VulnSocial

CVE-2026-20276Disclosure(cisco / ios_xr)

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch cisco ios_xr systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20276 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-691.

cisco CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-691

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ios_xr

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-02); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
cisco
Products
ios_xr

111 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-02: 1Mentions · 2026-09-18: 1Patch / Workaround · 2026-09-18: 1Technical Details · 2026-09-02: 1Technical Details · 2026-09-18: 109-0209-18
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-09-021
Disclosure1
2026-09-181
Patch1
Full discourse2 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH: CVE-2026-20276 in Cisco IOS XR Software CVSS 8.6 - Control flow management flaw (CWE-691) Network exploitable, no auth required Impact: High availability disruption Patch immediately #CVE #PatchNow #ThreatIntel https://t.co/iWGoNHzH1g

    Post summary

    The text announces a high-severity vulnerability in Cisco IOS XR Software with a CVSS of 8.6, describing it as a control flow management flaw that can be exploited remotely without authentication, and urges immediate patching.

    0000042
    138 followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-20276 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering … CVSS 8.6 Full analysis → https://sec.kaitan.id/cves/CVE-2026-20276 #Cisco #CyberSecurity #InfoSec

    Post summary

    The tweet announces the discovery of CVE‑2026‑20276, a high‑severity vulnerability with a CVSS score of 8.6, and supplies a link to a detailed analysis.

    0000067
    83 followersView on X
CPE platform detail111 entries

111 of 111 entries

PartVendorProductVersionTarget SWTarget HW
OSciscoios_xr24.1.1--
OSciscoios_xr24.1.2--
OSciscoios_xr24.2.1--
OSciscoios_xr24.2.11--
OSciscoios_xr24.2.2--
OSciscoios_xr24.2.20--
OSciscoios_xr24.2.21--
OSciscoios_xr24.3.1--
OSciscoios_xr24.3.2--
OSciscoios_xr24.3.20--
OSciscoios_xr24.3.30--
OSciscoios_xr24.4.1--
OSciscoios_xr24.4.10--
OSciscoios_xr24.4.15--
OSciscoios_xr24.4.2--
OSciscoios_xr24.4.30--
OSciscoios_xr25.1.1--
OSciscoios_xr25.1.2--
OSciscoios_xr25.1.30--
OSciscoios_xr25.2.1--
OSciscoios_xr25.2.15--
OSciscoios_xr25.2.2--
OSciscoios_xr25.2.30--
OSciscoios_xr25.3.1--
OSciscoios_xr25.3.15--
OSciscoios_xr25.4.1--
OSciscoios_xr25.4.2--
OSciscoios_xr25.4.201--
OSciscoios_xr25.4.30--
OSciscoios_xr26.1.1--
OSciscoios_xr26.1.2--
OSciscoios_xr26.2.1--
OSciscoios_xr26.2.100--
OSciscoios_xr26.2.101--
OSciscoios_xr6.5.25--
OSciscoios_xr6.5.26--
OSciscoios_xr6.5.28--
OSciscoios_xr6.5.29--
OSciscoios_xr6.5.31--
OSciscoios_xr6.5.32--
OSciscoios_xr6.5.33--
OSciscoios_xr6.5.35--
OSciscoios_xr6.5.351--
OSciscoios_xr6.5.352--
OSciscoios_xr6.5.353--
OSciscoios_xr6.5.90--
OSciscoios_xr6.7.1--
OSciscoios_xr6.7.2--
OSciscoios_xr6.7.3--
OSciscoios_xr6.7.35--
OSciscoios_xr6.7.4--
OSciscoios_xr6.8.1--
OSciscoios_xr6.8.2--
OSciscoios_xr6.9.1--
OSciscoios_xr6.9.2--
OSciscoios_xr7.0.0--
OSciscoios_xr7.0.1--
OSciscoios_xr7.0.11--
OSciscoios_xr7.0.12--
OSciscoios_xr7.0.14--
OSciscoios_xr7.0.2--
OSciscoios_xr7.0.90--
OSciscoios_xr7.1.1--
OSciscoios_xr7.1.15--
OSciscoios_xr7.1.2--
OSciscoios_xr7.1.25--
OSciscoios_xr7.1.3--
OSciscoios_xr7.10.1--
OSciscoios_xr7.10.2--
OSciscoios_xr7.11.1--
OSciscoios_xr7.11.2--
OSciscoios_xr7.11.21--
OSciscoios_xr7.2.0--
OSciscoios_xr7.2.1--
OSciscoios_xr7.2.12--
OSciscoios_xr7.2.2--
OSciscoios_xr7.3.1--
OSciscoios_xr7.3.15--
OSciscoios_xr7.3.16--
OSciscoios_xr7.3.2--
OSciscoios_xr7.3.27--
OSciscoios_xr7.3.3--
OSciscoios_xr7.3.4--
OSciscoios_xr7.3.5--
OSciscoios_xr7.3.6--
OSciscoios_xr7.4.1--
OSciscoios_xr7.4.15--
OSciscoios_xr7.4.16--
OSciscoios_xr7.4.2--
OSciscoios_xr7.5.1--
OSciscoios_xr7.5.12--
OSciscoios_xr7.5.2--
OSciscoios_xr7.5.3--
OSciscoios_xr7.5.4--
OSciscoios_xr7.5.5--
OSciscoios_xr7.5.52--
OSciscoios_xr7.6.1--
OSciscoios_xr7.6.15--
OSciscoios_xr7.6.2--
OSciscoios_xr7.6.3--
OSciscoios_xr7.7.1--
OSciscoios_xr7.7.2--
OSciscoios_xr7.7.21--
OSciscoios_xr7.8.1--
OSciscoios_xr7.8.12--
OSciscoios_xr7.8.2--
OSciscoios_xr7.8.22--
OSciscoios_xr7.8.23--
OSciscoios_xr7.9.1--
OSciscoios_xr7.9.2--
OSciscoios_xr7.9.21--

Explore more

Back to dashboardcisco CVEsios_xr vulnerabilities