VulnSocial

CVE-2026-20273Patch(cisco / ios_xe)

LOWCVSS 8.6 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch cisco ios_xe systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20273 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-20.

cisco CVEsBack to dashboard
2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ios_xe

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 3d ago at 1 mentions (2026-08-05); latest day: 1
  • 4 total mentions across 4 days

Affected systems

Vendors
cisco
Products
ios_xe

267 versions affected across 1 product

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-08-05: 1Mentions · 2026-08-06: 1Mentions · 2026-08-11: 1Mentions · 2026-09-25: 1PoC Mentioned / Linked · 2026-08-11: 1Patch / Workaround · 2026-08-05: 1Patch / Workaround · 2026-08-11: 1Technical Details · 2026-08-05: 1Technical Details · 2026-08-11: 1Technical Details · 2026-09-25: 108-0508-0608-1109-25
Signal classification2 categories
Patch
250.0%
Disclosure
250.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-051
Patch1
2026-08-061
Disclosure1
2026-08-111
Patch1
2026-09-251
Disclosure1
Full discourse4 posts
  • IntegSec@integ_sec
    Disclosure

    CVE-2026-20273: Cisco IOS XE Improper Input Validation Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04yl5N50

    Post summary

    The post announces the disclosure of CVE-2026-20273, an improper input validation bug in Cisco IOS XE, outlining potential business impact and response guidance.

    10010145
    35 followersView on X
  • BT Haberler@BTHaberler
    Patch

    Cisco, SD-WAN ve IOS XE'de Üçü CVSS 9.9 Olan 12 Kritik Açığı Kapattı Cisco, iç güvenlik incelemesi kapsamında Catalyst SD-WAN ve IOS XE yazılımlarını etkileyen 12 açığı kapatan güncellemeler yayınladı; SD-WAN tarafındaki üç açık maksimuma yakın CVSS 9.9 aldı! • CVE-2026-20303, CVE-2026-20304 ve CVE-2026-20310 (üçü de CVSS 9.9), sırasıyla giriş doğrulaması ve yol geçişi eksikliği, yetersiz erişim kontrolü ve bağlantı çözümleme sırası hatasından kaynaklanıyor; ayrıca CVSS 8.8'lik açık metin hassas veri depolama sorunu da bulunuyor. • IOS XE tarafında CVE-2026-20267 ile CVE-2026-20273 arasındaki yedi açık, arabellek taşması, komut enjeksiyonu ve giriş doğrulaması eksikliklerini kapsıyor; en yüksek CVSS puanı 9.8. • Cisco, bu açıkların şu ana kadar aktif olarak istismar edildiğine dair bir bilgi bulunmadığını açıkladı; ancak sistem yönetim arabirimini etkileyen ayrı bir açık olan CIMCown (CVE-2026-20200) için halka açık kanıt kodu zaten mevcut. Kurumsal ağların omurgasını oluşturan SD-WAN ve yönlendirici yazılımlarında aynı anda bu kadar çok maksimum puanlı açığın ortaya çıkması, ağ ekiplerinin güncelleme önceliklerini yeniden gözden geçirmesini gerektiriyor. #SiberGüvenlik #Cisco #SDWAN

    Post summary

    Cisco issued patches for 12 CVSS 9.x critical flaws in SD‑WAN and IOS XE, confirmed no active exploitation yet; a public PoC exists for one CVE, and detailed technical specifics are provided.

    00000128
    38 followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    A severe vulnerability was disclosed for Cisco IOS XE Software (CVE-2026-20273) https://vuldb.com/vuln/386303

    Post summary

    A severe vulnerability has been disclosed for Cisco IOS XE Software (CVE-2026-20273).

    00000124
    2.3K followersView on X
  • Kaitan ID Security@KaitanSecurity
    Patch

    ⚠️ HIGH — CVE-2026-20273 Cisco IOS XE Software Security Hardening Release: August 2026 CVSS 8.6 Full analysis → https://sec.kaitan.id/cves/CVE-2026-20273 #Cisco #CyberSecurity #InfoSec

    Post summary

    The post announces a high‑CVSS (8.6) patch release for CVE‑2026‑20273 from Cisco, with no PoC, exploit, or active exploitation indicated.

    0000076
    88 followersView on X
CPE platform detail267 entries

267 of 267 entries

PartVendorProductVersionTarget SWTarget HW
OSciscoios_xe16.10.1--
OSciscoios_xe16.10.1a--
OSciscoios_xe16.10.1b--
OSciscoios_xe16.10.1c--
OSciscoios_xe16.10.1d--
OSciscoios_xe16.10.1e--
OSciscoios_xe16.10.1f--
OSciscoios_xe16.10.1g--
OSciscoios_xe16.10.1s--
OSciscoios_xe16.10.2--
OSciscoios_xe16.10.3--
OSciscoios_xe16.11.1--
OSciscoios_xe16.11.1a--
OSciscoios_xe16.11.1b--
OSciscoios_xe16.11.1c--
OSciscoios_xe16.11.1s--
OSciscoios_xe16.11.2--
OSciscoios_xe16.12.1--
OSciscoios_xe16.12.10--
OSciscoios_xe16.12.10a--
OSciscoios_xe16.12.11--
OSciscoios_xe16.12.12--
OSciscoios_xe16.12.13--
OSciscoios_xe16.12.14--
OSciscoios_xe16.12.15--
OSciscoios_xe16.12.16--
OSciscoios_xe16.12.1a--
OSciscoios_xe16.12.1c--
OSciscoios_xe16.12.1s--
OSciscoios_xe16.12.1t--
OSciscoios_xe16.12.1w--
OSciscoios_xe16.12.1x--
OSciscoios_xe16.12.1y--
OSciscoios_xe16.12.1z--
OSciscoios_xe16.12.1z1--
OSciscoios_xe16.12.1z2--
OSciscoios_xe16.12.2--
OSciscoios_xe16.12.2a--
OSciscoios_xe16.12.2s--
OSciscoios_xe16.12.2t--
OSciscoios_xe16.12.3--
OSciscoios_xe16.12.3a--
OSciscoios_xe16.12.3s--
OSciscoios_xe16.12.4--
OSciscoios_xe16.12.4a--
OSciscoios_xe16.12.5--
OSciscoios_xe16.12.5a--
OSciscoios_xe16.12.5b--
OSciscoios_xe16.12.6--
OSciscoios_xe16.12.6a--
OSciscoios_xe16.12.7--
OSciscoios_xe16.12.8--
OSciscoios_xe16.12.9--
OSciscoios_xe16.6.10--
OSciscoios_xe16.6.2--
OSciscoios_xe16.6.3--
OSciscoios_xe16.6.4--
OSciscoios_xe16.6.4a--
OSciscoios_xe16.6.4s--
OSciscoios_xe16.6.5--
OSciscoios_xe16.6.5a--
OSciscoios_xe16.6.5b--
OSciscoios_xe16.6.6--
OSciscoios_xe16.6.7--
OSciscoios_xe16.6.7a--
OSciscoios_xe16.6.8--
OSciscoios_xe16.6.9--
OSciscoios_xe16.7.1--
OSciscoios_xe16.7.1a--
OSciscoios_xe16.7.1b--
OSciscoios_xe16.7.2--
OSciscoios_xe16.7.3--
OSciscoios_xe16.7.4--
OSciscoios_xe16.8.1--
OSciscoios_xe16.8.1a--
OSciscoios_xe16.8.1b--
OSciscoios_xe16.8.1c--
OSciscoios_xe16.8.1d--
OSciscoios_xe16.8.1e--
OSciscoios_xe16.8.1s--
OSciscoios_xe16.8.2--
OSciscoios_xe16.8.3--
OSciscoios_xe16.9.1--
OSciscoios_xe16.9.1a--
OSciscoios_xe16.9.1b--
OSciscoios_xe16.9.1c--
OSciscoios_xe16.9.1d--
OSciscoios_xe16.9.1s--
OSciscoios_xe16.9.2--
OSciscoios_xe16.9.2a--
OSciscoios_xe16.9.2s--
OSciscoios_xe16.9.3--
OSciscoios_xe16.9.3a--
OSciscoios_xe16.9.3h--
OSciscoios_xe16.9.3s--
OSciscoios_xe16.9.4--
OSciscoios_xe16.9.4c--
OSciscoios_xe16.9.5--
OSciscoios_xe16.9.5f--
OSciscoios_xe16.9.6--
OSciscoios_xe16.9.7--
OSciscoios_xe16.9.8--
OSciscoios_xe16.9.8a--
OSciscoios_xe16.9.8b--
OSciscoios_xe17.1.1--
OSciscoios_xe17.1.1a--
OSciscoios_xe17.1.1s--
OSciscoios_xe17.1.1t--
OSciscoios_xe17.1.2--
OSciscoios_xe17.1.3--
OSciscoios_xe17.10.1--
OSciscoios_xe17.10.1a--
OSciscoios_xe17.10.1b--
OSciscoios_xe17.11.1--
OSciscoios_xe17.11.1a--
OSciscoios_xe17.12.1--
OSciscoios_xe17.12.1a--
OSciscoios_xe17.12.1w--
OSciscoios_xe17.12.1x--
OSciscoios_xe17.12.1y--
OSciscoios_xe17.12.1z--
OSciscoios_xe17.12.1z1--
OSciscoios_xe17.12.1z2--
OSciscoios_xe17.12.1z3--
OSciscoios_xe17.12.1z4--
OSciscoios_xe17.12.1z5--
OSciscoios_xe17.12.1z6--
OSciscoios_xe17.12.2--
OSciscoios_xe17.12.2a--
OSciscoios_xe17.12.3--
OSciscoios_xe17.12.3a--
OSciscoios_xe17.12.4--
OSciscoios_xe17.12.4a--
OSciscoios_xe17.12.4b--
OSciscoios_xe17.12.5--
OSciscoios_xe17.12.5a--
OSciscoios_xe17.12.5b--
OSciscoios_xe17.12.5c--
OSciscoios_xe17.12.5d--
OSciscoios_xe17.12.6--
OSciscoios_xe17.12.6a--
OSciscoios_xe17.12.6b--
OSciscoios_xe17.12.7--
OSciscoios_xe17.12.7a--
OSciscoios_xe17.12.7b--
OSciscoios_xe17.13.1--
OSciscoios_xe17.13.1a--
OSciscoios_xe17.14.1--
OSciscoios_xe17.14.1a--
OSciscoios_xe17.15.1--
OSciscoios_xe17.15.1a--
OSciscoios_xe17.15.1b--
OSciscoios_xe17.15.1w--
OSciscoios_xe17.15.1x--
OSciscoios_xe17.15.1y--
OSciscoios_xe17.15.2--
OSciscoios_xe17.15.2a--
OSciscoios_xe17.15.2b--
OSciscoios_xe17.15.2c--
OSciscoios_xe17.15.3--
OSciscoios_xe17.15.3a--
OSciscoios_xe17.15.3b--
OSciscoios_xe17.15.4--
OSciscoios_xe17.15.4a--
OSciscoios_xe17.15.4b--
OSciscoios_xe17.15.4c--
OSciscoios_xe17.15.4d--
OSciscoios_xe17.15.4s1--
OSciscoios_xe17.15.5--
OSciscoios_xe17.15.5a--
OSciscoios_xe17.15.7--
OSciscoios_xe17.16.1--
OSciscoios_xe17.16.1a--
OSciscoios_xe17.17.1--
OSciscoios_xe17.18.1a--
OSciscoios_xe17.18.1w--
OSciscoios_xe17.18.1x--
OSciscoios_xe17.18.1y--
OSciscoios_xe17.18.1z--
OSciscoios_xe17.18.2--
OSciscoios_xe17.18.3--
OSciscoios_xe17.18.3a--
OSciscoios_xe17.2.1--
OSciscoios_xe17.2.1a--
OSciscoios_xe17.2.1r--
OSciscoios_xe17.2.1v--
OSciscoios_xe17.2.2--
OSciscoios_xe17.2.3--
OSciscoios_xe17.3.1--
OSciscoios_xe17.3.1a--
OSciscoios_xe17.3.1w--
OSciscoios_xe17.3.1x--
OSciscoios_xe17.3.1z--
OSciscoios_xe17.3.2--
OSciscoios_xe17.3.2a--
OSciscoios_xe17.3.3--
OSciscoios_xe17.3.3a--
OSciscoios_xe17.3.4--
OSciscoios_xe17.3.4a--
OSciscoios_xe17.3.4b--
OSciscoios_xe17.3.4c--
OSciscoios_xe17.3.5--
OSciscoios_xe17.3.5a--
OSciscoios_xe17.3.5b--
OSciscoios_xe17.3.6--
OSciscoios_xe17.3.7--
OSciscoios_xe17.3.8--
OSciscoios_xe17.3.8a--
OSciscoios_xe17.4.1--
OSciscoios_xe17.4.1a--
OSciscoios_xe17.4.1b--
OSciscoios_xe17.4.1c--
OSciscoios_xe17.4.2--
OSciscoios_xe17.4.2a--
OSciscoios_xe17.5.1--
OSciscoios_xe17.5.1a--
OSciscoios_xe17.6.1--
OSciscoios_xe17.6.1a--
OSciscoios_xe17.6.1x--
OSciscoios_xe17.6.1z--
OSciscoios_xe17.6.1z1--
OSciscoios_xe17.6.2--
OSciscoios_xe17.6.3--
OSciscoios_xe17.6.3a--
OSciscoios_xe17.6.4--
OSciscoios_xe17.6.5--
OSciscoios_xe17.6.5a--
OSciscoios_xe17.6.6--
OSciscoios_xe17.6.6a--
OSciscoios_xe17.6.7--
OSciscoios_xe17.6.8--
OSciscoios_xe17.6.8a--
OSciscoios_xe17.7.1--
OSciscoios_xe17.7.1a--
OSciscoios_xe17.7.1b--
OSciscoios_xe17.7.2--
OSciscoios_xe17.8.1--
OSciscoios_xe17.8.1a--
OSciscoios_xe17.9.1--
OSciscoios_xe17.9.1a--
OSciscoios_xe17.9.1w--
OSciscoios_xe17.9.1x--
OSciscoios_xe17.9.1x1--
OSciscoios_xe17.9.1y--
OSciscoios_xe17.9.1y1--
OSciscoios_xe17.9.2--
OSciscoios_xe17.9.2a--
OSciscoios_xe17.9.3--
OSciscoios_xe17.9.3a--
OSciscoios_xe17.9.4--
OSciscoios_xe17.9.4a--
OSciscoios_xe17.9.5--
OSciscoios_xe17.9.5a--
OSciscoios_xe17.9.5b--
OSciscoios_xe17.9.5c--
OSciscoios_xe17.9.5d--
OSciscoios_xe17.9.5e--
OSciscoios_xe17.9.5f--
OSciscoios_xe17.9.6--
OSciscoios_xe17.9.6a--
OSciscoios_xe17.9.7--
OSciscoios_xe17.9.7a--
OSciscoios_xe17.9.7b--
OSciscoios_xe17.9.8--
OSciscoios_xe17.9.9--
OSciscoios_xe26.1.1--
OSciscoios_xe26.1.1a--

Explore more

Back to dashboardcisco CVEsios_xe vulnerabilities