EUVD-2026-70204
GHSA-3m84-xhjg-xc55
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Adopts the vendor network/unauthenticated full-impact profile as a best estimate, but the batch advisory lacks technical detail to independently confirm AV, AC, or PR, so confidence is low.
Primary rating from Vendor (cisco).
CVSS VectorVendor: cisco
Lifecycle Timeline
4DescriptionCVE.org
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20274 are related to improper resource control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-664.
AnalysisAI
Improper resource lifecycle control (CWE-664) in Cisco IOS XR Software is addressed by a batch software-hardening release stemming from Cisco's internal security review (advisory cisco-sa-hardening-iosxr-qg64NcM). The provided CVSS vector (AV:N/AC:L/PR:N/UI:N, 9.8) implies a remotely reachable, unauthenticated flaw with high confidentiality, integrity, and availability impact on IOS XR routers, but Cisco's omnibus advisory publishes no technical specifics on the affected component or trigger. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Per the supplied CVSS vector (AV:N/AC:L/PR:N/UI:N), exploitation requires only network reachability to the affected IOS XR service with no authentication and no user interaction against a router running a vulnerable, unpatched IOS XR train. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The raw signals are severe: CVSS 9.8 with a network attack vector, low complexity, no privileges, and no user interaction, plus full C/I/A impact, which on paper describes a wormable-grade unauthenticated remote flaw on carrier-class routers. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Patch available per vendor advisory: apply the Cisco IOS XR software-hardening release referenced in cisco-sa-hardening-iosxr-qg64NcM (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM); consult that advisory's Fixed Software section for the exact target train for your platform, as no explicit fix version is included in the CVE record. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: inventory all Cisco IOS XR installations and identify current software versions; cross-reference against Cisco advisory cisco-sa-hardening-iosxr-qg64NcM to determine affected releases. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Cisco Ios Xr Software
View allImproper access control in Cisco IOS XR Software allows remote unauthenticated attackers to bypass authorization restric
Improper neutralization flaws (CWE-707) in Cisco IOS XR Software allow an authenticated remote attacker with low privile
Improper handling of exceptional conditions (CWE-703) in Cisco IOS XR Software allows an authenticated, remote attacker
Incorrect calculation vulnerabilities (CWE-682) in Cisco IOS XR Software allow an unauthenticated attacker on an adjacen
Remote unauthenticated denial-of-service conditions in Cisco IOS XR Software stem from multiple insufficient control flo
Protection mechanism failures in Cisco IOS XR Software allow remote unauthenticated attackers to achieve high availabili
Share
External POC / Exploit Code
Leaving vuln.today