8.8

CVE-2026-20280

Medienbericht

Cisco IOS XR Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20280 are related to improper checking or handling of exceptional condition issues that are grouped under the Common Weakness Enumeration (CWE) CWE-703.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xr Version 6.5.25
Cisco ≫ Ios Xr Version 6.5.26
Cisco ≫ Ios Xr Version 6.5.28
Cisco ≫ Ios Xr Version 6.5.29
Cisco ≫ Ios Xr Version 6.5.31
Cisco ≫ Ios Xr Version 6.5.32
Cisco ≫ Ios Xr Version 6.5.33
Cisco ≫ Ios Xr Version 6.5.35
Cisco ≫ Ios Xr Version 6.5.90
Cisco ≫ Ios Xr Version 6.5.351
Cisco ≫ Ios Xr Version 6.5.352
Cisco ≫ Ios Xr Version 6.5.353
Cisco ≫ Ios Xr Version 6.7.1
Cisco ≫ Ios Xr Version 6.7.2
Cisco ≫ Ios Xr Version 6.7.3
Cisco ≫ Ios Xr Version 6.7.4
Cisco ≫ Ios Xr Version 6.7.35
Cisco ≫ Ios Xr Version 6.8.1
Cisco ≫ Ios Xr Version 6.8.2
Cisco ≫ Ios Xr Version 6.9.1
Cisco ≫ Ios Xr Version 6.9.2
Cisco ≫ Ios Xr Version 7.0.0
Cisco ≫ Ios Xr Version 7.0.1
Cisco ≫ Ios Xr Version 7.0.2
Cisco ≫ Ios Xr Version 7.0.11
Cisco ≫ Ios Xr Version 7.0.12
Cisco ≫ Ios Xr Version 7.0.14
Cisco ≫ Ios Xr Version 7.0.90
Cisco ≫ Ios Xr Version 7.1.1
Cisco ≫ Ios Xr Version 7.1.2
Cisco ≫ Ios Xr Version 7.1.3
Cisco ≫ Ios Xr Version 7.1.15
Cisco ≫ Ios Xr Version 7.1.25
Cisco ≫ Ios Xr Version 7.2.0
Cisco ≫ Ios Xr Version 7.2.1
Cisco ≫ Ios Xr Version 7.2.2
Cisco ≫ Ios Xr Version 7.2.12
Cisco ≫ Ios Xr Version 7.3.1
Cisco ≫ Ios Xr Version 7.3.2
Cisco ≫ Ios Xr Version 7.3.3
Cisco ≫ Ios Xr Version 7.3.4
Cisco ≫ Ios Xr Version 7.3.5
Cisco ≫ Ios Xr Version 7.3.6
Cisco ≫ Ios Xr Version 7.3.15
Cisco ≫ Ios Xr Version 7.3.16
Cisco ≫ Ios Xr Version 7.3.27
Cisco ≫ Ios Xr Version 7.4.1
Cisco ≫ Ios Xr Version 7.4.2
Cisco ≫ Ios Xr Version 7.4.15
Cisco ≫ Ios Xr Version 7.4.16
Cisco ≫ Ios Xr Version 7.5.1
Cisco ≫ Ios Xr Version 7.5.2
Cisco ≫ Ios Xr Version 7.5.3
Cisco ≫ Ios Xr Version 7.5.4
Cisco ≫ Ios Xr Version 7.5.5
Cisco ≫ Ios Xr Version 7.5.12
Cisco ≫ Ios Xr Version 7.5.52
Cisco ≫ Ios Xr Version 7.6.1
Cisco ≫ Ios Xr Version 7.6.2
Cisco ≫ Ios Xr Version 7.6.3
Cisco ≫ Ios Xr Version 7.6.15
Cisco ≫ Ios Xr Version 7.7.1
Cisco ≫ Ios Xr Version 7.7.2
Cisco ≫ Ios Xr Version 7.7.21
Cisco ≫ Ios Xr Version 7.8.1
Cisco ≫ Ios Xr Version 7.8.2
Cisco ≫ Ios Xr Version 7.8.12
Cisco ≫ Ios Xr Version 7.8.22
Cisco ≫ Ios Xr Version 7.8.23
Cisco ≫ Ios Xr Version 7.9.1
Cisco ≫ Ios Xr Version 7.9.2
Cisco ≫ Ios Xr Version 7.9.21
Cisco ≫ Ios Xr Version 7.10.1
Cisco ≫ Ios Xr Version 7.10.2
Cisco ≫ Ios Xr Version 7.11.1
Cisco ≫ Ios Xr Version 7.11.2
Cisco ≫ Ios Xr Version 7.11.21
Cisco ≫ Ios Xr Version 24.1.1
Cisco ≫ Ios Xr Version 24.1.2
Cisco ≫ Ios Xr Version 24.2.1
Cisco ≫ Ios Xr Version 24.2.2
Cisco ≫ Ios Xr Version 24.2.11
Cisco ≫ Ios Xr Version 24.2.20
Cisco ≫ Ios Xr Version 24.2.21
Cisco ≫ Ios Xr Version 24.3.1
Cisco ≫ Ios Xr Version 24.3.2
Cisco ≫ Ios Xr Version 24.3.20
Cisco ≫ Ios Xr Version 24.3.30
Cisco ≫ Ios Xr Version 24.4.1
Cisco ≫ Ios Xr Version 24.4.2
Cisco ≫ Ios Xr Version 24.4.10
Cisco ≫ Ios Xr Version 24.4.15
Cisco ≫ Ios Xr Version 24.4.30
Cisco ≫ Ios Xr Version 25.1.1
Cisco ≫ Ios Xr Version 25.1.2
Cisco ≫ Ios Xr Version 25.1.30
Cisco ≫ Ios Xr Version 25.2.1
Cisco ≫ Ios Xr Version 25.2.2
Cisco ≫ Ios Xr Version 25.2.15
Cisco ≫ Ios Xr Version 25.2.30
Cisco ≫ Ios Xr Version 25.3.1
Cisco ≫ Ios Xr Version 25.3.15
Cisco ≫ Ios Xr Version 25.4.1
Cisco ≫ Ios Xr Version 25.4.2
Cisco ≫ Ios Xr Version 25.4.30
Cisco ≫ Ios Xr Version 25.4.201
Cisco ≫ Ios Xr Version 26.1.1
Cisco ≫ Ios Xr Version 26.1.2
Cisco ≫ Ios Xr Version 26.2.1
Cisco ≫ Ios Xr Version 26.2.100
Cisco ≫ Ios Xr Version 26.2.101
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.27% 0.188
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Cisco PSIRT 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-703 Improper Check or Handling of Exceptional Conditions

The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
07.09.2026 18:21
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
03.09.2026 18:52
https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification
Not Applicable
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM
Vendor Advisory