According to its self-reported version, Cisco IOS-XE Software is affected by multiple vulnerabilities.

  - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software     engineering team has conducted a comprehensive internal security review. This review resulted in software     hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities     tracked by CVE-2026-20272 are related to issues with improper neutralization of special elements that are     grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74. (CVE-2026-20272)

  - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software     engineering team has conducted a comprehensive internal security review. This review resulted in software     hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities     tracked byCVE-2026-20267 are related to improper access control issues that are grouped under the     Common Weakness Enumeration (CWE) PillarCWE-284. (CVE-2026-20267)

  - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software     engineering team has conducted a comprehensive internal security review. This review resulted in software     hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities     tracked by CVE-2026-20271 are related to insufficient control flow management issues that are grouped     under the Common Weakness Enumeration (CWE) Pillar CWE-691.  (CVE-2026-20271)

  - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software     engineering team has conducted a comprehensive internal security review. This review resulted in software     hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities     tracked by CVE-2026-20268 are related to issues with improper restriction of operations within the bounds     of a memory buffer that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-119.
    (CVE-2026-20268)

  - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software     engineering team has conducted a comprehensive internal security review. This review resulted in software     hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities     tracked by CVE-2026-20269 are related to issues with improper control of a resource through its lifetime     that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664. (CVE-2026-20269)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

Detections

Analytics

Cisco IOS XE Software Security Hardening Release: August 2026 (cisco-sa-hardening-iosxe-V8NMuMZJ)

critical Nessus Plugin ID 334965

Version 1.4

Version 1.2

Version 1.1

Version 1.4 Aug 25, 2026, 5:40 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608250540
Version 1.2 Aug 14, 2026, 5:17 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202608141717
Version 1.1 Aug 13, 2026, 12:31 AM New Plugin Feed: 202608130031