Advisories · Technology

Cisco IOS XR Software.

Every CVE that names Cisco IOS XR Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76505 CVE record

CVSS 7.5 High

Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 21 Oct 2026
CVE-2026-20278 CVE record

CVSS 8.8 High

Cisco IOS XR Software Security Hardening Release: September 2026
- Cisco IOS XR Software
- CWE-707
Not analysed yet 2 Sept 2026
CVE-2026-20280 CVE record

CVSS 8.8 High

Cisco IOS XR Software Security Hardening Release: September 2026
- Cisco IOS XR Software
- CWE-703
Not analysed yet 2 Sept 2026
CVE-2026-20279 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco IOS XR Software Security Hardening Release: September 2026
- Cisco IOS XR Software
- Broken access control
Not analysed yet 2 Sept 2026
CVE-2026-20275 CVE record

CVSS 8.8 High

Cisco IOS XR Software Security Hardening Release: September 2026
- Cisco IOS XR Software
- CWE-682
Not analysed yet 2 Sept 2026
CVE-2026-20274 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco IOS XR Software Security Hardening Release: September 2026
- Cisco IOS XR Software
- CWE-664
Not analysed yet 2 Sept 2026
CVE-2026-20276 CVE record

CVSS 8.6 High

Cisco IOS XR Software Security Hardening Release: September 2026
- Cisco IOS XR Software
- CWE-691
Not analysed yet 2 Sept 2026
CVE-2026-20277 CVE record

CVSS 8.2 High

Cisco IOS XR Software Security Hardening Release: September 2026
- Cisco IOS XR Software
- CWE-693
Not analysed yet 2 Sept 2026
CVE-2026-20118 CVE record

CVSS 6.8 Medium

Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-460
Not analysed yet 11 Mar 2026
CVE-2026-20046 CVE record

CVSS 8.8 High

Cisco IOS XR Software CLI Privilege Escalation Vulnerability
- Cisco IOS XR Software
- CWE-264
Not analysed yet 11 Mar 2026
CVE-2026-20074 CVE record

CVSS 7.4 High

Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-1287
Not analysed yet 11 Mar 2026
CVE-2026-20040 CVE record

CVSS 8.8 High

Cisco IOS XR Software CLI Privilege Escalation Vulnerability
- Cisco IOS XR Software
- Command injection
Not analysed yet 11 Mar 2026
CVE-2025-20363 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Heap-based buffer overflow in Cisco IOS and others
- Cisco IOS
- Cisco IOS XR Software
- Memory corruption
Not analysed yet 25 Sept 2025
CVE-2025-20340 CVE record

CVSS 7.4 High

Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability
- Cisco IOS XR Software
- Denial of service
Not analysed yet 10 Sept 2025
CVE-2025-20159 CVE record

CVSS 5.3 Medium

Cisco IOS XR Software Management Interface ACL Bypass Vulnerability
- Cisco IOS XR Software
- Broken access control
Not analysed yet 10 Sept 2025
CVE-2025-20248 CVE record

CVSS 6.0 Medium

Cisco IOS XR Software Image Verification Bypass Vulnerability
- Cisco IOS XR Software
- Weak cryptography or TLS
Not analysed yet 10 Sept 2025
CVE-2025-20154 CVE record

CVSS 8.6 High

Cisco IOS, IOS XE and IOS XR Software TWAMP Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 7 May 2025
CVE-2025-20209 CVE record

CVSS 7.5 High

Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability
- Cisco IOS XR Software
- Denial of service
Not analysed yet 12 Mar 2025
CVE-2025-20177 CVE record

CVSS 6.7 Medium

Cisco IOS XR Software Image Verification Bypass Vulnerability
- Cisco IOS XR Software
- CWE-274
Not analysed yet 12 Mar 2025
CVE-2025-20146 CVE record

CVSS 8.6 High

Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Routing Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 12 Mar 2025
CVE-2025-20145 CVE record

CVSS 5.8 Medium

Cisco IOS XR Software Access Control List Bypass Vulnerability
- Cisco IOS XR Software
- CWE-264
Not analysed yet 12 Mar 2025
CVE-2025-20144 CVE record

CVSS 4.0 Medium

Cisco IOS XR Software Access Control List Bypass Vulnerability
- Cisco IOS XR Software
- Broken access control
Not analysed yet 12 Mar 2025
CVE-2025-20143 CVE record

CVSS 6.7 Medium

Cisco IOS XR Software Secure Boot Bypass Vulnerability
- Cisco IOS XR Software
- Weak cryptography or TLS
Not analysed yet 12 Mar 2025
CVE-2025-20142 CVE record

CVSS 8.6 High

Cisco IOS XR Software for ASR 9000 Series Routers L2VPN Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 12 Mar 2025
CVE-2025-20141 CVE record

CVSS 7.4 High

Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerabillity
- Cisco IOS XR Software
- Denial of service
Not analysed yet 12 Mar 2025
CVE-2025-20138 CVE record

CVSS 8.8 High

Cisco IOS XR Software CLI Privilege Escalation Vulnerability
- Cisco IOS XR Software
- Command injection
Not analysed yet 12 Mar 2025
CVE-2025-20115 CVE record

CVSS 8.6 High

Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability
- Cisco IOS XR Software
- Memory corruption
Not analysed yet 12 Mar 2025
CVE-2025-20172 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XR Software
- CWE-248
Not analysed yet 5 Feb 2025
CVE-2021-1440 CVE record

CVSS 6.8 Medium

Cisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service Vulnerability
- Cisco IOS XR Software
- Denial of service
Not analysed yet 18 Nov 2024
CVE-2022-20655 CVE record

CVSS 8.8 High

OS command injection in Cisco IOS XR Software and others
- Cisco IOS XR Software
- Cisco Virtual Topology System (VTS)
- Command injection
Not analysed yet 15 Nov 2024
CVE-2022-20846 CVE record

CVSS 4.3 Medium

Cisco IOS XR Software Cisco Discovery Protocol Buffer Overflow Vulnerability
- Cisco IOS XR Software
- Memory corruption
Not analysed yet 15 Nov 2024
CVE-2022-20845 CVE record

CVSS 6.0 Medium

Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability
- Cisco IOS XR Software
- Denial of service
Not analysed yet 15 Nov 2024
CVE-2022-20849 CVE record

CVSS 6.1 Medium

Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-391
Not analysed yet 15 Nov 2024
CVE-2024-20304 CVE record

CVSS 8.6 High

Cisco IOS XR Software Packet Memory Exhaustion Vulnerability
- Cisco IOS XR Software
- Denial of service
Not analysed yet 11 Sept 2024
CVE-2024-20489 CVE record

CVSS 8.4 High

Cisco Routed Passive Optical Network Cleartext Password Vulnerability
- Cisco IOS XR Software
- CWE-256
Not analysed yet 11 Sept 2024
CVE-2024-20483 CVE record

CVSS 7.2 High

Cisco IOS XR PON Controller Command Injection Vulnerabilities
- Cisco IOS XR Software
- Command injection
Not analysed yet 11 Sept 2024
CVE-2024-20406 CVE record

CVSS 7.4 High

Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-20
Not analysed yet 11 Sept 2024
CVE-2024-20381 CVE record

CVSS 8.8 High

Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability
- Cisco IOS XR Software
- Cisco Network Services Orchestrator
- Broken access control
Not analysed yet 11 Sept 2024
CVE-2024-20317 CVE record

CVSS 7.4 High

Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-684
Not analysed yet 11 Sept 2024
CVE-2024-20398 CVE record

CVSS 8.8 High

Cisco IOS XR Software Local Privilege Escalation Vulnerability
- Cisco IOS XR Software
- Command injection
Not analysed yet 11 Sept 2024
CVE-2024-20390 CVE record

CVSS 5.3 Medium

Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-940
Not analysed yet 11 Sept 2024
CVE-2024-20343 CVE record

CVSS 5.5 Medium

Cisco IOS XR Software CLI Arbitrary File Read Vulnerability
- Cisco IOS XR Software
- Broken access control
Not analysed yet 11 Sept 2024
CVE-2024-20456 CVE record

CVSS 6.7 Medium

Incorrect permission assignment in Cisco IOS XR Software
- Cisco IOS XR Software
- Broken access control
Not analysed yet 10 Jul 2024
CVE-2024-20319 CVE record

CVSS 4.3 Medium

Improper access control in Cisco IOS XR Software
- Cisco IOS XR Software
- Broken access control
Not analysed yet 13 Mar 2024
CVE-2024-20262 CVE record

CVSS 6.5 Medium

Improper privilege management in Cisco IOS XR Software
- Cisco IOS XR Software
- Privilege escalation
Not analysed yet 13 Mar 2024
CVE-2024-20318 CVE record

CVSS 7.4 High

Improper input validation in Cisco IOS XR Software
- Cisco IOS XR Software
- CWE-20
Not analysed yet 13 Mar 2024
CVE-2024-20315 CVE record

CVSS 5.8 Medium

Improper access control in Cisco IOS XR Software
- Cisco IOS XR Software
- Broken access control
Not analysed yet 13 Mar 2024
CVE-2024-20322 CVE record

CVSS 5.8 Medium

Improper access control in Cisco IOS XR Software
- Cisco IOS XR Software
- Broken access control
Not analysed yet 13 Mar 2024
CVE-2024-20266 CVE record

CVSS 5.3 Medium

NULL pointer dereference in Cisco IOS XR Software
- Cisco IOS XR Software
- Memory corruption
Not analysed yet 13 Mar 2024
CVE-2024-20320 CVE record

CVSS 7.8 High

Cisco IOS XR Software: A vulnerability in the SSH client feature of Cisco IOS XR Software for Cisco 8000 Series…
- Cisco IOS XR Software
- Privilege escalation
Not analysed yet 13 Mar 2024
CVE-2024-20327 CVE record

CVSS 7.4 High

Improper input validation in Cisco IOS XR Software
- Cisco IOS XR Software
- CWE-20
Not analysed yet 13 Mar 2024
CVE-2023-20190 CVE record

CVSS 5.8 Medium

Cisco IOS XR Software: A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS…
- Cisco IOS XR Software
- CWE-264
Not analysed yet 13 Sept 2023
CVE-2023-20191 CVE record

CVSS 5.8 Medium

Improper access control in Cisco IOS XR Software
- Cisco IOS XR Software
- Broken access control
Not analysed yet 13 Sept 2023
CVE-2023-20233 CVE record

CVSS 4.3 Medium

NULL pointer dereference in Cisco IOS XR Software
- Cisco IOS XR Software
- Memory corruption
Not analysed yet 13 Sept 2023
CVE-2023-20236 CVE record

CVSS 6.7 Medium

Improper signature verification in Cisco IOS XR Software
- Cisco IOS XR Software
- Weak cryptography or TLS
Not analysed yet 13 Sept 2023
CVE-2023-20135 CVE record

CVSS 5.7 Medium

Improper signature verification in Cisco IOS XR Software
- Cisco IOS XR Software
- Weak cryptography or TLS
Not analysed yet 13 Sept 2023
CVE-2023-20064 CVE record

CVSS 4.6 Medium

Cisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability
- Cisco IOS XR Software
- Broken access control
Not analysed yet 9 Mar 2023
CVE-2023-20049 CVE record

CVSS 8.6 High

Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability
- Cisco IOS XR Software
- Memory corruption
Not analysed yet 9 Mar 2023
CVE-2022-20821 CVE record

CVSS 6.5 MediumCritical · KEVKEV

Cisco IOS XR Software Health Check Open Port Vulnerability
- Cisco IOS XR Software
- Information disclosure
Not analysed yet 26 May 2022
CVE-2022-20758 CVE record

CVSS 6.8 Medium

Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-399
Not analysed yet 15 Apr 2022