Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20279 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco IOS XR Software | 6.5.29, 7.0.1, 6.5.26, 6.5.25, 6.5.28, 6.5.90, 7.1.1, 7.0.90, 6.7.1, 7.0.2, 7.1.15, 7.2.1, 7.1.2, 6.7.2, 7.0.11, 7.0.12, 7.0.14, 7.1.25, 7.2.12, 7.3.1, 7.1.3, 6.7.3, 7.4.1, 7.2.2, 6.7.4, 6.5.31, 7.3.15, 7.3.16, 6.8.1, 7.4.15, 6.5.32, 7.3.2, 7.5.1, 7.4.16, 7.3.27, 7.6.1, 7.5.2, 7.8.1, 7.6.15, 7.5.12… | — |
Advisories 2
- NCSC-2026-0338 Kwetsbaarheden verholpen in Cisco Nexus 9000 Series, IOS XR Software en Secure Email NCSC-NL (Netherlands) · Sep 3, 2026
- WID-SEC-2026-3155 Cisco IOS XR: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Sep 2, 2026