

Status affected

Version 24.2.2

Status affected

Version 7.8.23

Status affected

Version 7.11.21

Status affected

Version 24.2.20

Status affected

Version 24.3.2

Status affected

Version 24.4.10

Status affected

Version 6.5.35

Status affected

Version 25.1.1

Status affected

Version 24.4.2

Status affected

Version 24.3.20

Status affected

Version 24.4.15

Status affected

Version 25.2.1

Status affected

Version 6.5.351

Status affected

Version 25.1.2

Status affected

Version 24.3.30

Status affected

Version 25.3.1

Status affected

Version 6.5.352

Status affected

Version 24.4.30

Status affected

Version 24.2.21

Status affected

Version 25.4.1

Status affected

Version 25.2.2

Status affected

Version 25.2.15

Status affected

Version 7.2.0

Status affected

Version 7.0.0

Status affected

Version 25.2.30

Status affected

Version 6.5.353

Status affected

Version 26.1.1

Status affected

Version 25.1.30

Status affected

Version 25.3.15

Status affected

Version 26.2.100

Status affected

Version 25.4.2

Status affected

Version 26.2.1

Status affected

Version 25.4.30

Status affected

Version 26.1.2

Status affected

Version 25.4.201

Status affected

Version 26.2.101

Status affected

Version 25.2.21

Status affected

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.28%	0.205

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Cisco PSIRT	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

07.09.2026 18:21

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

03.09.2026 18:52

https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM

https://nvd.nist.gov/vuln/detail/CVE-2026-20279

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-20279

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-20279

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-20279