CVE-2026-20279

CRITICAL9.8Published on September 2, 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20279 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.

CVSS score9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-284

Cisco, nuove falle in Secure Email, IOS XR, switch Nexus 9000 e telefoni IP

Vulnerabilities

Cisco Discloses New Vulnerabilities in Secure Email, IOS XR, Nexus 9000 Switches, and IP Phones

Cisco disclosed Sept 2026 flaws in Secure Email, IOS XR, Nexus 9000 and IP Phones, including S/MIME decryption issues, RCE and root compromise risks.

Sep 3, 20265 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Cisco Discloses New Vulnerabilities in Secure Email, IOS XR, Nexus 9000 Switches, and IP Phones