← Back

CVE-2026-20276

nvd nist
Published: Sep 2, 2026Modified: Sep 18, 2026

JSON object

Loading...
8.6
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 4.0
Source: NVD

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20276 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-691.

Affected (111)

Products: Cisco: Ios Xr
Cisco
1 product
Ios Xr
Configuration A
111 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Ios Xr
Version 24.1.1
Ios Xr
Version 24.1.2
Ios Xr
Version 24.2.11
Ios Xr
Version 24.2.1
Ios Xr
Version 24.2.20
Ios Xr
Version 24.2.21
Ios Xr
Version 24.2.2
Ios Xr
Version 24.3.1
Ios Xr
Version 24.3.20
Ios Xr
Version 24.3.2
Ios Xr
Version 24.3.30
Ios Xr
Version 24.4.10
Ios Xr
Version 24.4.15
Ios Xr
Version 24.4.1
Ios Xr
Version 24.4.2
Ios Xr
Version 24.4.30
Ios Xr
Version 25.1.1
Ios Xr
Version 25.1.2
Ios Xr
Version 25.1.30
Ios Xr
Version 25.2.15
Ios Xr
Version 25.2.1
Ios Xr
Version 25.2.2
Ios Xr
Version 25.2.30
Ios Xr
Version 25.3.15
Ios Xr
Version 25.3.1
Ios Xr
Version 25.4.1
Ios Xr
Version 25.4.201
Ios Xr
Version 25.4.2
Ios Xr
Version 25.4.30
Ios Xr
Version 26.1.1
Ios Xr
Version 26.1.2
Ios Xr
Version 26.2.100
Ios Xr
Version 26.2.101
Ios Xr
Version 26.2.1
Ios Xr
Version 6.5.25
Ios Xr
Version 6.5.26
Ios Xr
Version 6.5.28
Ios Xr
Version 6.5.29
Ios Xr
Version 6.5.31
Ios Xr
Version 6.5.32
Ios Xr
Version 6.5.33
Ios Xr
Version 6.5.351
Ios Xr
Version 6.5.352
Ios Xr
Version 6.5.353
Ios Xr
Version 6.5.35
Ios Xr
Version 6.5.90
Ios Xr
Version 6.7.1
Ios Xr
Version 6.7.2
Ios Xr
Version 6.7.35
Ios Xr
Version 6.7.3
Ios Xr
Version 6.7.4
Ios Xr
Version 6.8.1
Ios Xr
Version 6.8.2
Ios Xr
Version 6.9.1
Ios Xr
Version 6.9.2
Ios Xr
Version 7.0.0
Ios Xr
Version 7.0.11
Ios Xr
Version 7.0.12
Ios Xr
Version 7.0.14
Ios Xr
Version 7.0.1
Ios Xr
Version 7.0.2
Ios Xr
Version 7.0.90
Ios Xr
Version 7.1.15
Ios Xr
Version 7.1.1
Ios Xr
Version 7.1.25
Ios Xr
Version 7.1.2
Ios Xr
Version 7.1.3
Ios Xr
Version 7.10.1
Ios Xr
Version 7.10.2
Ios Xr
Version 7.11.1
Ios Xr
Version 7.11.21
Ios Xr
Version 7.11.2
Ios Xr
Version 7.2.0
Ios Xr
Version 7.2.12
Ios Xr
Version 7.2.1
Ios Xr
Version 7.2.2
Ios Xr
Version 7.3.15
Ios Xr
Version 7.3.16
Ios Xr
Version 7.3.1
Ios Xr
Version 7.3.27
Ios Xr
Version 7.3.2
Ios Xr
Version 7.3.3
Ios Xr
Version 7.3.4
Ios Xr
Version 7.3.5
Ios Xr
Version 7.3.6
Ios Xr
Version 7.4.15
Ios Xr
Version 7.4.16
Ios Xr
Version 7.4.1
Ios Xr
Version 7.4.2
Ios Xr
Version 7.5.12
Ios Xr
Version 7.5.1
Ios Xr
Version 7.5.2
Ios Xr
Version 7.5.3
Ios Xr
Version 7.5.4
Ios Xr
Version 7.5.52
Ios Xr
Version 7.5.5
Ios Xr
Version 7.6.15
Ios Xr
Version 7.6.1
Ios Xr
Version 7.6.2
Ios Xr
Version 7.6.3
Ios Xr
Version 7.7.1
Ios Xr
Version 7.7.21
Ios Xr
Version 7.7.2
Ios Xr
Version 7.8.12
Ios Xr
Version 7.8.1
Ios Xr
Version 7.8.22
Ios Xr
Version 7.8.23
Ios Xr
Version 7.8.2
Ios Xr
Version 7.9.1
Ios Xr
Version 7.9.21
Ios Xr
Version 7.9.2

Related CWEs

CWE-691
Insufficient Control Flow Management
The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.

References (2)

Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable

Timeline

No history available yet.