Yüksek CVSS 8.6
CVE-2026-20273: Ios Xe: hatalı girdi doğrulama
Açıklama (NVD)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20273 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-20.
Özet bilgiler
- Ürün
- Cisco Ios Xe
- CVSS v3.1
- 8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H - EPSS
- %0,47 (yüzdelik 41)
- CWE
- CWE-20
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| cisco-ios-xe | 16.6.2 | 16.6.2 | — |
| cisco-ios-xe | 16.6.3 | 16.6.3 | — |
| cisco-ios-xe | 16.6.4 | 16.6.4 | — |
| cisco-ios-xe | 16.6.4a | 16.6.4a | — |
| cisco-ios-xe | 16.6.4s | 16.6.4s | — |
| cisco-ios-xe | 16.6.5 | 16.6.5 | — |
| cisco-ios-xe | 16.6.5a | 16.6.5a | — |
| cisco-ios-xe | 16.6.5b | 16.6.5b | — |
| cisco-ios-xe | 16.6.6 | 16.6.6 | — |
| cisco-ios-xe | 16.6.7 | 16.6.7 | — |
| cisco-ios-xe | 16.6.7a | 16.6.7a | — |
| cisco-ios-xe | 16.6.8 | 16.6.8 | — |
| cisco-ios-xe | 16.6.9 | 16.6.9 | — |
| cisco-ios-xe | 16.6.10 | 16.6.10 | — |
| cisco-ios-xe | 16.7.1 | 16.7.1 | — |
| cisco-ios-xe | 16.7.1a | 16.7.1a | — |
| cisco-ios-xe | 16.7.1b | 16.7.1b | — |
| cisco-ios-xe | 16.7.2 | 16.7.2 | — |
| cisco-ios-xe | 16.7.3 | 16.7.3 | — |
| cisco-ios-xe | 16.7.4 | 16.7.4 | — |
| cisco-ios-xe | 16.8.1 | 16.8.1 | — |
| cisco-ios-xe | 16.8.1a | 16.8.1a | — |
| cisco-ios-xe | 16.8.1b | 16.8.1b | — |
| cisco-ios-xe | 16.8.1c | 16.8.1c | — |
| cisco-ios-xe | 16.8.1d | 16.8.1d | — |
| cisco-ios-xe | 16.8.1e | 16.8.1e | — |
| cisco-ios-xe | 16.8.1s | 16.8.1s | — |
| cisco-ios-xe | 16.8.2 | 16.8.2 | — |
| cisco-ios-xe | 16.8.3 | 16.8.3 | — |
| cisco-ios-xe | 16.9.1 | 16.9.1 | — |