Incorrect Calculation Vulnerabilities in Cisco IOS XR Software
CVE-2026-20275

8.8HIGH

Key Information:

Vendor

Cisco

Vendor
CVE Published:
2 September 2026

Badges

👾 Exploit Exists

What is CVE-2026-20275?

Cisco's IOS XR Software has identified vulnerabilities stemming from incorrect calculation issues that compromise security integrity. These vulnerabilities are part of ongoing efforts to enhance software security through a substantial internal review leading to significant hardening updates. With a focus on addressing multiple internally discovered flaws, Cisco aims to mitigate potential risks associated with calculation errors cataloged under the Common Weakness Enumeration (CWE) classification, specifically CWE-682. This proactive approach aims to ensure higher product quality and robust security measures for users.

Affected Version(s)

Cisco IOS XR Software 6.5.29

Cisco IOS XR Software 7.0.1

Cisco IOS XR Software 6.5.26

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.