Incorrect Calculation Vulnerability in Cisco IOS XE Software
CVE-2026-20270

8.6HIGH

Key Information:

Vendor

Cisco

Vendor
CVE Published:
5 August 2026

Badges

👾 Exploit Exists

What is CVE-2026-20270?

Cisco's ongoing commitment to security has led to the discovery of vulnerabilities within the IOS XE Software. These vulnerabilities involve incorrect calculation issues categorized under the Common Weakness Enumeration (CWE) Pillar CWE-682. As part of their internal security review, Cisco has introduced software hardening releases to mitigate these vulnerabilities effectively, ensuring the robustness and security of their systems.

Affected Version(s)

Cisco IOS XE Software 17.2.1a

Cisco IOS XE Software 16.12.1y

Cisco IOS XE Software 16.12.3s

References

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.