Improper Resource Control in Cisco IOS XE Software
CVE-2026-20269

8.6HIGH

Key Information:

Vendor

Cisco
Status
Cisco iOS Xe Software
Vendor
CVE Published:
5 August 2026

Badges

👾 Exploit Exists

What is CVE-2026-20269?

Cisco IOS XE Software has been identified with vulnerabilities stemming from improper resource management during its lifecycle. This issue falls under CWE-664, indicating potential risks that could be exploited if not addressed. Cisco's team has implemented software hardening adjustments in response to these findings, ensuring enhanced security and protection for users against potential threats.

Affected Version(s)

Cisco IOS XE Software 17.2.1a

Cisco IOS XE Software 16.12.1y

Cisco IOS XE Software 16.12.3s

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.