CVE-2026-20272
Cisco IOS XE Software Security Hardening Release
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20272 are related to issues with improper neutralization of special elements that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.
Weakness: CWE-74
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco IOS XE Software | Routing & Switching | cna-assigner |
Vendor-reported products (1)
- Cisco · Cisco IOS XE Software
Vendor advisory
cisco-sa-hardening-iosxe-V8NMuMZJ
Cisco IOS XE Software Security Hardening Release: August 2026
Cisco’s rating: Critical (advisory CVSS 9.8) · Published Aug 5, 2026 · updated Oct 2, 2026 (revision 1.1)
The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from