PatchTheCVECVE-2026-20280: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Softwar
CVE-2026-20280 is a high-severity flaw (CVSS 8.8) affecting ios xr. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20280 are related to improper checking or handling of exceptional condition issues that are grouped under t
Why this priority
- High severity
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 8.8 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.5% (top 58%) |
| CISA exploited list | No |
| Weakness | CWE-703 |
| Published | 2026-09-02 |
| Last modified | 2026-09-18 |
Last updated 2026-09-18 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-20280?
ios xr: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2026-20280 being exploited?
CVE-2026-20280 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-20280 affect?
CVE-2026-20280 affects ios xr. Severity is high (CVSS 8.8). As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases t
How urgent is CVE-2026-20280?
Priority 41/100. High severity
Software pages
iOS vulnerabilities · Cisco vulnerabilities
Related CVEs
- CVE-2026-20276 HIGH 8.6 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software eng
- CVE-2026-20274 CRITICAL 9.8 MITIGATE As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software eng