CVE-2026-20271
High · 8.6CVSS
8.6
EPSS
0.5%
Published
Aug 5, 2026
CISA due date
—
The record
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20271 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-691.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-115893 Wasmtime is a runtime for WebAssembly. CWE-691
- CVE-2025-51675 An issue was discovered in openRISC OR1200 commit 83ac6b. CWE-691
- CVE-2026-79033 Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65… CWE-691
- CVE-2026-5938 Improper control flow management allows a crafted document action chain to cause modal… CWE-691
- CVE-2025-35963 Insufficient control flow management for some Intel(R) PROSet/Wireless WiFi Software for… CWE-691
- CVE-2024-22374 Insufficient control flow management for some Intel(R) Xeon Processors may allow an… CWE-691