CVE-2026-20272
CriticalCVSS 9.8Summary
As part of an internal security review in Cisco IOS XE Software, multiple vulnerabilities related to improper neutralization of special elements (CWE-74) were discovered. Hardened software releases addressing these issues have been issued.
Risk Assessment
These vulnerabilities may allow an attacker to inject malicious code or manipulate data, potentially leading to system compromise.
Recommendation
It is recommended to update Cisco IOS XE Software to the latest hardened version to mitigate the risk.
Original NVD description (English source)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20272 are related to issues with improper neutralization of special elements that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.