Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Cisco IOS XE Software: Improper Input Validation

CVE-2026-20272 · published 1 month ago
Summary

Cisco IOS XE Software has identified and fixed several security issues that could allow an attacker to manipulate data. This affects the security of your network, and you should apply the latest software updates to protect your system.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco cisco ios xe software 17.2.1a
Original advisory text
Cisco IOS XE Software Security Hardening Release
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20272 are related to issues with improper neutralization of special elements that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.
References
Severity
9.8 Critical
CVSS 3.1: 9.8 (MITRE)
Exploitation
EPSS <1%
Type
CWE-74Injection
Timeline
Published5 Aug 2026
Updated3 Sep 2026
First seen5 Aug 2026
Sources
CVE-2026-20272 · NVD
CVE-2026-20272 · MITRE
Monitor software like this
Free during beta