Cisco IOS XR Software
Cisco
- Product type
- Other
- Catalog vulnerabilities
- 114
Severity across 100 analyzed records
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 09/13/2026, within CyStack's analyzed data, Cisco IOS XR Software has 7 security vulnerabilities published in the last 90 days. Of these, 7 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Cisco IOS XR Software and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-20278Cisco IOS XR Software Security Hardening Release: September 2026 | Exploitation statusNot known exploited | FixNot confirmed | Published09/02/2026 | SeverityHigh |
CVE-2026-20280Cisco IOS XR Software Security Hardening Release: September 2026 | Exploitation statusNot known exploited | FixNot confirmed | Published09/02/2026 | SeverityHigh |
CVE-2026-20279Cisco IOS XR Software Security Hardening Release: September 2026 | Exploitation statusNot known exploited | FixNot confirmed | Published09/02/2026 | SeverityCritical |
CVE-2026-20275Cisco IOS XR Software Security Hardening Release: September 2026 | Exploitation statusNot known exploited | FixNot confirmed | Published09/02/2026 | SeverityHigh |
CVE-2026-20274Cisco IOS XR Software Security Hardening Release: September 2026 | Exploitation statusNot known exploited | FixNot confirmed | Published09/02/2026 | SeverityCritical |
CVE-2026-20276Cisco IOS XR Software Security Hardening Release: September 2026 | Exploitation statusNot known exploited | FixNot confirmed | Published09/02/2026 | SeverityHigh |
CVE-2026-20277Cisco IOS XR Software Security Hardening Release: September 2026 | Exploitation statusNot known exploited | FixNot confirmed | Published09/02/2026 | SeverityHigh |
CVE-2026-20118Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/11/2026 | SeverityMedium |
CVE-2026-20046Cisco IOS XR Software CLI Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/11/2026 | SeverityHigh |
CVE-2026-20074Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/11/2026 | SeverityHigh |
CVE-2026-20040Cisco IOS XR Software CLI Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/11/2026 | SeverityHigh |
CVE-2025-20363 | Exploitation statusNot known exploited | FixNot confirmed | Published09/25/2025 | SeverityCritical |
CVE-2025-20340Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/10/2025 | SeverityHigh |
CVE-2025-20159Cisco IOS XR Software Management Interface ACL Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/10/2025 | SeverityMedium |
CVE-2025-20248Cisco IOS XR Software Image Verification Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/10/2025 | SeverityMedium |
CVE-2025-20154Cisco IOS, IOS XE and IOS XR Software TWAMP Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/07/2025 | SeverityHigh |
CVE-2025-20209Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/12/2025 | SeverityHigh |
CVE-2025-20177Cisco IOS XR Software Image Verification Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/12/2025 | SeverityMedium |
CVE-2025-20146Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Routing Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/12/2025 | SeverityHigh |
CVE-2025-20145Cisco IOS XR Software Access Control List Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/12/2025 | SeverityMedium |
CVE-2025-20144Cisco IOS XR Software Access Control List Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/12/2025 | SeverityMedium |
CVE-2025-20143Cisco IOS XR Software Secure Boot Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/12/2025 | SeverityMedium |
CVE-2025-20142Cisco IOS XR Software for ASR 9000 Series Routers L2VPN Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/12/2025 | SeverityHigh |
CVE-2025-20141Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerabillity | Exploitation statusNot known exploited | FixNot confirmed | Published03/12/2025 | SeverityHigh |
CVE-2025-20138Cisco IOS XR Software CLI Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/12/2025 | SeverityHigh |
CVE-2025-20115Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/12/2025 | SeverityHigh |
CVE-2025-20172 | Exploitation statusNot known exploited | FixNot confirmed | Published02/05/2025 | SeverityHigh |
CVE-2021-1440Cisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityMedium |
CVE-2022-20655 | Exploitation statusNot known exploited | FixNot confirmed | Published11/15/2024 | SeverityHigh |
CVE-2022-20846Cisco IOS XR Software Cisco Discovery Protocol Buffer Overflow Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/15/2024 | SeverityMedium |
CVE-2022-20845Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/15/2024 | SeverityMedium |
CVE-2022-20849Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/15/2024 | SeverityMedium |
CVE-2024-20304Cisco IOS XR Software Packet Memory Exhaustion Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/11/2024 | SeverityHigh |
CVE-2024-20489Cisco Routed Passive Optical Network Cleartext Password Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/11/2024 | SeverityHigh |
CVE-2024-20483Cisco IOS XR PON Controller Command Injection Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published09/11/2024 | SeverityHigh |
CVE-2024-20406Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/11/2024 | SeverityHigh |
CVE-2024-20381Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/11/2024 | SeverityHigh |
CVE-2024-20317Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/11/2024 | SeverityHigh |
CVE-2024-20398Cisco IOS XR Software Local Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/11/2024 | SeverityHigh |
CVE-2024-20390Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/11/2024 | SeverityMedium |
CVE-2024-20343Cisco IOS XR Software CLI Arbitrary File Read Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/11/2024 | SeverityMedium |
CVE-2024-20456 | Exploitation statusNot known exploited | FixNot confirmed | Published07/10/2024 | SeverityMedium |
CVE-2024-20319 | Exploitation statusNot known exploited | FixNot confirmed | Published03/13/2024 | SeverityMedium |
CVE-2024-20262 | Exploitation statusNot known exploited | FixNot confirmed | Published03/13/2024 | SeverityMedium |
CVE-2024-20318 | Exploitation statusNot known exploited | FixNot confirmed | Published03/13/2024 | SeverityHigh |
CVE-2024-20315 | Exploitation statusNot known exploited | FixNot confirmed | Published03/13/2024 | SeverityMedium |
CVE-2024-20322 | Exploitation statusNot known exploited | FixNot confirmed | Published03/13/2024 | SeverityMedium |
CVE-2024-20266 | Exploitation statusNot known exploited | FixNot confirmed | Published03/13/2024 | SeverityMedium |
CVE-2024-20320 | Exploitation statusNot known exploited | FixNot confirmed | Published03/13/2024 | SeverityHigh |
CVE-2024-20327 | Exploitation statusNot known exploited | FixNot confirmed | Published03/13/2024 | SeverityHigh |
CVE-2023-20190 | Exploitation statusNot confirmed | FixNot confirmed | Published09/13/2023 | SeverityMedium |
CVE-2023-20191 | Exploitation statusNot confirmed | FixNot confirmed | Published09/13/2023 | SeverityMedium |
CVE-2023-20233 | Exploitation statusNot confirmed | FixNot confirmed | Published09/13/2023 | SeverityMedium |
CVE-2023-20236 | Exploitation statusNot known exploited | FixNot confirmed | Published09/13/2023 | SeverityMedium |
CVE-2023-20135 | Exploitation statusNot known exploited | FixNot confirmed | Published09/13/2023 | SeverityMedium |
CVE-2023-20049Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/09/2023 | SeverityHigh |
CVE-2023-20064Cisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/09/2023 | SeverityMedium |
CVE-2022-20821Cisco IOS XR Software Health Check Open Port Vulnerability | Exploitation statusKEV | FixNot confirmed | Published05/26/2022 | SeverityMedium |
CVE-2022-20758Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/15/2022 | SeverityMedium |
CVE-2022-20714Cisco IOS XR Software for ASR 9000 Series Routers Lightspeed-Plus Line Cards Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/15/2022 | SeverityHigh |
CVE-2021-34771Cisco IOS XR Software Unauthorized Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/09/2021 | SeverityMedium |
CVE-2021-34737Cisco IOS XR Software DHCP Version 4 Server Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/09/2021 | SeverityMedium |
CVE-2021-34728Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published09/09/2021 | SeverityHigh |
CVE-2021-34722Cisco IOS XR Software Command Injection Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published09/09/2021 | SeverityMedium |
CVE-2021-34721Cisco IOS XR Software Command Injection Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published09/09/2021 | SeverityMedium |
CVE-2021-34720Cisco IOS XR Software IP Service Level Agreements and Two-Way Active Measurement Protocol Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/09/2021 | SeverityHigh |
CVE-2021-34719Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published09/09/2021 | SeverityHigh |
CVE-2021-34718Cisco IOS XR Software Arbitrary File Read and Write Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/09/2021 | SeverityHigh |
CVE-2021-34713Cisco IOS XR Software for ASR 9000 Series Routers Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/09/2021 | SeverityHigh |
CVE-2021-34709Cisco IOS XR Software for Cisco 8000 and Network Convergence System 540 Series Routers Image Verification Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published09/09/2021 | SeverityMedium |
CVE-2021-34708Cisco IOS XR Software for Cisco 8000 and Network Convergence System 540 Series Routers Image Verification Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published09/09/2021 | SeverityMedium |
CVE-2021-1485Cisco IOS XR Software Command Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published04/08/2021 | SeverityMedium |
CVE-2021-1313Cisco IOS XR Software Enf Broker Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/04/2021 | SeverityHigh |
CVE-2021-1370Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/04/2021 | SeverityHigh |
CVE-2021-1389Cisco IOS XR and Cisco NX-OS Software IPv6 Access Control List Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/04/2021 | SeverityMedium |
CVE-2021-1128Cisco IOS XR Software Unauthorized Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/04/2021 | SeverityMedium |
CVE-2021-1136Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published02/04/2021 | SeverityMedium |
CVE-2021-1243Cisco IOS XR Software SNMP Management Plane Protection ACL Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/04/2021 | SeverityMedium |
CVE-2021-1244Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published02/04/2021 | SeverityMedium |
CVE-2021-1268Cisco IOS XR Software IPv6 Flood Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/04/2021 | SeverityHigh |
CVE-2021-1288Cisco IOS XR Software Enf Broker Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/04/2021 | SeverityHigh |
CVE-2020-26070Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Slow Path Forwarding Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/12/2020 | SeverityHigh |
CVE-2020-3284Cisco IOS XR Software Enhanced Preboot eXecution Environment Unsigned Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/06/2020 | SeverityHigh |
CVE-2019-16019Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published09/23/2020 | SeverityHigh |
CVE-2019-16021Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published09/23/2020 | SeverityHigh |
CVE-2019-16023Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published09/23/2020 | SeverityHigh |
CVE-2020-3569Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities | Exploitation statusKEV | FixNot confirmed | Published09/23/2020 | SeverityHigh |
CVE-2020-3473Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/04/2020 | SeverityHigh |
CVE-2020-3530Cisco IOS XR Authenticated User Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/04/2020 | SeverityHigh |
CVE-2020-3566Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | Exploitation statusKEV | FixNot confirmed | Published08/29/2020 | SeverityHigh |
CVE-2020-3449Cisco IOS XR Software Additional Paths Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published08/17/2020 | SeverityMedium |
CVE-2020-3364Cisco IOS XR Software Standby Route Processor Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/18/2020 | SeverityMedium |
CVE-2020-3217Cisco IOS, IOS XE, IOS XR, and NX-OS Software One Platform Kit Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/03/2020 | SeverityHigh |
CVE-2020-3190Cisco IOS XR Software IPsec Packet Processor Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published03/04/2020 | SeverityMedium |
CVE-2020-3120Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/05/2020 | SeverityHigh |
CVE-2020-3118Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability | Exploitation statusKEV | FixYes | Published02/05/2020 | SeverityHigh |
CVE-2019-16027Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published01/26/2020 | SeverityHigh |
CVE-2019-16022Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published01/26/2020 | SeverityHigh |
CVE-2019-16020Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published01/26/2020 | SeverityHigh |
CVE-2019-16018Cisco IOS XR Software EVPN Operational Routes Denial of Service Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published01/26/2020 | SeverityHigh |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
