AI description
CVE-2026-20274 is a vulnerability found in Cisco IOS XR Software, categorized under Common Weakness Enumeration (CWE) CWE-664, which pertains to improper control of a resource through its lifetime. This issue was identified during a comprehensive internal security review conducted by the Cisco IOS XR Software engineering team. The vulnerability allows a remote attacker to exploit the system by sending specially crafted input. Successful exploitation could lead to the execution of arbitrary code or cause a denial of service condition on the affected device.
- Description
- As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20274 are related to improper resource control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-664.
- Source
- psirt@cisco.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
- psirt@cisco.com
- CWE-664
Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.
- Hype score
35
🚨 Upozorňujeme na kritické zranitelnosti v Cisco Nexus 9000 Series Switches a Cisco IOS XR Software, CVE-2026-20212, CVE-2026-20274 a CVE-2026-20279. Zranitelnost CVE-2026-20212 umožňuje neautentizovanému vzdálenému útočníkovi spustit libovolný kód s oprávnění
@GOVCERT_CZ
4 Sept 2026
418 Impressions
1 Retweet
7 Likes
1 Bookmark
0 Replies
0 Quotes
#schwachstellen Cisco IOS XR: Kritische Schwachstelle CVE-2026-20274 aus interner Prüfung entdeckt #cisco #ciscoiosxr #cve202620274 #cwe664 https://t.co/aBXNbRTnU4
@cybsecuritynews
4 Sept 2026
21 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
【また君か】Cisco IOS XRに複数の重大(Critical)な脆弱性。CVE-2026-20274はCVSSスコア9.8で、詳細非開示の境界外書き込み。CVE-2026-20279もCVSSスコア9.8で、不適切なアクセス制御。その他脆弱性も修正あり。 https://t.co/hVti
@__kokumoto
4 Sept 2026
56906 Impressions
25 Retweets
74 Likes
21 Bookmarks
0 Replies
3 Quotes
Cisco released security updates for IOS XR addressing multiple vulnerabilities discovered internally. CVE-2026-20274 and CVE-2026-20279 score 9.8 CVSS due to resource management and access control flaws. Three additional issues score 8.8, with others at 8.6 and 8.2. No
@WorldCyberNewsX
3 Sept 2026
6 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes