# CVE-2026-20278

## Summary

- **CVE ID:** CVE-2026-20278
- **Severity:** HIGH
- **CVSS Score:** 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- **CWE:** CWE-707
- **Published:** Sep 2, 2026
- **Last Modified:** Sep 9, 2026

## Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20278 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) CWE-707.

## Affected Products

- Cisco — Cisco IOS XR Software (6.5.29)
- Cisco — Cisco IOS XR Software (7.0.1)
- Cisco — Cisco IOS XR Software (6.5.26)
- Cisco — Cisco IOS XR Software (6.5.25)
- Cisco — Cisco IOS XR Software (6.5.28)
- Cisco — Cisco IOS XR Software (6.5.90)
- Cisco — Cisco IOS XR Software (7.1.1)
- Cisco — Cisco IOS XR Software (7.0.90)
- Cisco — Cisco IOS XR Software (6.7.1)
- Cisco — Cisco IOS XR Software (7.0.2)
- Cisco — Cisco IOS XR Software (7.1.15)
- Cisco — Cisco IOS XR Software (7.2.1)
- Cisco — Cisco IOS XR Software (7.1.2)
- Cisco — Cisco IOS XR Software (6.7.2)
- Cisco — Cisco IOS XR Software (7.0.11)
- Cisco — Cisco IOS XR Software (7.0.12)
- Cisco — Cisco IOS XR Software (7.0.14)
- Cisco — Cisco IOS XR Software (7.1.25)
- Cisco — Cisco IOS XR Software (7.2.12)
- Cisco — Cisco IOS XR Software (7.3.1)
- Cisco — Cisco IOS XR Software (7.1.3)
- Cisco — Cisco IOS XR Software (6.7.3)
- Cisco — Cisco IOS XR Software (7.4.1)
- Cisco — Cisco IOS XR Software (7.2.2)
- Cisco — Cisco IOS XR Software (6.7.4)
- Cisco — Cisco IOS XR Software (6.5.31)
- Cisco — Cisco IOS XR Software (7.3.15)
- Cisco — Cisco IOS XR Software (7.3.16)
- Cisco — Cisco IOS XR Software (6.8.1)
- Cisco — Cisco IOS XR Software (7.4.15)
- Cisco — Cisco IOS XR Software (6.5.32)
- Cisco — Cisco IOS XR Software (7.3.2)
- Cisco — Cisco IOS XR Software (7.5.1)
- Cisco — Cisco IOS XR Software (7.4.16)
- Cisco — Cisco IOS XR Software (7.3.27)
- Cisco — Cisco IOS XR Software (7.6.1)
- Cisco — Cisco IOS XR Software (7.5.2)
- Cisco — Cisco IOS XR Software (7.8.1)
- Cisco — Cisco IOS XR Software (7.6.15)
- Cisco — Cisco IOS XR Software (7.5.12)
- Cisco — Cisco IOS XR Software (7.8.12)
- Cisco — Cisco IOS XR Software (7.3.3)
- Cisco — Cisco IOS XR Software (7.7.1)
- Cisco — Cisco IOS XR Software (6.8.2)
- Cisco — Cisco IOS XR Software (7.3.4)
- Cisco — Cisco IOS XR Software (7.4.2)
- Cisco — Cisco IOS XR Software (6.7.35)
- Cisco — Cisco IOS XR Software (6.9.1)
- Cisco — Cisco IOS XR Software (7.6.2)
- Cisco — Cisco IOS XR Software (7.5.3)
- Cisco — Cisco IOS XR Software (7.7.2)
- Cisco — Cisco IOS XR Software (6.9.2)
- Cisco — Cisco IOS XR Software (7.9.1)
- Cisco — Cisco IOS XR Software (7.10.1)
- Cisco — Cisco IOS XR Software (7.8.2)
- Cisco — Cisco IOS XR Software (7.5.4)
- Cisco — Cisco IOS XR Software (6.5.33)
- Cisco — Cisco IOS XR Software (7.8.22)
- Cisco — Cisco IOS XR Software (7.7.21)
- Cisco — Cisco IOS XR Software (7.9.2)
- Cisco — Cisco IOS XR Software (7.3.5)
- Cisco — Cisco IOS XR Software (7.5.5)
- Cisco — Cisco IOS XR Software (7.11.1)
- Cisco — Cisco IOS XR Software (7.9.21)
- Cisco — Cisco IOS XR Software (7.10.2)
- Cisco — Cisco IOS XR Software (24.1.1)
- Cisco — Cisco IOS XR Software (7.6.3)
- Cisco — Cisco IOS XR Software (7.3.6)
- Cisco — Cisco IOS XR Software (7.5.52)
- Cisco — Cisco IOS XR Software (7.11.2)
- Cisco — Cisco IOS XR Software (24.2.1)
- Cisco — Cisco IOS XR Software (24.1.2)
- Cisco — Cisco IOS XR Software (24.2.11)
- Cisco — Cisco IOS XR Software (24.3.1)
- Cisco — Cisco IOS XR Software (24.4.1)
- Cisco — Cisco IOS XR Software (24.2.2)
- Cisco — Cisco IOS XR Software (7.8.23)
- Cisco — Cisco IOS XR Software (7.11.21)
- Cisco — Cisco IOS XR Software (24.2.20)
- Cisco — Cisco IOS XR Software (24.3.2)
- Cisco — Cisco IOS XR Software (24.4.10)
- Cisco — Cisco IOS XR Software (6.5.35)
- Cisco — Cisco IOS XR Software (25.1.1)
- Cisco — Cisco IOS XR Software (24.4.2)
- Cisco — Cisco IOS XR Software (24.3.20)
- Cisco — Cisco IOS XR Software (24.4.15)
- Cisco — Cisco IOS XR Software (25.2.1)
- Cisco — Cisco IOS XR Software (6.5.351)
- Cisco — Cisco IOS XR Software (25.1.2)
- Cisco — Cisco IOS XR Software (24.3.30)
- Cisco — Cisco IOS XR Software (25.3.1)
- Cisco — Cisco IOS XR Software (6.5.352)
- Cisco — Cisco IOS XR Software (24.4.30)
- Cisco — Cisco IOS XR Software (24.2.21)
- Cisco — Cisco IOS XR Software (25.4.1)
- Cisco — Cisco IOS XR Software (25.2.2)
- Cisco — Cisco IOS XR Software (25.2.15)
- Cisco — Cisco IOS XR Software (7.2.0)
- Cisco — Cisco IOS XR Software (7.0.0)
- Cisco — Cisco IOS XR Software (25.2.30)
- Cisco — Cisco IOS XR Software (6.5.353)
- Cisco — Cisco IOS XR Software (26.1.1)
- Cisco — Cisco IOS XR Software (25.1.30)
- Cisco — Cisco IOS XR Software (25.3.15)
- Cisco — Cisco IOS XR Software (26.2.100)
- Cisco — Cisco IOS XR Software (25.4.2)
- Cisco — Cisco IOS XR Software (26.2.1)
- Cisco — Cisco IOS XR Software (25.4.30)
- Cisco — Cisco IOS XR Software (26.1.2)
- Cisco — Cisco IOS XR Software (25.4.201)
- Cisco — Cisco IOS XR Software (26.2.101)

## References

- [CNA](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.28%
- **EPSS Percentile:** 20.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._