CVE-2026-20269
High · 8.6CVSS
8.6
EPSS
0.5%
Published
Aug 5, 2026
CISA due date
—
The record
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20269 are related to issues with improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-57187 Asterisk is an open source private branch exchange and telephony toolkit. CWE-664
- CVE-2026-76408 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco… CWE-664
- CVE-2026-57446 libIEC61850 is an open-source implementation of IEC 61850 client and server protocols… CWE-664
- CVE-2026-79603 x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to… CWE-664
- CVE-2026-79289 Improper control of a resource through its lifetime in Workers in Google Chrome prior to… CWE-664
- CVE-2026-18549 @fastify/multipart is a multipart form-data parser for Fastify. CWE-664
- CVE-2026-19380 A vulnerability was identified in Mullvad wireguard.sys 0.10.1. CWE-664
- CVE-2026-64721 This issue was addressed through improved state management. CWE-664