Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20267 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco IOS XE Software | 17.2.1a, 16.12.1y, 16.12.3s, 16.7.1b, 16.6.2, 16.6.5, 16.12.1w, 16.9.1d, 17.3.1, 16.9.4c, 16.7.1, 17.2.1, 16.6.8, 16.9.1b, 16.9.2s, 16.12.4, 16.12.3a, 17.1.1s, 16.11.1a, 16.7.2, 16.11.1b, 16.9.1s, 16.9.3h, 16.9.1c, 16.6.5a, 16.6.3, 16.10.1f, 17.2.1v, 16.8.1e, 16.9.3a, 16.12.1a, 16.12.1x, 16.6.4s, 1… | — |
Advisories 2
- NCSC-2026-0279 Kwetsbaarheden verholpen in Cisco IOS XE Software NCSC-NL (Netherlands) · Aug 7, 2026
- WID-SEC-2026-2674 Cisco IOS XE: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 5, 2026