CVE-2026-20271High· 8.6▾ TwilightAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 47.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.3%
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20271 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-691.
ios_xe = 16.6.2ios_xe = 16.6.3ios_xe = 16.6.4ios_xe = 16.6.4aios_xe = 16.6.4sios_xe = 16.6.5ios_xe = 16.6.5aios_xe = 16.6.5bios_xe = 16.6.6ios_xe = 16.6.7ios_xe = 16.6.7aios_xe = 16.6.8ios_xe = 16.6.9ios_xe = 16.6.10ios_xe = 16.7.1ios_xe = 16.7.1aios_xe = 16.7.1bios_xe = 16.7.2ios_xe = 16.7.3ios_xe = 16.7.4ios_xe = 16.8.1ios_xe = 16.8.1aios_xe = 16.8.1bios_xe = 16.8.1cios_xe = 16.8.1dios_xe = 16.8.1eios_xe = 16.8.1sios_xe = 16.8.2ios_xe = 16.8.3ios_xe = 16.9.1ios_xe = 16.9.1aios_xe = 16.9.1bios_xe = 16.9.1cios_xe = 16.9.1dios_xe = 16.9.1sios_xe = 16.9.2ios_xe = 16.9.2aios_xe = 16.9.2sios_xe = 16.9.3ios_xe = 16.9.3aios_xe = 16.9.3hios_xe = 16.9.3sios_xe = 16.9.4ios_xe = 16.9.4cios_xe = 16.9.5ios_xe = 16.9.5fios_xe = 16.9.6ios_xe = 16.9.7ios_xe = 16.9.8ios_xe = 16.9.8aios_xe = 16.9.8bios_xe = 16.10.1ios_xe = 16.10.1aios_xe = 16.10.1bios_xe = 16.10.1cios_xe = 16.10.1dios_xe = 16.10.1eios_xe = 16.10.1fios_xe = 16.10.1gios_xe = 16.10.1sios_xe = 16.10.2ios_xe = 16.10.3ios_xe = 16.11.1ios_xe = 16.11.1aios_xe = 16.11.1bios_xe = 16.11.1cios_xe = 16.11.1sios_xe = 16.11.2ios_xe = 16.12.1ios_xe = 16.12.1aios_xe = 16.12.1cios_xe = 16.12.1sios_xe = 16.12.1tios_xe = 16.12.1wios_xe = 16.12.1xios_xe = 16.12.1yios_xe = 16.12.1zios_xe = 16.12.1z1ios_xe = 16.12.1z2ios_xe = 16.12.2ios_xe = 16.12.2aios_xe = 16.12.2sios_xe = 16.12.2tios_xe = 16.12.3ios_xe = 16.12.3aios_xe = 16.12.3sios_xe = 16.12.4ios_xe = 16.12.4aios_xe = 16.12.5ios_xe = 16.12.5aios_xe = 16.12.5bios_xe = 16.12.6ios_xe = 16.12.6aios_xe = 16.12.7ios_xe = 16.12.8ios_xe = 16.12.9ios_xe = 16.12.10ios_xe = 16.12.10aios_xe = 16.12.11ios_xe = 16.12.12Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-20272Critical· 9.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review
CVE-2026-20270High· 8.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review
CVE-2026-20269High· 8.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review
CVE-2026-20268High· 8.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review
CVE-2026-20267Critical· 9.0As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review
CVE-2026-20276High· 8.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review