Known vulnerabilities in Cisco IOS XE 17.9.9

Software: Cisco IOS XE
Version: 17.9.9
Software CPE: cpe:2.3:o:cisco_systems:cisco_ios_xe:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco IOS XE version 17.9.9 Cisco IOS XE 17.9.9 is affected by 8 vulnerabilities: 1 high, 6 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141053 - Improper input validation
CVE-2026-20273
CWE-20 Medium
No
No
17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, 26.1.2 06.08.2026 SB2026080632
#VU141049 - Improper control of a resource through its lifetime
CVE-2026-20269
CWE-664 Medium
No
No
17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, 26.1.2 06.08.2026 SB2026080632
#VU141050 - Incorrect Calculation
CVE-2026-20270
CWE-682 Medium
No
No
17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, 26.1.2 06.08.2026 SB2026080632
#VU141051 - Insufficient Control Flow Management
CVE-2026-20271
CWE-691 Medium
No
No
17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, 26.1.2 06.08.2026 SB2026080632
#VU141052 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-20272
CWE-74 High
No
No
17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, 26.1.2 06.08.2026 SB2026080632
#VU141047 - Improper Access Control
CVE-2026-20267
CWE-284 Medium
No
No
17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, 26.1.2 06.08.2026 SB2026080632
#VU141048 - Memory corruption
CVE-2026-20268
CWE-119 Medium
No
No
17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, 26.1.2 06.08.2026 SB2026080632
#VU141043 - Missing Release of Resource after Effective Lifetime
CVE-2026-20124
CWE-772 Low
No
No
17.9.10, 17.12.7, 17.15.5, 17.18.3, 26.1.1, 26.2.1ea, 26.02.01ea1 06.08.2026 SB2026080629