Evil-DB LogoEvil-DB
← All CVEs

CVE-2026-20267

critical · 9

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20267 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.

9
CVSS
0.3%
EPSS (exploit prob.)
18th
EPSS percentile
2026-08-05
Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-284

Affected products

VendorProductAffected versions
ciscoios_xe16.6.2
ciscoios_xe16.6.3
ciscoios_xe16.6.4
ciscoios_xe16.6.4a
ciscoios_xe16.6.4s
ciscoios_xe16.6.5
ciscoios_xe16.6.5a
ciscoios_xe16.6.5b
ciscoios_xe16.6.6
ciscoios_xe16.6.7
ciscoios_xe16.6.7a
ciscoios_xe16.6.8
ciscoios_xe16.6.9
ciscoios_xe16.6.10
ciscoios_xe16.7.1
ciscoios_xe16.7.1a
ciscoios_xe16.7.1b
ciscoios_xe16.7.2
ciscoios_xe16.7.3
ciscoios_xe16.7.4
ciscoios_xe16.8.1
ciscoios_xe16.8.1a
ciscoios_xe16.8.1b
ciscoios_xe16.8.1c
ciscoios_xe16.8.1d
ciscoios_xe16.8.1e
ciscoios_xe16.8.1s
ciscoios_xe16.8.2
ciscoios_xe16.8.3
ciscoios_xe16.9.1
ciscoios_xe16.9.1a
ciscoios_xe16.9.1b
ciscoios_xe16.9.1c
ciscoios_xe16.9.1d
ciscoios_xe16.9.1s
ciscoios_xe16.9.2
ciscoios_xe16.9.2a
ciscoios_xe16.9.2s
ciscoios_xe16.9.3
ciscoios_xe16.9.3a

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-20267