Threadlinqs IntelligenceStart free

VulnerabilityCVE-2026-20356

CVE-2026-20356

As of 2026-10-23, CVE-2026-20356 is a vulnerability. Threadlinqs Intelligence links 2 tracked threat campaigns to CVE-2026-20356, most recently “Cisco patches 34 vulnerabilities across Expressway (CVE-2026-76466 RCE), Unified Communications, Snort 3, IOS XR and Secure Client”.

CVSS
—Not yet scored
EPSS
—No EPSS score yet
CISA KEV
NoNot in the KEV catalog
Tracked threats
2Campaigns referencing it

Last updated:

What is CVE-2026-20356?

CVE-2026-20356 vulnerability details.

No weakness class, CVSS vector or affected-product list has been recorded for CVE-2026-20356 beyond the description above.

Severity and exploitation probability

CISA KEV
Not listed in the CISA Known Exploited Vulnerabilities catalog

Is CVE-2026-20356 being exploited?

It currently carries a trending score of 10 in the Threadlinqs vulnerability feed.

Affected products and versions

No affected-product or package list has been recorded for CVE-2026-20356 in the tracked sources. The vendor advisory and the references below are the authoritative statement of what is affected.

How to fix CVE-2026-20356

No vendor patch reference has been recorded for CVE-2026-20356 in the tracked sources. Watch the CNA record and the vendor advisory channel for a fix, and treat any affected deployment as exposed until the vendor states otherwise.

Threat activity tracking CVE-2026-20356

2 tracked threats in the Threadlinqs corpus reference CVE-2026-20356, either in the campaign’s CVE list or as an indicator on the campaign record.

Sources

Seeded from threat-derived and not yet processed by the Threadlinqs enrichment pipeline, so blank CVSS, EPSS or KEV fields above mean NOT MEASURED rather than measured-absent.

No external references are recorded on this row.