Threat intelligence dashboard
CVE-2026-20278high

Cisco IOS XR Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20278 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) CWE-707.

Risk score

8.8

CVSS 3.1

Vendor
Cisco
Product
Cisco IOS XR Software
CWE
CWE-707
Published
Sep 2, 2026
Updated
Sep 16, 2026
CISA KEV
Not flagged

Affected products and versions

Cisco IOS XR Software

Cisco

Version / rangeStatusType
6.5.29affected
7.0.1affected
6.5.26affected
6.5.25affected
6.5.28affected
6.5.90affected
7.1.1affected
7.0.90affected
6.7.1affected
7.0.2affected
7.1.15affected
7.2.1affected
7.1.2affected
6.7.2affected
7.0.11affected
7.0.12affected
7.0.14affected
7.1.25affected
7.2.12affected
7.3.1affected
7.1.3affected
6.7.3affected
7.4.1affected
7.2.2affected
6.7.4affected
6.5.31affected
7.3.15affected
7.3.16affected
6.8.1affected
7.4.15affected
6.5.32affected
7.3.2affected
7.5.1affected
7.4.16affected
7.3.27affected
7.6.1affected
7.5.2affected
7.8.1affected
7.6.15affected
7.5.12affected
7.8.12affected
7.3.3affected
7.7.1affected
6.8.2affected
7.3.4affected
7.4.2affected
6.7.35affected
6.9.1affected
7.6.2affected
7.5.3affected
7.7.2affected
6.9.2affected
7.9.1affected
7.10.1affected
7.8.2affected
7.5.4affected
6.5.33affected
7.8.22affected
7.7.21affected
7.9.2affected
7.3.5affected
7.5.5affected
7.11.1affected
7.9.21affected
7.10.2affected
24.1.1affected
7.6.3affected
7.3.6affected
7.5.52affected
7.11.2affected
24.2.1affected
24.1.2affected
24.2.11affected
24.3.1affected
24.4.1affected
24.2.2affected
7.8.23affected
7.11.21affected
24.2.20affected
24.3.2affected
24.4.10affected
6.5.35affected
25.1.1affected
24.4.2affected
24.3.20affected
24.4.15affected
25.2.1affected
6.5.351affected
25.1.2affected
24.3.30affected
25.3.1affected
6.5.352affected
24.4.30affected
24.2.21affected
25.4.1affected
25.2.2affected
25.2.15affected
7.2.0affected
7.0.0affected
25.2.30affected
6.5.353affected
26.1.1affected
25.1.30affected
25.3.15affected
26.2.100affected
25.4.2affected
26.2.1affected
25.4.30affected
26.1.2affected
25.4.201affected
26.2.101affected

Technical metrics

8.8

CVSS 3.1

Severity
high
Source
cisco
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H