특별한 상황에 맞는 가장 적합한 호스팅 서비스를
더 전문적인 기업에 맡기세요.

보안패치정보

Cisco 제품 보안 업데이트 권고 2026-09-03

□ 개요
o Cisco社는 자사 제품에서 발생하는 취약점을 해결한 보안 업데이트 발표 [1]~[3]
o 영향을 받는 버전을 사용 중인 사용자는 해결 방안에 따라 최신 버전으로 업데이트 권고

□ 설명
o Cisco IOS XR Software에서 발생하는 Improper Control of a Resource Through its Lifetime 취약점(CVE-2026-20274) [1][4]
o Cisco IOS XR Software에서 발생하는 Incorrect Calculation 취약점(CVE-2026-20275) [1][5]
o Cisco IOS XR Software에서 발생하는 Insufficient Control Flow Management 취약점(CVE-2026-20276) [1][6]
o Cisco IOS XR Software에서 발생하는 Protection Mechanism Failure 취약점(CVE-2026-20277) [1][7]
o Cisco IOS XR Software에서 발생하는 Improper Neutralization 취약점(CVE-2026-20278) [1][8]
o Cisco IOS XR Software에서 발생하는 Improper Access Control 취약점(CVE-2026-20279) [1][9]
o Cisco IOS XR Software에서 발생하는 Improper Check or Handling of Exceptional Conditions 취약점(CVE-2026-20280) [1][10]
o Cisco BroadWorks에서 발생하는 Improper Restriction of XML External Entity Reference 취약점(CVE-2026-20320) [2][11]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Classic Buffer Overflow 취약점(CVE-2026-20337) [3][12]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Double Free 취약점(CVE-2026-20338) [3][13]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Integer Overflow or Wraparound 취약점(CVE-2026-20339) [3][14]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Stack-based Buffer Overflow 취약점(CVE-2026-20345) [3][15]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Out-of-bounds Read 취약점(CVE-2026-20346) [3][16]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Out-of-bounds Read 취약점(CVE-2026-20347) [3][17]
o ClamAV, Cisco Secure Endpoint Connector에서 발생하는 Classic Buffer Overflow 취약점(CVE-2026-20348) [3][18]

□ 영향을 받는 제품 및 해결 방안

취약점 제품명 영향받는 버전 해결 버전
CVE-2026-20274 IOS XR Software 7.3 7.3.2
CVE-2026-20274 IOS XR Software 7.9 7.9.2, 7.9.21
CVE-2026-20274 IOS XR Software 7.10 7.10.2
CVE-2026-20274 IOS XR Software 7.11 7.11.2, 7.11.21
CVE-2026-20274 IOS XR Software 24.1 24.1.2
CVE-2026-20274 IOS XR Software 24.2 24.2.2, 24.2.21
CVE-2026-20274 IOS XR Software 24.3 24.3.2
CVE-2026-20274 IOS XR Software 24.4 24.4.2
CVE-2026-20274 IOS XR Software 25.1 25.1.2
CVE-2026-20274 IOS XR Software 25.2 25.2.21
CVE-2026-20274 IOS XR Software 25.4 25.4.1, 25.4.2
CVE-2026-20274 IOS XR Software 26.1 26.1.2
CVE-2026-20274 IOS XR Software 26.2 26.2.1, 26.2.2
CVE-2026-20274 IOS XR Software 26.3 26.3.1
CVE-2026-20275 IOS XR Software 7.3 7.3.2
CVE-2026-20275 IOS XR Software 7.9 7.9.2, 7.9.21
CVE-2026-20275 IOS XR Software 7.10 7.10.2
CVE-2026-20275 IOS XR Software 7.11 7.11.2, 7.11.21
CVE-2026-20275 IOS XR Software 24.1 24.1.2
CVE-2026-20275 IOS XR Software 24.2 24.2.2, 24.2.21
CVE-2026-20275 IOS XR Software 24.3 24.3.2
CVE-2026-20275 IOS XR Software 24.4 24.4.2
CVE-2026-20275 IOS XR Software 25.1 25.1.2
CVE-2026-20275 IOS XR Software 25.2 25.2.21
CVE-2026-20275 IOS XR Software 25.4 25.4.1, 25.4.2
CVE-2026-20275 IOS XR Software 26.1 26.1.2
CVE-2026-20275 IOS XR Software 26.2 26.2.1, 26.2.2
CVE-2026-20275 IOS XR Software 26.3 26.3.1
CVE-2026-20276 IOS XR Software 7.3 7.3.2
CVE-2026-20276 IOS XR Software 7.9 7.9.2, 7.9.21
CVE-2026-20276 IOS XR Software 7.10 7.10.2
CVE-2026-20276 IOS XR Software 7.11 7.11.2, 7.11.21
CVE-2026-20276 IOS XR Software 24.1 24.1.2
CVE-2026-20276 IOS XR Software 24.2 24.2.2, 24.2.21
CVE-2026-20276 IOS XR Software 24.3 24.3.2
CVE-2026-20276 IOS XR Software 24.4 24.4.2
CVE-2026-20276 IOS XR Software 25.1 25.1.2
CVE-2026-20276 IOS XR Software 25.2 25.2.21
CVE-2026-20276 IOS XR Software 25.4 25.4.1, 25.4.2
CVE-2026-20276 IOS XR Software 26.1 26.1.2
CVE-2026-20276 IOS XR Software 26.2 26.2.1, 26.2.2
CVE-2026-20276 IOS XR Software 26.3 26.3.1
CVE-2026-20277 IOS XR Software 7.3 7.3.2
CVE-2026-20277 IOS XR Software 7.9 7.9.2, 7.9.21
CVE-2026-20277 IOS XR Software 7.10 7.10.2
CVE-2026-20277 IOS XR Software 7.11 7.11.2, 7.11.21
CVE-2026-20277 IOS XR Software 24.1 24.1.2
CVE-2026-20277 IOS XR Software 24.2 24.2.2, 24.2.21
CVE-2026-20277 IOS XR Software 24.3 24.3.2
CVE-2026-20277 IOS XR Software 24.4 24.4.2
CVE-2026-20277 IOS XR Software 25.1 25.1.2
CVE-2026-20277 IOS XR Software 25.2 25.2.21
CVE-2026-20277 IOS XR Software 25.4 25.4.1, 25.4.2
CVE-2026-20277 IOS XR Software 26.1 26.1.2
CVE-2026-20277 IOS XR Software 26.2 26.2.1, 26.2.2
CVE-2026-20277 IOS XR Software 26.3 26.3.1
CVE-2026-20278 IOS XR Software 7.3 7.3.2
CVE-2026-20278 IOS XR Software 7.9 7.9.2, 7.9.21
CVE-2026-20278 IOS XR Software 7.10 7.10.2
CVE-2026-20278 IOS XR Software 7.11 7.11.2, 7.11.21
CVE-2026-20278 IOS XR Software 24.1 24.1.2
CVE-2026-20278 IOS XR Software 24.2 24.2.2, 24.2.21
CVE-2026-20278 IOS XR Software 24.3 24.3.2
CVE-2026-20278 IOS XR Software 24.4 24.4.2
CVE-2026-20278 IOS XR Software 25.1 25.1.2
CVE-2026-20278 IOS XR Software 25.2 25.2.21
CVE-2026-20278 IOS XR Software 25.4 25.4.1, 25.4.2
CVE-2026-20278 IOS XR Software 26.1 26.1.2
CVE-2026-20278 IOS XR Software 26.2 26.2.1, 26.2.2
CVE-2026-20278 IOS XR Software 26.3 26.3.1
CVE-2026-20279 IOS XR Software 7.3 7.3.2
CVE-2026-20279 IOS XR Software 7.9 7.9.2, 7.9.21
CVE-2026-20279 IOS XR Software 7.10 7.10.2
CVE-2026-20279 IOS XR Software 7.11 7.11.2, 7.11.21
CVE-2026-20279 IOS XR Software 24.1 24.1.2
CVE-2026-20279 IOS XR Software 24.2 24.2.2, 24.2.21
CVE-2026-20279 IOS XR Software 24.3 24.3.2
CVE-2026-20279 IOS XR Software 24.4 24.4.2
CVE-2026-20279 IOS XR Software 25.1 25.1.2
CVE-2026-20279 IOS XR Software 25.2 25.2.21
CVE-2026-20279 IOS XR Software 25.4 25.4.1, 25.4.2
CVE-2026-20279 IOS XR Software 26.1 26.1.2
CVE-2026-20279 IOS XR Software 26.2 26.2.1, 26.2.2
CVE-2026-20279 IOS XR Software 26.3 26.3.1
CVE-2026-20280 IOS XR Software 7.3 7.3.2
CVE-2026-20280 IOS XR Software 7.9 7.9.2, 7.9.21
CVE-2026-20280 IOS XR Software 7.10 7.10.2
CVE-2026-20280 IOS XR Software 7.11 7.11.2, 7.11.21
CVE-2026-20280 IOS XR Software 24.1 24.1.2
CVE-2026-20280 IOS XR Software 24.2 24.2.2, 24.2.21
CVE-2026-20280 IOS XR Software 24.3 24.3.2
CVE-2026-20280 IOS XR Software 24.4 24.4.2
CVE-2026-20280 IOS XR Software 25.1 25.1.2
CVE-2026-20280 IOS XR Software 25.2 25.2.21
CVE-2026-20280 IOS XR Software 25.4 25.4.1, 25.4.2
CVE-2026-20280 IOS XR Software 26.1 26.1.2
CVE-2026-20280 IOS XR Software 26.2 26.2.1, 26.2.2
CVE-2026-20280 IOS XR Software 26.3 26.3.1
CVE-2026-20320 BroadWorks Application Delivery Platform RI.2026.07 미만 RI.2026.07 이상
CVE-2026-20320 BroadWorks Application Server RI.2026.07 미만 RI.2026.07 이상
CVE-2026-20320 BroadWorks Profile Server RI.2026.07 미만 RI.2026.07 이상
CVE-2026-20320 BroadWorks Xtended Services Platform RI.2026.07 미만 RI.2026.07 이상
CVE-2026-20337 Secure Endpoint Connector for Linux 1.29.2 미만 1.29.2 이상
CVE-2026-20337 Secure Endpoint Connector for Mac 1.27.4 미만 1.27.4 이상
CVE-2026-20337 Secure Endpoint Connector for Windows 7.5.24.21780 미만 7.5.24.21780 이상
CVE-2026-20337 Secure Endpoint Connector for Windows 8.6.3 미만 8.6.3 이상
CVE-2026-20338 Secure Endpoint Connector for Linux 1.29.2 미만 1.29.2 이상
CVE-2026-20338 Secure Endpoint Connector for Mac 1.27.4 미만 1.27.4 이상
CVE-2026-20338 Secure Endpoint Connector for Windows 7.5.24.21780 미만 7.5.24.21780 이상
CVE-2026-20338 Secure Endpoint Connector for Windows 8.6.3 미만 8.6.3 이상
CVE-2026-20339 Secure Endpoint Connector for Linux 1.29.2 미만 1.29.2 이상
CVE-2026-20339 Secure Endpoint Connector for Mac 1.27.4 미만 1.27.4 이상
CVE-2026-20339 Secure Endpoint Connector for Windows 7.5.24.21780 미만 7.5.24.21780 이상
CVE-2026-20339 Secure Endpoint Connector for Windows 8.6.3 미만 8.6.3 이상
CVE-2026-20345 Secure Endpoint Connector for Linux 1.29.2 미만 1.29.2 이상
CVE-2026-20345 Secure Endpoint Connector for Mac 1.27.4 미만 1.27.4 이상
CVE-2026-20345 Secure Endpoint Connector for Windows 7.5.24.21780 미만 7.5.24.21780 이상
CVE-2026-20345 Secure Endpoint Connector for Windows 8.6.3 미만 8.6.3 이상
CVE-2026-20346 Secure Endpoint Connector for Linux 1.29.2 미만 1.29.2 이상
CVE-2026-20346 Secure Endpoint Connector for Mac 1.27.4 미만 1.27.4 이상
CVE-2026-20346 Secure Endpoint Connector for Windows 7.5.24.21780 미만 7.5.24.21780 이상
CVE-2026-20346 Secure Endpoint Connector for Windows 8.6.3 미만 8.6.3 이상
CVE-2026-20347 Secure Endpoint Connector for Linux 1.29.2 미만 1.29.2 이상
CVE-2026-20347 Secure Endpoint Connector for Mac 1.27.4 미만 1.27.4 이상
CVE-2026-20347 Secure Endpoint Connector for Windows 7.5.24.21780 미만 7.5.24.21780 이상
CVE-2026-20347 Secure Endpoint Connector for Windows 8.6.3 미만 8.6.3 이상
CVE-2026-20348 Secure Endpoint Connector for Linux 1.29.2 미만 1.29.2 이상
CVE-2026-20348 Secure Endpoint Connector for Mac 1.27.4 미만 1.27.4 이상
CVE-2026-20348 Secure Endpoint Connector for Windows 7.5.24.21780 미만 7.5.24.21780 이상
CVE-2026-20348 Secure Endpoint Connector for Windows 8.6.3 미만 8.6.3 이상

※ 하단의 참고 사이트를 확인하여 업데이트 수행 [1]~[3]

□ 참고사이트
[1] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM
[2] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bworks-xxe-uwUd7CEt
[3] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26
[4] https://nvd.nist.gov/vuln/detail/CVE-2026-20274
[5] https://nvd.nist.gov/vuln/detail/CVE-2026-20275
[6] https://nvd.nist.gov/vuln/detail/CVE-2026-20276
[7] https://nvd.nist.gov/vuln/detail/CVE-2026-20277
[8] https://nvd.nist.gov/vuln/detail/CVE-2026-20278
[9] https://nvd.nist.gov/vuln/detail/CVE-2026-20279
[10] https://nvd.nist.gov/vuln/detail/CVE-2026-20280
[11] https://nvd.nist.gov/vuln/detail/CVE-2026-20320
[12] https://nvd.nist.gov/vuln/detail/CVE-2026-20337
[13] https://nvd.nist.gov/vuln/detail/CVE-2026-20338
[14] https://nvd.nist.gov/vuln/detail/CVE-2026-20339
[15] https://nvd.nist.gov/vuln/detail/CVE-2026-20345
[16] https://nvd.nist.gov/vuln/detail/CVE-2026-20346
[17] https://nvd.nist.gov/vuln/detail/CVE-2026-20347
[18] https://nvd.nist.gov/vuln/detail/CVE-2026-20348

□ 문의사항
o 한국인터넷진흥원 사이버민원센터 : 국번없이 118

□ 작성 : 디지털위협대응본부 취약점관리센터