CVE-2026-20276

EUVD-2026-70203
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20276 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-691.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.6 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 17.52%
Affected Products (NVD)
VendorProductVersion
ciscoios_xr
6.5.25
ciscoios_xr
6.5.26
ciscoios_xr
6.5.28
ciscoios_xr
6.5.29
ciscoios_xr
6.5.31
ciscoios_xr
6.5.32
ciscoios_xr
6.5.33
ciscoios_xr
6.5.35
ciscoios_xr
6.5.90
ciscoios_xr
6.5.351
ciscoios_xr
6.5.352
ciscoios_xr
6.5.353
ciscoios_xr
6.7.1
ciscoios_xr
6.7.2
ciscoios_xr
6.7.3
ciscoios_xr
6.7.4
ciscoios_xr
6.7.35
ciscoios_xr
6.8.1
ciscoios_xr
6.8.2
ciscoios_xr
6.9.1
ciscoios_xr
6.9.2
ciscoios_xr
7.0.0
ciscoios_xr
7.0.1
ciscoios_xr
7.0.2
ciscoios_xr
7.0.11
ciscoios_xr
7.0.12
ciscoios_xr
7.0.14
ciscoios_xr
7.0.90
ciscoios_xr
7.1.1
ciscoios_xr
7.1.2
ciscoios_xr
7.1.3
ciscoios_xr
7.1.15
ciscoios_xr
7.1.25
ciscoios_xr
7.2.0
ciscoios_xr
7.2.1
ciscoios_xr
7.2.2
ciscoios_xr
7.2.12
ciscoios_xr
7.3.1
ciscoios_xr
7.3.2
ciscoios_xr
7.3.3
ciscoios_xr
7.3.4
ciscoios_xr
7.3.5
ciscoios_xr
7.3.6
ciscoios_xr
7.3.15
ciscoios_xr
7.3.16
ciscoios_xr
7.3.27
ciscoios_xr
7.4.1
ciscoios_xr
7.4.2
ciscoios_xr
7.4.15
ciscoios_xr
7.4.16
ciscoios_xr
7.5.1
ciscoios_xr
7.5.2
ciscoios_xr
7.5.3
ciscoios_xr
7.5.4
ciscoios_xr
7.5.5
ciscoios_xr
7.5.12
ciscoios_xr
7.5.52
ciscoios_xr
7.6.1
ciscoios_xr
7.6.2
ciscoios_xr
7.6.3
ciscoios_xr
7.6.15
ciscoios_xr
7.7.1
ciscoios_xr
7.7.2
ciscoios_xr
7.7.21
ciscoios_xr
7.8.1
ciscoios_xr
7.8.2
ciscoios_xr
7.8.12
ciscoios_xr
7.8.22
ciscoios_xr
7.8.23
ciscoios_xr
7.9.1
ciscoios_xr
7.9.2
ciscoios_xr
7.9.21
ciscoios_xr
7.10.1
ciscoios_xr
7.10.2
ciscoios_xr
7.11.1
ciscoios_xr
7.11.2
ciscoios_xr
7.11.21
ciscoios_xr
24.1.1
ciscoios_xr
24.1.2
ciscoios_xr
24.2.1
ciscoios_xr
24.2.2
ciscoios_xr
24.2.11
ciscoios_xr
24.2.20
ciscoios_xr
24.2.21
ciscoios_xr
24.3.1
ciscoios_xr
24.3.2
ciscoios_xr
24.3.20
ciscoios_xr
24.3.30
ciscoios_xr
24.4.1
ciscoios_xr
24.4.2
ciscoios_xr
24.4.10
ciscoios_xr
24.4.15
ciscoios_xr
24.4.30
ciscoios_xr
25.1.1
ciscoios_xr
25.1.2
ciscoios_xr
25.1.30
ciscoios_xr
25.2.1
ciscoios_xr
25.2.2
ciscoios_xr
25.2.15
ciscoios_xr
25.2.30
ciscoios_xr
25.3.1
ciscoios_xr
25.3.15
ciscoios_xr
25.4.1
ciscoios_xr
25.4.2
ciscoios_xr
25.4.30
ciscoios_xr
25.4.201
ciscoios_xr
26.1.1
ciscoios_xr
26.1.2
ciscoios_xr
26.2.1
ciscoios_xr
26.2.100
ciscoios_xr
26.2.101
𝑥
= Vulnerable software versions