# Cisco IOS XR Software. Every CVE that names Cisco IOS XR Software among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-76505.md) `CVE-2026-76505` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.5 High · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-20 - [Cisco IOS XR Software Security Hardening Release: September 2026](https://agentprime.io/advisories/CVE-2026-20278.md) `CVE-2026-20278` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-707 - [Cisco IOS XR Software Security Hardening Release: September 2026](https://agentprime.io/advisories/CVE-2026-20280.md) `CVE-2026-20280` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-703 - [Cisco IOS XR Software Security Hardening Release: September 2026](https://agentprime.io/advisories/CVE-2026-20279.md) `CVE-2026-20279` · CVE record: Cisco Cisco IOS XR Software · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2026 · Tags: Broken access control - [Cisco IOS XR Software Security Hardening Release: September 2026](https://agentprime.io/advisories/CVE-2026-20275.md) `CVE-2026-20275` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-682 - [Cisco IOS XR Software Security Hardening Release: September 2026](https://agentprime.io/advisories/CVE-2026-20274.md) `CVE-2026-20274` · CVE record: Cisco Cisco IOS XR Software · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-664 - [Cisco IOS XR Software Security Hardening Release: September 2026](https://agentprime.io/advisories/CVE-2026-20276.md) `CVE-2026-20276` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-691 - [Cisco IOS XR Software Security Hardening Release: September 2026](https://agentprime.io/advisories/CVE-2026-20277.md) `CVE-2026-20277` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.2 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-693 - [Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20118.md) `CVE-2026-20118` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.8 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-460 - [Cisco IOS XR Software CLI Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-20046.md) `CVE-2026-20046` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.8 High · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-264 - [Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20074.md) `CVE-2026-20074` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-1287 - [Cisco IOS XR Software CLI Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-20040.md) `CVE-2026-20040` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.8 High · Not analysed yet · Published 11 Mar 2026 · Tags: Command injection - [Heap-based buffer overflow in Cisco IOS and others](https://agentprime.io/advisories/CVE-2025-20363.md) `CVE-2025-20363` · CVE record: Cisco IOS and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2025 · Tags: Memory corruption - [Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability](https://agentprime.io/advisories/CVE-2025-20340.md) `CVE-2025-20340` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 10 Sept 2025 · Tags: Denial of service - [Cisco IOS XR Software Management Interface ACL Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20159.md) `CVE-2025-20159` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.3 Medium · Not analysed yet · Published 10 Sept 2025 · Tags: Broken access control - [Cisco IOS XR Software Image Verification Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20248.md) `CVE-2025-20248` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.0 Medium · Not analysed yet · Published 10 Sept 2025 · Tags: Weak cryptography or TLS - [Cisco IOS, IOS XE and IOS XR Software TWAMP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20154.md) `CVE-2025-20154` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 7 May 2025 · Tags: CWE-20 - [Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20209.md) `CVE-2025-20209` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.5 High · Not analysed yet · Published 12 Mar 2025 · Tags: Denial of service - [Cisco IOS XR Software Image Verification Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20177.md) `CVE-2025-20177` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.7 Medium · Not analysed yet · Published 12 Mar 2025 · Tags: CWE-274 - [Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Routing Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20146.md) `CVE-2025-20146` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 12 Mar 2025 · Tags: CWE-20 - [Cisco IOS XR Software Access Control List Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20145.md) `CVE-2025-20145` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.8 Medium · Not analysed yet · Published 12 Mar 2025 · Tags: CWE-264 - [Cisco IOS XR Software Access Control List Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20144.md) `CVE-2025-20144` · CVE record: Cisco Cisco IOS XR Software · CVSS 4.0 Medium · Not analysed yet · Published 12 Mar 2025 · Tags: Broken access control - [Cisco IOS XR Software Secure Boot Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20143.md) `CVE-2025-20143` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.7 Medium · Not analysed yet · Published 12 Mar 2025 · Tags: Weak cryptography or TLS - [Cisco IOS XR Software for ASR 9000 Series Routers L2VPN Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20142.md) `CVE-2025-20142` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 12 Mar 2025 · Tags: CWE-20 - [Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerabillity](https://agentprime.io/advisories/CVE-2025-20141.md) `CVE-2025-20141` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 12 Mar 2025 · Tags: Denial of service - [Cisco IOS XR Software CLI Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2025-20138.md) `CVE-2025-20138` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2025 · Tags: Command injection - [Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20115.md) `CVE-2025-20115` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 12 Mar 2025 · Tags: Memory corruption - [Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software…](https://agentprime.io/advisories/CVE-2025-20172.md) `CVE-2025-20172` · CVE record: Cisco IOS and 2 more · CVSS 7.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: CWE-248 - [Cisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1440.md) `CVE-2021-1440` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.8 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Denial of service - [OS command injection in Cisco IOS XR Software and others](https://agentprime.io/advisories/CVE-2022-20655.md) `CVE-2022-20655` · CVE record: Cisco Cisco IOS XR Software and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 Nov 2024 · Tags: Command injection - [Cisco IOS XR Software Cisco Discovery Protocol Buffer Overflow Vulnerability](https://agentprime.io/advisories/CVE-2022-20846.md) `CVE-2022-20846` · CVE record: Cisco Cisco IOS XR Software · CVSS 4.3 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: Memory corruption - [Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20845.md) `CVE-2022-20845` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.0 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: Denial of service - [Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20849.md) `CVE-2022-20849` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.1 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: CWE-391 - [Cisco IOS XR Software Packet Memory Exhaustion Vulnerability](https://agentprime.io/advisories/CVE-2024-20304.md) `CVE-2024-20304` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 11 Sept 2024 · Tags: Denial of service - [Cisco Routed Passive Optical Network Cleartext Password Vulnerability](https://agentprime.io/advisories/CVE-2024-20489.md) `CVE-2024-20489` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.4 High · Not analysed yet · Published 11 Sept 2024 · Tags: CWE-256 - [Cisco IOS XR PON Controller Command Injection Vulnerabilities](https://agentprime.io/advisories/CVE-2024-20483.md) `CVE-2024-20483` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.2 High · Not analysed yet · Published 11 Sept 2024 · Tags: Command injection - [Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20406.md) `CVE-2024-20406` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 11 Sept 2024 · Tags: CWE-20 - [Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20381.md) `CVE-2024-20381` · CVE record: Cisco Cisco IOS XR Software and 2 more · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2024 · Tags: Broken access control - [Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20317.md) `CVE-2024-20317` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 11 Sept 2024 · Tags: CWE-684 - [Cisco IOS XR Software Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2024-20398.md) `CVE-2024-20398` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2024 · Tags: Command injection - [Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20390.md) `CVE-2024-20390` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.3 Medium · Not analysed yet · Published 11 Sept 2024 · Tags: CWE-940 - [Cisco IOS XR Software CLI Arbitrary File Read Vulnerability](https://agentprime.io/advisories/CVE-2024-20343.md) `CVE-2024-20343` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.5 Medium · Not analysed yet · Published 11 Sept 2024 · Tags: Broken access control - [Incorrect permission assignment in Cisco IOS XR Software](https://agentprime.io/advisories/CVE-2024-20456.md) `CVE-2024-20456` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.7 Medium · Not analysed yet · Published 10 Jul 2024 · Tags: Broken access control - [Improper access control in Cisco IOS XR Software](https://agentprime.io/advisories/CVE-2024-20319.md) `CVE-2024-20319` · CVE record: Cisco Cisco IOS XR Software · CVSS 4.3 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: Broken access control - [Improper privilege management in Cisco IOS XR Software](https://agentprime.io/advisories/CVE-2024-20262.md) `CVE-2024-20262` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.5 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: Privilege escalation - [Improper input validation in Cisco IOS XR Software](https://agentprime.io/advisories/CVE-2024-20318.md) `CVE-2024-20318` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 13 Mar 2024 · Tags: CWE-20 - [Improper access control in Cisco IOS XR Software](https://agentprime.io/advisories/CVE-2024-20315.md) `CVE-2024-20315` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.8 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: Broken access control - [Improper access control in Cisco IOS XR Software](https://agentprime.io/advisories/CVE-2024-20322.md) `CVE-2024-20322` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.8 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: Broken access control - [NULL pointer dereference in Cisco IOS XR Software](https://agentprime.io/advisories/CVE-2024-20266.md) `CVE-2024-20266` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.3 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: Memory corruption - [Cisco IOS XR Software: A vulnerability in the SSH client feature of Cisco IOS XR Software for Cisco 8000 Series…](https://agentprime.io/advisories/CVE-2024-20320.md) `CVE-2024-20320` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.8 High · Not analysed yet · Published 13 Mar 2024 · Tags: Privilege escalation - [Improper input validation in Cisco IOS XR Software](https://agentprime.io/advisories/CVE-2024-20327.md) `CVE-2024-20327` · CVE record: Cisco Cisco IOS XR Software · CVSS 7.4 High · Not analysed yet · Published 13 Mar 2024 · Tags: CWE-20 - [Cisco IOS XR Software: A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS…](https://agentprime.io/advisories/CVE-2023-20190.md) `CVE-2023-20190` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.8 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: CWE-264 - [Improper access control in Cisco IOS XR Software](https://agentprime.io/advisories/CVE-2023-20191.md) `CVE-2023-20191` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.8 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Broken access control - [NULL pointer dereference in Cisco IOS XR Software](https://agentprime.io/advisories/CVE-2023-20233.md) `CVE-2023-20233` · CVE record: Cisco Cisco IOS XR Software · CVSS 4.3 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Memory corruption - [Improper signature verification in Cisco IOS XR Software](https://agentprime.io/advisories/CVE-2023-20236.md) `CVE-2023-20236` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.7 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Weak cryptography or TLS - [Improper signature verification in Cisco IOS XR Software](https://agentprime.io/advisories/CVE-2023-20135.md) `CVE-2023-20135` · CVE record: Cisco Cisco IOS XR Software · CVSS 5.7 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Weak cryptography or TLS - [Cisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-20064.md) `CVE-2023-20064` · CVE record: Cisco Cisco IOS XR Software · CVSS 4.6 Medium · Not analysed yet · Published 9 Mar 2023 · Tags: Broken access control - [Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-20049.md) `CVE-2023-20049` · CVE record: Cisco Cisco IOS XR Software · CVSS 8.6 High · Not analysed yet · Published 9 Mar 2023 · Tags: Memory corruption - [Cisco IOS XR Software Health Check Open Port Vulnerability](https://agentprime.io/advisories/CVE-2022-20821.md) `CVE-2022-20821` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · EPSS 0.11 · Not analysed yet · Published 26 May 2022 · Tags: Information disclosure - [Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20758.md) `CVE-2022-20758` · CVE record: Cisco Cisco IOS XR Software · CVSS 6.8 Medium · Not analysed yet · Published 15 Apr 2022 · Tags: CWE-399 Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .