Vulnerability intelligence

CVE-2026-20274

Cisco Cisco IOS XR Software CWE-664

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20274 are related to improper resource control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-664.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.7%

Riskier than 53% of all CVEs · checked 2026-10-16

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories