CVE-2026-20274
critical · 9.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20274 are related to improper resource control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-664.
9.8
CVSS
0.5%
EPSS (exploit prob.)
45th
EPSS percentile
2026-09-02
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-664
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | ios_xr | 6.5.25 |
| cisco | ios_xr | 6.5.26 |
| cisco | ios_xr | 6.5.28 |
| cisco | ios_xr | 6.5.29 |
| cisco | ios_xr | 6.5.31 |
| cisco | ios_xr | 6.5.32 |
| cisco | ios_xr | 6.5.33 |
| cisco | ios_xr | 6.5.35 |
| cisco | ios_xr | 6.5.90 |
| cisco | ios_xr | 6.5.351 |
| cisco | ios_xr | 6.5.352 |
| cisco | ios_xr | 6.5.353 |
| cisco | ios_xr | 6.7.1 |
| cisco | ios_xr | 6.7.2 |
| cisco | ios_xr | 6.7.3 |
| cisco | ios_xr | 6.7.4 |
| cisco | ios_xr | 6.7.35 |
| cisco | ios_xr | 6.8.1 |
| cisco | ios_xr | 6.8.2 |
| cisco | ios_xr | 6.9.1 |
| cisco | ios_xr | 6.9.2 |
| cisco | ios_xr | 7.0.0 |
| cisco | ios_xr | 7.0.1 |
| cisco | ios_xr | 7.0.2 |
| cisco | ios_xr | 7.0.11 |
| cisco | ios_xr | 7.0.12 |
| cisco | ios_xr | 7.0.14 |
| cisco | ios_xr | 7.0.90 |
| cisco | ios_xr | 7.1.1 |
| cisco | ios_xr | 7.1.2 |
| cisco | ios_xr | 7.1.3 |
| cisco | ios_xr | 7.1.15 |
| cisco | ios_xr | 7.1.25 |
| cisco | ios_xr | 7.2.0 |
| cisco | ios_xr | 7.2.1 |
| cisco | ios_xr | 7.2.2 |
| cisco | ios_xr | 7.2.12 |
| cisco | ios_xr | 7.3.1 |
| cisco | ios_xr | 7.3.2 |
| cisco | ios_xr | 7.3.3 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2026-20274