NCSC-2026-0279 [1.00] [M/H] Vulnerabilities patched in Cisco IOS XE Software
Cisco has patched multiple vulnerabilities in Cisco IOS XE Software. The vulnerabilities were discovered internally during an extensive security review of Cisco IOS XE Software. The identified issues include improper access control, improper restrictions on memory buffer operations, improper resource control, improper calculations, insufficient control flow management, improper neutralization of special elements and improper input validation. The vulnerabilities can be exploited by an attacker via the mentioned weaknesses in access, memory management, resource management, calculations, control flow, neutralization of special elements and input validation. The vulnerabilities are specific to Cisco IOS XE Software.
CSIRTS triage
- What
- Multiple vulnerabilities including access control, memory buffer, resource control, calculation, control flow, and input validation flaws were patched following internal security review.
- Who is affected
- Devices running Cisco IOS XE Software.
- Urgency
- High priority; seven distinct vulnerability classes across a widely deployed platform require immediate patching.
- Action
- Apply Cisco security updates for IOS XE Software as specified in the advisory.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch IOS XE Software
Get an email when a new IOS XE Software advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://advisories.ncsc.nl/advisory?id=NCSC-2026-0279
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-202670.23% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 14% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-202680.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-202690.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-202700.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-202710.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-202720.34% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 27% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-202730.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-20267 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20268 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20269 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20270 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20271 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20272 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20273 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEW] [high] Cisco IOS XE: Multiple Vulnerabilitiescert-bund
- unknownCisco Products Multiple Vulnerabilitieshkcert
- unknownMultiple vulnerabilities in Cisco products (August 6, 2026)cert-fr-avis
- highCVE-2026-20273: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS…nvd
- criticalCVE-2026-20272: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS…nvd
- highCVE-2026-20271: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS…nvd
- highCVE-2026-20270: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS…nvd
- highCVE-2026-20269: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS…nvd
- highCVE-2026-20268: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS…nvd
- criticalCVE-2026-20267: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS…nvd
- criticalCisco Advance Notification for Publication of August 5, 2026, Security Advisoriescisco-psirt
- criticalCisco IOS XE Software Security Hardening Release: August 2026cisco-psirt
Recent advisories for Cisco IOS XE
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- high[NEW] [high] Cisco IOS XE: Multiple Vulnerabilitiescert-bund · 2026-08-06
- mediumCVE-2026-20311: A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an …nvd · 2026-08-05
- mediumCVE-2026-20308: A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an …nvd · 2026-08-05
- highCVE-2026-20301: A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the Ex…nvd · 2026-08-05
- highCVE-2026-20273: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS…nvd · 2026-08-05
- criticalCVE-2026-20272: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS…nvd · 2026-08-05
More from NCSC-NL Advisories
- unknownNCSC-2026-0275 [1.01] [M/H] Vulnerabilities patched in N-able N-central2026-08-07
- unknownNCSC-2026-0278 [1.00] [M/H] Vulnerabilities patched in Adobe Campaign Classic2026-08-06
- unknownNCSC-2026-0277 [1.00] [M/H] Vulnerabilities patched in Cisco Catalyst SD-WAN2026-08-06
- unknownNCSC-2026-0276 [1.00] [M/H] Vulnerabilities patched in Veeam Service Provider Console2026-08-05
- unknownNCSC-2026-0268 [1.01] [M/H] Vulnerability patched in SQLite by SQLite Consortium (withdrawn)2026-08-03