As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20267 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
Este es el aviso número 72 sobre productos Cisco en pwned.cl.
| CVE | CVE-2026-20267 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.0 / 10 |
| EPSS | 0.4% en 30 días (percentil 31) |
| CWE | CWE-284 |
| Exposición (Shodan) | 3.821 host(s) expuesto(s) en internet ahora mismo |
Productos afectados (catálogo NVD)
cisco/ios_xe
Técnica MITRE ATT&CK
T1078 – Valid Accounts
Mapeo automático best-effort por clase de vulnerabilidad (CWE) -- orientación, no certificación.