CVE-2026-20267
CriticalCVSS 9.0Summary
As part of an internal security review in Cisco IOS XE Software, multiple vulnerabilities related to improper access control (CWE-284) were discovered. Hardened software releases addressing these issues have been issued.
Risk Assessment
These vulnerabilities may allow unauthorized access to the system, potentially leading to security and data integrity breaches.
Recommendation
It is recommended to update Cisco IOS XE Software to the latest hardened version to mitigate the risk.
Original NVD description (English source)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20267 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.