CVE-2026-20267 PUBLISHED

Cisco IOS XE Software Security Hardening Release

Assigner: cisco
Reserved: 08.10.2025 Published: 05.08.2026 Updated: 06.08.2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20267 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 9

Product Status

Vendor Cisco
Product Cisco IOS XE Software
Versions Default: unknown
  • Version 17.2.1a is affected
  • Version 16.12.1y is affected
  • Version 16.12.3s is affected
  • Version 16.7.1b is affected
  • Version 16.6.2 is affected
  • Version 16.6.5 is affected
  • Version 16.12.1w is affected
  • Version 16.9.1d is affected
  • Version 17.3.1 is affected
  • Version 16.9.4c is affected
  • Version 16.7.1 is affected
  • Version 17.2.1 is affected
  • Version 16.6.8 is affected
  • Version 16.9.1b is affected
  • Version 16.9.2s is affected
  • Version 16.12.4 is affected
  • Version 16.12.3a is affected
  • Version 17.1.1s is affected
  • Version 16.11.1a is affected
  • Version 16.7.2 is affected
  • Version 16.11.1b is affected
  • Version 16.9.1s is affected
  • Version 16.9.3h is affected
  • Version 16.9.1c is affected
  • Version 16.6.5a is affected
  • Version 16.6.3 is affected
  • Version 16.10.1f is affected
  • Version 17.2.1v is affected
  • Version 16.8.1e is affected
  • Version 16.9.3a is affected
  • Version 16.12.1a is affected
  • Version 16.12.1x is affected
  • Version 16.6.4s is affected
  • Version 16.10.1c is affected
  • Version 16.12.3 is affected
  • Version 16.11.2 is affected
  • Version 16.6.5b is affected
  • Version 16.12.2s is affected
  • Version 16.10.1b is affected
  • Version 16.7.3 is affected
  • Version 16.6.7 is affected
  • Version 16.9.6 is affected
  • Version 16.9.2 is affected
  • Version 16.10.1 is affected
  • Version 16.12.1t is affected
  • Version 16.9.1 is affected
  • Version 16.8.1a is affected
  • Version 16.9.3s is affected
  • Version 16.6.7a is affected
  • Version 16.12.2 is affected
  • Version 16.11.1 is affected
  • Version 16.9.3 is affected
  • Version 16.11.1s is affected
  • Version 16.12.1 is affected
  • Version 17.1.1 is affected
  • Version 17.1.2 is affected
  • Version 16.10.1d is affected
  • Version 17.1.1t is affected
  • Version 16.9.4 is affected
  • Version 16.8.3 is affected
  • Version 16.12.2t is affected
  • Version 16.9.5 is affected
  • Version 16.8.1s is affected
  • Version 16.10.1e is affected
  • Version 16.8.2 is affected
  • Version 16.6.4 is affected
  • Version 16.8.1b is affected
  • Version 16.10.1a is affected
  • Version 16.12.1z is affected
  • Version 16.8.1c is affected
  • Version 16.9.1a is affected
  • Version 16.9.5f is affected
  • Version 16.6.4a is affected
  • Version 16.10.1g is affected
  • Version 16.8.1 is affected
  • Version 16.6.6 is affected
  • Version 16.9.2a is affected
  • Version 16.8.1d is affected
  • Version 16.10.3 is affected
  • Version 16.7.1a is affected
  • Version 16.11.1c is affected
  • Version 16.10.1s is affected
  • Version 17.2.1r is affected
  • Version 17.1.1a is affected
  • Version 16.10.2 is affected
  • Version 16.12.2a is affected
  • Version 16.12.1c is affected
  • Version 16.12.1s is affected
  • Version 16.7.4 is affected
  • Version 17.2.2 is affected
  • Version 16.9.8 is affected
  • Version 16.9.7 is affected
  • Version 17.1.3 is affected
  • Version 17.3.1a is affected
  • Version 17.3.2a is affected
  • Version 16.12.5 is affected
  • Version 17.3.1w is affected
  • Version 17.3.2 is affected
  • Version 17.4.1 is affected
  • Version 16.12.4a is affected
  • Version 17.4.1a is affected
  • Version 17.3.1x is affected
  • Version 17.3.3 is affected
  • Version 16.6.9 is affected
  • Version 17.2.3 is affected
  • Version 17.5.1 is affected
  • Version 16.12.1z1 is affected
  • Version 16.12.5a is affected
  • Version 17.4.1b is affected
  • Version 17.3.1z is affected
  • Version 16.12.5b is affected
  • Version 17.4.2 is affected
  • Version 17.3.3a is affected
  • Version 17.3.5 is affected
  • Version 17.3.4 is affected
  • Version 17.5.1a is affected
  • Version 16.12.6 is affected
  • Version 17.6.1 is affected
  • Version 16.12.1z2 is affected
  • Version 16.6.10 is affected
  • Version 17.3.4a is affected
  • Version 17.6.1a is affected
  • Version 17.7.1 is affected
  • Version 17.6.1x is affected
  • Version 17.6.2 is affected
  • Version 16.12.6a is affected
  • Version 17.3.4c is affected
  • Version 17.4.2a is affected
  • Version 17.3.4b is affected
  • Version 17.7.1a is affected
  • Version 16.12.7 is affected
  • Version 17.8.1a is affected
  • Version 17.6.3a is affected
  • Version 17.6.3 is affected
  • Version 17.7.2 is affected
  • Version 17.7.1b is affected
  • Version 17.9.1w is affected
  • Version 17.3.5a is affected
  • Version 17.6.1z is affected
  • Version 16.12.8 is affected
  • Version 17.8.1 is affected
  • Version 17.9.1 is affected
  • Version 17.6.4 is affected
  • Version 17.3.5b is affected
  • Version 17.9.1a is affected
  • Version 17.3.6 is affected
  • Version 17.10.1 is affected
  • Version 16.9.8a is affected
  • Version 17.6.1z1 is affected
  • Version 17.10.1a is affected
  • Version 17.9.2 is affected
  • Version 17.6.5 is affected
  • Version 17.9.1x is affected
  • Version 17.9.1y is affected
  • Version 16.9.8b is affected
  • Version 17.3.7 is affected
  • Version 17.9.2a is affected
  • Version 17.9.3 is affected
  • Version 16.12.9 is affected
  • Version 17.11.1 is affected
  • Version 17.10.1b is affected
  • Version 17.6.6 is affected
  • Version 17.9.1x1 is affected
  • Version 17.11.1a is affected
  • Version 17.9.3a is affected
  • Version 17.12.1 is affected
  • Version 17.3.8 is affected
  • Version 17.9.4 is affected
  • Version 16.12.10 is affected
  • Version 17.12.1w is affected
  • Version 17.9.1y1 is affected
  • Version 17.12.1a is affected
  • Version 17.9.5 is affected
  • Version 17.13.1 is affected
  • Version 17.12.1x is affected
  • Version 17.12.2 is affected
  • Version 17.14.1 is affected
  • Version 17.9.4a is affected
  • Version 17.3.8a is affected
  • Version 17.6.6a is affected
  • Version 17.6.5a is affected
  • Version 17.6.7 is affected
  • Version 16.12.10a is affected
  • Version 17.15.1 is affected
  • Version 17.13.1a is affected
  • Version 17.12.2a is affected
  • Version 16.12.11 is affected
  • Version 17.12.3 is affected
  • Version 17.12.1y is affected
  • Version 17.12.1z is affected
  • Version 17.9.5a is affected
  • Version 17.14.1a is affected
  • Version 17.9.5b is affected
  • Version 17.6.8 is affected
  • Version 16.12.12 is affected
  • Version 17.12.4 is affected
  • Version 17.9.6 is affected
  • Version 17.17.1 is affected
  • Version 17.16.1 is affected
  • Version 17.15.1w is affected
  • Version 17.12.3a is affected
  • Version 17.9.5c is affected
  • Version 17.15.1a is affected
  • Version 17.12.1z1 is affected
  • Version 17.15.2 is affected
  • Version 17.15.1b is affected
  • Version 17.9.5d is affected
  • Version 17.15.1x is affected
  • Version 17.9.6a is affected
  • Version 17.12.1z2 is affected
  • Version 17.6.8a is affected
  • Version 17.16.1a is affected
  • Version 16.12.13 is affected
  • Version 17.15.3 is affected
  • Version 17.9.7 is affected
  • Version 17.12.5 is affected
  • Version 17.15.1y is affected
  • Version 17.9.5e is affected
  • Version 17.12.4a is affected
  • Version 17.15.2a is affected
  • Version 17.15.2c is affected
  • Version 17.15.2b is affected
  • Version 17.12.1z3 is affected
  • Version 17.9.5f is affected
  • Version 17.12.4b is affected
  • Version 17.12.5a is affected
  • Version 17.18.1 is affected
  • Version 17.12.6 is affected
  • Version 17.12.1z4 is affected
  • Version 17.9.8 is affected
  • Version 17.9.7a is affected
  • Version 17.15.3a is affected
  • Version 17.15.4 is affected
  • Version 17.12.5b is affected
  • Version 17.15.3b is affected
  • Version 16.12.14 is affected
  • Version 17.18.1z is affected
  • Version 17.9.7b is affected
  • Version 17.12.5c is affected
  • Version 26.1.1 is affected
  • Version 17.18.1a is affected
  • Version 17.15.4a is affected
  • Version 17.18.2 is affected
  • Version 17.18.1w is affected
  • Version 17.15.4b is affected
  • Version 17.12.6a is affected
  • Version 17.12.7 is affected
  • Version 17.15.4c is affected
  • Version 17.9.9 is affected
  • Version 17.12.5d is affected
  • Version 16.12.15 is affected
  • Version 17.15.4s1 is affected
  • Version 17.15.5 is affected
  • Version 17.12.1z5 is affected
  • Version 17.18.1x is affected
  • Version 17.12.1z6 is affected
  • Version 17.15.4d is affected
  • Version 17.12.6b is affected
  • Version 17.4.1c is affected
  • Version 17.15.5a is affected
  • Version 17.18.1y is affected
  • Version 17.12.7a is affected
  • Version 17.18.3 is affected
  • Version 17.12.7b is affected
  • Version 17.18.3a is affected
  • Version 26.1.1a is affected
  • Version 17.15.7 is affected
  • Version 16.12.16 is affected

Exploits

The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.

References

Problem Types

  • Improper Access Control cwe