What is GHSA-cf4p-9ff3-r3m3?

GHSA-cf4p-9ff3-r3m3 is a security advisory published by GitHub Security Advisories with High severity. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...

Which CVE IDs does GHSA-cf4p-9ff3-r3m3 cover?

GHSA-cf4p-9ff3-r3m3 covers the following CVE IDs: CVE-2026-20278. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cf4p-9ff3-r3m3?

GHSA-cf4p-9ff3-r3m3 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-cf4p-9ff3-r3m3HighCVSS 8.8

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...

Vendor

GitHub Security Advisories

Published

September 2, 2026

Last Modified

September 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-20278 →

📋 Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20278 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) CWE-707.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-20278
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM
https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification
https://github.com/advisories/GHSA-cf4p-9ff3-r3m3