VulnSocial

CVE-2026-20272Patch(cisco / ios_xe)

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch cisco ios_xe systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20272 are related to issues with improper neutralization of special elements that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.

cisco CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-74

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ios_xe

Threat summary

  • Patch or workaround signal is available
  • 10 mentions across 6 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 8 signals
  • Technical details provided in 7 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 5d ago at 3 mentions (2026-08-05); latest day: 2
  • 10 total mentions across 6 days

Affected systems

Vendors
cisco
Products
ios_xe

267 versions affected across 1 product

Deep dive

Activity timeline10 mentions / 6d
01223Mentions · 2026-08-05: 3Mentions · 2026-08-06: 2Mentions · 2026-08-07: 1Mentions · 2026-08-14: 1Mentions · 2026-08-16: 1Mentions · 2026-08-18: 2Patch / Workaround · 2026-08-05: 2Patch / Workaround · 2026-08-06: 2Patch / Workaround · 2026-08-07: 1Patch / Workaround · 2026-08-14: 1Patch / Workaround · 2026-08-16: 1Patch / Workaround · 2026-08-18: 1Technical Details · 2026-08-05: 3Technical Details · 2026-08-07: 1Technical Details · 2026-08-14: 1Technical Details · 2026-08-16: 1Technical Details · 2026-08-18: 108-0508-0608-0708-1408-1608-18
Signal classification3 categories
Patch
880.0%
Disclosure
110.0%
General
110.0%
Referenced assets8 URLs
Classification over time
DateTotalLabels
2026-08-053
Disclosure1Patch2
2026-08-062
Patch2
2026-08-071
Patch1
2026-08-141
Patch1
2026-08-161
Patch1
2026-08-182
General1Patch1
Full discourse10 posts
  • 横浜539@PutStickerOn
    Patch

    > IOS XEでは7件の脆弱性が修正され、CVE-2026-20272（中略）とCVE-2026-20267（中略）は深刻度が「Critical」、残り5件は「High」となっている。 なんと。 シスコ、SD-WANやIOS XEなど複数製品の深刻な脆弱性を多数修正（CVE-2026-20303、CVE-2026-20304他） https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47119/

    Post summary

    Cisco patched seven vulnerabilities affecting IOS XE (including CVE‑2026‑20272 and CVE‑2026‑20267) and also fixed critical issues in SD‑WAN and other products, with the CVEs falling into Critical and High severity categories.

    0301062.2K
    3.6K followersView on X
  • ThreatWire@ThreatWire_
    Patch

    🚨 Cisco has patched two critical IOS XE vulnerabilities. CVE-2026-20272 is rated CVSS 9.8, while CVE-2026-20267 scores 9.0. Cisco is urging customers to patch immediately to reduce the risk of exploitation. #Cisco #IOSXE #CVE #CyberSecurity #NetworkSecurity #Infosec

    Post summary

    Cisco has issued patches for two critical IOS XE vulnerabilities (CVE-2026-20272 and CVE-2026-20267), with CVSS scores of 9.8 and 9.0 respectively, and is urging customers to apply updates immediately to mitigate exploitation risk.

    0311121.3K
    1.5K followersView on X
  • Daily CyberSecurity@Daily_CyberSec
    Patch

    Cisco IOS XE vulnerability CVE-2026-20272 hits CVSS 9.8 and CVE-2026-20267 scores 9.0. Cisco urges customers to patch now. #Cisco #IOSXE #CVE202620272 #CVE202620267 #CyberSecurity #NetworkSecurity http://securityonline.info/cisco-ios-xe-cve-2026-20272/

    Post summary

    The tweet announces high‑severity Cisco IOS XE CVEs and urges customers to apply the available patch.

    00021471
    13.0K followersView on X
  • ねこさん⚡(ΦωΦ)@catnap707
    Patch

    Cisco Patches Multiple Critical Cisco IOS XE Software Vulnerabilities - Patch Now!https://cybersecuritynews.com/cisco-patches-ios-xe-software-vulnerabilities/ "The vulnerabilities affect Cisco IOS XE Software running in autonomous mode or controller mode, regardless of device configuration…The most severe issue is CVE-2026-20272"

    Post summary

    Cisco has released patches for several critical vulnerabilities in IOS XE software, including the most severe CVE‑2026‑20272, highlighting the availability of vendor fixes.

    00011359
    3.5K followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    General

    【緊急】CVE-2026-20272 シスコシステムズのCisco IOS XEに深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/08/15/cve-2026-20272-cisco-ios-xe/ #IT #Security #cybersecurity

    Post summary

    The post announces a serious vulnerability (CVE‑2026‑20272) in Cisco IOS XE and urges immediate action, but it provides no technical, exploit, or patch details.

    00000142
    210 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Patch

    Cisco IOS XEのハードニング更新で7件を修正、CVE-2026-20272はCVSS 9.8 https://www.cybernote.click/2026/08/11/cisco-ios-xe-cve-2026-20272-hardening/ #IT #Security #cybersecurity

    Post summary

    The post announces a hardening update for Cisco IOS XE that fixes seven vulnerabilities, including CVE‑2026‑20272 with a CVSS score of 9.8, but provides no PoC, exploit code, or active exploitation details.

    0000095
    210 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Patch

    Cisco IOS XEのハードニング更新で7件を修正、CVE-2026-20272はCVSS 9.8 https://www.cybernote.click/2026/08/11/cisco-ios-xe-cve-2026-20272-hardening/ #IT #Security #cybersecurity

    Post summary

    Cisco IOS XE released a hardening update that fixes seven vulnerability items, including CVE-2026-20272, which carries a CVSS score of 9.8.

    00000111
    210 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Patch

    Cisco IOS XEのハードニング更新で7件を修正、CVE-2026-20272はCVSS 9.8 https://www.cybernote.click/2026/08/11/cisco-ios-xe-cve-2026-20272-hardening/ #IT #Security #cybersecurity

    Post summary

    Cisco released a hardening update fixing seven CVEs, including CVE-2026-20272 with a CVSS 9.8 score, indicating a critical vulnerability but no evidence of exploitation or PoC.

    00000130
    213 followersView on X
  • SecureShield@SecureShield_
    Patch

    一次情報(NVD): https://nvd.nist.gov/vuln/detail/CVE-2026-20272 参照元(ベンダー等): https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ

    Post summary

    The post cites the NVD entry for CVE‑2026‑20272 and references a Cisco security advisory, suggesting a patch is available, but offers no other details on the vulnerability or exploitation.

    0000096
    25 followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    🚨 CRITICAL — CVE-2026-20272 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering … CVSS 9.8 🔴 No patch yet Full analysis → https://sec.kaitan.id/cves/CVE-2026-20272 #Cisco #CyberSecurity #InfoSec

    Post summary

    The post announces a critical Cisco IOS XE vulnerability (CVE‑2026‑20272) with CVSS 9.8, notes that no patch exists, but offers no PoC, exploit code, or evidence of active exploitation.

    0000072
    88 followersView on X
CPE platform detail267 entries

267 of 267 entries

PartVendorProductVersionTarget SWTarget HW
OSciscoios_xe16.10.1--
OSciscoios_xe16.10.1a--
OSciscoios_xe16.10.1b--
OSciscoios_xe16.10.1c--
OSciscoios_xe16.10.1d--
OSciscoios_xe16.10.1e--
OSciscoios_xe16.10.1f--
OSciscoios_xe16.10.1g--
OSciscoios_xe16.10.1s--
OSciscoios_xe16.10.2--
OSciscoios_xe16.10.3--
OSciscoios_xe16.11.1--
OSciscoios_xe16.11.1a--
OSciscoios_xe16.11.1b--
OSciscoios_xe16.11.1c--
OSciscoios_xe16.11.1s--
OSciscoios_xe16.11.2--
OSciscoios_xe16.12.1--
OSciscoios_xe16.12.10--
OSciscoios_xe16.12.10a--
OSciscoios_xe16.12.11--
OSciscoios_xe16.12.12--
OSciscoios_xe16.12.13--
OSciscoios_xe16.12.14--
OSciscoios_xe16.12.15--
OSciscoios_xe16.12.16--
OSciscoios_xe16.12.1a--
OSciscoios_xe16.12.1c--
OSciscoios_xe16.12.1s--
OSciscoios_xe16.12.1t--
OSciscoios_xe16.12.1w--
OSciscoios_xe16.12.1x--
OSciscoios_xe16.12.1y--
OSciscoios_xe16.12.1z--
OSciscoios_xe16.12.1z1--
OSciscoios_xe16.12.1z2--
OSciscoios_xe16.12.2--
OSciscoios_xe16.12.2a--
OSciscoios_xe16.12.2s--
OSciscoios_xe16.12.2t--
OSciscoios_xe16.12.3--
OSciscoios_xe16.12.3a--
OSciscoios_xe16.12.3s--
OSciscoios_xe16.12.4--
OSciscoios_xe16.12.4a--
OSciscoios_xe16.12.5--
OSciscoios_xe16.12.5a--
OSciscoios_xe16.12.5b--
OSciscoios_xe16.12.6--
OSciscoios_xe16.12.6a--
OSciscoios_xe16.12.7--
OSciscoios_xe16.12.8--
OSciscoios_xe16.12.9--
OSciscoios_xe16.6.10--
OSciscoios_xe16.6.2--
OSciscoios_xe16.6.3--
OSciscoios_xe16.6.4--
OSciscoios_xe16.6.4a--
OSciscoios_xe16.6.4s--
OSciscoios_xe16.6.5--
OSciscoios_xe16.6.5a--
OSciscoios_xe16.6.5b--
OSciscoios_xe16.6.6--
OSciscoios_xe16.6.7--
OSciscoios_xe16.6.7a--
OSciscoios_xe16.6.8--
OSciscoios_xe16.6.9--
OSciscoios_xe16.7.1--
OSciscoios_xe16.7.1a--
OSciscoios_xe16.7.1b--
OSciscoios_xe16.7.2--
OSciscoios_xe16.7.3--
OSciscoios_xe16.7.4--
OSciscoios_xe16.8.1--
OSciscoios_xe16.8.1a--
OSciscoios_xe16.8.1b--
OSciscoios_xe16.8.1c--
OSciscoios_xe16.8.1d--
OSciscoios_xe16.8.1e--
OSciscoios_xe16.8.1s--
OSciscoios_xe16.8.2--
OSciscoios_xe16.8.3--
OSciscoios_xe16.9.1--
OSciscoios_xe16.9.1a--
OSciscoios_xe16.9.1b--
OSciscoios_xe16.9.1c--
OSciscoios_xe16.9.1d--
OSciscoios_xe16.9.1s--
OSciscoios_xe16.9.2--
OSciscoios_xe16.9.2a--
OSciscoios_xe16.9.2s--
OSciscoios_xe16.9.3--
OSciscoios_xe16.9.3a--
OSciscoios_xe16.9.3h--
OSciscoios_xe16.9.3s--
OSciscoios_xe16.9.4--
OSciscoios_xe16.9.4c--
OSciscoios_xe16.9.5--
OSciscoios_xe16.9.5f--
OSciscoios_xe16.9.6--
OSciscoios_xe16.9.7--
OSciscoios_xe16.9.8--
OSciscoios_xe16.9.8a--
OSciscoios_xe16.9.8b--
OSciscoios_xe17.1.1--
OSciscoios_xe17.1.1a--
OSciscoios_xe17.1.1s--
OSciscoios_xe17.1.1t--
OSciscoios_xe17.1.2--
OSciscoios_xe17.1.3--
OSciscoios_xe17.10.1--
OSciscoios_xe17.10.1a--
OSciscoios_xe17.10.1b--
OSciscoios_xe17.11.1--
OSciscoios_xe17.11.1a--
OSciscoios_xe17.12.1--
OSciscoios_xe17.12.1a--
OSciscoios_xe17.12.1w--
OSciscoios_xe17.12.1x--
OSciscoios_xe17.12.1y--
OSciscoios_xe17.12.1z--
OSciscoios_xe17.12.1z1--
OSciscoios_xe17.12.1z2--
OSciscoios_xe17.12.1z3--
OSciscoios_xe17.12.1z4--
OSciscoios_xe17.12.1z5--
OSciscoios_xe17.12.1z6--
OSciscoios_xe17.12.2--
OSciscoios_xe17.12.2a--
OSciscoios_xe17.12.3--
OSciscoios_xe17.12.3a--
OSciscoios_xe17.12.4--
OSciscoios_xe17.12.4a--
OSciscoios_xe17.12.4b--
OSciscoios_xe17.12.5--
OSciscoios_xe17.12.5a--
OSciscoios_xe17.12.5b--
OSciscoios_xe17.12.5c--
OSciscoios_xe17.12.5d--
OSciscoios_xe17.12.6--
OSciscoios_xe17.12.6a--
OSciscoios_xe17.12.6b--
OSciscoios_xe17.12.7--
OSciscoios_xe17.12.7a--
OSciscoios_xe17.12.7b--
OSciscoios_xe17.13.1--
OSciscoios_xe17.13.1a--
OSciscoios_xe17.14.1--
OSciscoios_xe17.14.1a--
OSciscoios_xe17.15.1--
OSciscoios_xe17.15.1a--
OSciscoios_xe17.15.1b--
OSciscoios_xe17.15.1w--
OSciscoios_xe17.15.1x--
OSciscoios_xe17.15.1y--
OSciscoios_xe17.15.2--
OSciscoios_xe17.15.2a--
OSciscoios_xe17.15.2b--
OSciscoios_xe17.15.2c--
OSciscoios_xe17.15.3--
OSciscoios_xe17.15.3a--
OSciscoios_xe17.15.3b--
OSciscoios_xe17.15.4--
OSciscoios_xe17.15.4a--
OSciscoios_xe17.15.4b--
OSciscoios_xe17.15.4c--
OSciscoios_xe17.15.4d--
OSciscoios_xe17.15.4s1--
OSciscoios_xe17.15.5--
OSciscoios_xe17.15.5a--
OSciscoios_xe17.15.7--
OSciscoios_xe17.16.1--
OSciscoios_xe17.16.1a--
OSciscoios_xe17.17.1--
OSciscoios_xe17.18.1a--
OSciscoios_xe17.18.1w--
OSciscoios_xe17.18.1x--
OSciscoios_xe17.18.1y--
OSciscoios_xe17.18.1z--
OSciscoios_xe17.18.2--
OSciscoios_xe17.18.3--
OSciscoios_xe17.18.3a--
OSciscoios_xe17.2.1--
OSciscoios_xe17.2.1a--
OSciscoios_xe17.2.1r--
OSciscoios_xe17.2.1v--
OSciscoios_xe17.2.2--
OSciscoios_xe17.2.3--
OSciscoios_xe17.3.1--
OSciscoios_xe17.3.1a--
OSciscoios_xe17.3.1w--
OSciscoios_xe17.3.1x--
OSciscoios_xe17.3.1z--
OSciscoios_xe17.3.2--
OSciscoios_xe17.3.2a--
OSciscoios_xe17.3.3--
OSciscoios_xe17.3.3a--
OSciscoios_xe17.3.4--
OSciscoios_xe17.3.4a--
OSciscoios_xe17.3.4b--
OSciscoios_xe17.3.4c--
OSciscoios_xe17.3.5--
OSciscoios_xe17.3.5a--
OSciscoios_xe17.3.5b--
OSciscoios_xe17.3.6--
OSciscoios_xe17.3.7--
OSciscoios_xe17.3.8--
OSciscoios_xe17.3.8a--
OSciscoios_xe17.4.1--
OSciscoios_xe17.4.1a--
OSciscoios_xe17.4.1b--
OSciscoios_xe17.4.1c--
OSciscoios_xe17.4.2--
OSciscoios_xe17.4.2a--
OSciscoios_xe17.5.1--
OSciscoios_xe17.5.1a--
OSciscoios_xe17.6.1--
OSciscoios_xe17.6.1a--
OSciscoios_xe17.6.1x--
OSciscoios_xe17.6.1z--
OSciscoios_xe17.6.1z1--
OSciscoios_xe17.6.2--
OSciscoios_xe17.6.3--
OSciscoios_xe17.6.3a--
OSciscoios_xe17.6.4--
OSciscoios_xe17.6.5--
OSciscoios_xe17.6.5a--
OSciscoios_xe17.6.6--
OSciscoios_xe17.6.6a--
OSciscoios_xe17.6.7--
OSciscoios_xe17.6.8--
OSciscoios_xe17.6.8a--
OSciscoios_xe17.7.1--
OSciscoios_xe17.7.1a--
OSciscoios_xe17.7.1b--
OSciscoios_xe17.7.2--
OSciscoios_xe17.8.1--
OSciscoios_xe17.8.1a--
OSciscoios_xe17.9.1--
OSciscoios_xe17.9.1a--
OSciscoios_xe17.9.1w--
OSciscoios_xe17.9.1x--
OSciscoios_xe17.9.1x1--
OSciscoios_xe17.9.1y--
OSciscoios_xe17.9.1y1--
OSciscoios_xe17.9.2--
OSciscoios_xe17.9.2a--
OSciscoios_xe17.9.3--
OSciscoios_xe17.9.3a--
OSciscoios_xe17.9.4--
OSciscoios_xe17.9.4a--
OSciscoios_xe17.9.5--
OSciscoios_xe17.9.5a--
OSciscoios_xe17.9.5b--
OSciscoios_xe17.9.5c--
OSciscoios_xe17.9.5d--
OSciscoios_xe17.9.5e--
OSciscoios_xe17.9.5f--
OSciscoios_xe17.9.6--
OSciscoios_xe17.9.6a--
OSciscoios_xe17.9.7--
OSciscoios_xe17.9.7a--
OSciscoios_xe17.9.7b--
OSciscoios_xe17.9.8--
OSciscoios_xe17.9.9--
OSciscoios_xe26.1.1--
OSciscoios_xe26.1.1a--

Explore more

Back to dashboardcisco CVEsios_xe vulnerabilities