CVE-2026-20273

criticalcovered by 2 sourcesfirst seen 2026-08-05

On August 5, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026 CVE-2026-20303 CVE-2026-20304 CVE-2026-20310 CVE-2026-20312 CVE-2026-20313 Critical 9.9 Cisco IOS XE Software Security Hardening Release: August 2026 CVE-2026-20267 CVE-2026-20268 CVE-2026-20269 CVE-2026-20270 CVE-2026-20271 CVE-2026-20272 CVE-2026-20273 Critical 9.8 Cisco Integrated Management Controller Argument Injection Vulnerabilities CVE-2026-20200 CVE-2026-20288 High 8.8 Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability CVE-2026-20301 High 8.6 Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability CVE-2026-20263 High 8.6 Cisco IOS XE Software SNMP Denial of Service Vulnerability CVE-2026-20124 High 7.7 Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability CVE-2026-20294 Medium 6.5 Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability CVE-2026-20311 Medium 6.3 Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability CVE-2026-20289 Medium 5.7 Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability CVE-2026-20028 Medium 5.0 Cisco Integrated Management Controller Cross-Site Scripting Vulnerability CVE-2026-20198 Medium 4.8 < Security Impact Rating: Informational

CSIRTS triage

vendor: CiscoOther

What: Cisco will publish security advisories on August 5, 2026, for various products.
Who is affected: Users of Cisco products listed for upcoming advisories.
Urgency: Remediation is important to address vulnerabilities that will be disclosed.
Action: Prepare to upgrade to fixed software versions once advisories are published.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-20273

Get an email if CVE-2026-20273 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (2)

criticalCisco Advance Notification for Publication of August 5, 2026, Security Advisoriescisco-psirt · 2026-08-05
criticalCisco IOS XE Software Security Hardening Release: August 2026cisco-psirt · 2026-08-05

External references

NVD record for CVE-2026-20273

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-20273 status](https://www.csirts.com/badge/CVE-2026-20273)](https://www.csirts.com/cve/CVE-2026-20273)