Cisco IOS XR Software
- Software type
- Network operating system
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, Cisco IOS XR Software recorded 8 security vulnerabilities in the last 90 days, of which 8 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Cisco IOS XR Software and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-76505Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service VulnerabilityCVE-2026-20280Cisco IOS XR Software Security Hardening Release: September 2026CVE-2026-20279Cisco IOS XR Software Security Hardening Release: September 2026CVE-2026-20278Cisco IOS XR Software Security Hardening Release: September 2026CVE-2026-20277Cisco IOS XR Software Security Hardening Release: September 2026| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-76505Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo |
| SeverityHigh |
CVE-2026-20280Cisco IOS XR Software Security Hardening Release: September 2026 | Exploitation statusNot exploited | FixNo | Published09/02/2026 | SeverityHigh |
|---|
CVE-2026-20279Cisco IOS XR Software Security Hardening Release: September 2026 | Exploitation statusNot exploited | FixNo | Published09/02/2026 | SeverityCritical |
|---|
CVE-2026-20278Cisco IOS XR Software Security Hardening Release: September 2026 | Exploitation statusNot exploited | FixNo | Published09/02/2026 | SeverityHigh |
|---|
CVE-2026-20277Cisco IOS XR Software Security Hardening Release: September 2026 | Exploitation statusNot exploited | FixNo | Published09/02/2026 | SeverityHigh |
|---|
CVE-2026-20276Cisco IOS XR Software Security Hardening Release: September 2026 | Exploitation statusNot exploited | FixNo | Published09/02/2026 | SeverityHigh |
|---|
CVE-2026-20275Cisco IOS XR Software Security Hardening Release: September 2026 | Exploitation statusNot exploited | FixNo | Published09/02/2026 | SeverityHigh |
|---|
CVE-2026-20274Cisco IOS XR Software Security Hardening Release: September 2026 | Exploitation statusNot exploited | FixNo | Published09/02/2026 | SeverityCritical |
|---|
CVE-2026-20118Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published03/11/2026 | SeverityMedium |
|---|
CVE-2026-20074Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published03/11/2026 | SeverityHigh |
|---|
CVE-2026-20046Cisco IOS XR Software CLI Privilege Escalation Vulnerability | Exploitation statusNot exploited | FixNo | Published03/11/2026 | SeverityHigh |
|---|
CVE-2026-20040Cisco IOS XR Software CLI Privilege Escalation Vulnerability | Exploitation statusNot exploited | FixNo | Published03/11/2026 | SeverityHigh |
|---|
CVE-2025-20363CVE-2025-20363 | Exploitation statusNot exploited | FixNo | Published09/25/2025 | SeverityCritical |
|---|
CVE-2025-20340Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability | Exploitation statusNot exploited | FixNo | Published09/10/2025 | SeverityHigh |
|---|
CVE-2025-20248Cisco IOS XR Software Image Verification Bypass Vulnerability | Exploitation statusNot exploited | FixNo | Published09/10/2025 | SeverityMedium |
|---|
CVE-2025-20159Cisco IOS XR Software Management Interface ACL Bypass Vulnerability | Exploitation statusNot exploited | FixNo | Published09/10/2025 | SeverityMedium |
|---|
CVE-2025-20154Cisco IOS, IOS XE and IOS XR Software TWAMP Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published05/07/2025 | SeverityHigh |
|---|
CVE-2025-20209Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published03/12/2025 | SeverityHigh |
|---|
CVE-2025-20177Cisco IOS XR Software Image Verification Bypass Vulnerability | Exploitation statusNot exploited | FixNo | Published03/12/2025 | SeverityMedium |
|---|
CVE-2025-20146Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Routing Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published03/12/2025 | SeverityHigh |
|---|
CVE-2025-20145Cisco IOS XR Software Access Control List Bypass Vulnerability | Exploitation statusNot exploited | FixNo | Published03/12/2025 | SeverityMedium |
|---|
CVE-2025-20144Cisco IOS XR Software Access Control List Bypass Vulnerability | Exploitation statusNot exploited | FixNo | Published03/12/2025 | SeverityMedium |
|---|
CVE-2025-20143Cisco IOS XR Software Secure Boot Bypass Vulnerability | Exploitation statusNot exploited | FixNo | Published03/12/2025 | SeverityMedium |
|---|
CVE-2025-20142Cisco IOS XR Software for ASR 9000 Series Routers L2VPN Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published03/12/2025 | SeverityHigh |
|---|
CVE-2025-20141Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerabillity | Exploitation statusNot exploited | FixNo | Published03/12/2025 | SeverityHigh |
|---|
CVE-2025-20138Cisco IOS XR Software CLI Privilege Escalation Vulnerability | Exploitation statusNot exploited | FixNo | Published03/12/2025 | SeverityHigh |
|---|
CVE-2025-20115Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published03/12/2025 | SeverityHigh |
|---|
CVE-2025-20172CVE-2025-20172 | Exploitation statusNot exploited | FixNo | Published02/05/2025 | SeverityHigh |
|---|
CVE-2021-1440Cisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published11/18/2024 | SeverityMedium |
|---|
CVE-2022-20849Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published11/15/2024 | SeverityMedium |
|---|
CVE-2022-20846Cisco IOS XR Software Cisco Discovery Protocol Buffer Overflow Vulnerability | Exploitation statusNot exploited | FixNo | Published11/15/2024 | SeverityMedium |
|---|
CVE-2022-20845Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published11/15/2024 | SeverityMedium |
|---|
CVE-2022-20655CVE-2022-20655 | Exploitation statusNot exploited | FixNo | Published11/15/2024 | SeverityHigh |
|---|
CVE-2024-20489Cisco Routed Passive Optical Network Cleartext Password Vulnerability | Exploitation statusNot exploited | FixNo | Published09/11/2024 | SeverityHigh |
|---|
CVE-2024-20483Cisco IOS XR PON Controller Command Injection Vulnerabilities | Exploitation statusNot exploited | FixNo | Published09/11/2024 | SeverityHigh |
|---|
CVE-2024-20406Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published09/11/2024 | SeverityHigh |
|---|
CVE-2024-20398Cisco IOS XR Software Local Privilege Escalation Vulnerability | Exploitation statusNot exploited | FixNo | Published09/11/2024 | SeverityHigh |
|---|
CVE-2024-20390Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published09/11/2024 | SeverityMedium |
|---|
CVE-2024-20381Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability | Exploitation statusNot exploited | FixNo | Published09/11/2024 | SeverityHigh |
|---|
CVE-2024-20343Cisco IOS XR Software CLI Arbitrary File Read Vulnerability | Exploitation statusNot exploited | FixNo | Published09/11/2024 | SeverityMedium |
|---|
CVE-2024-20317Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published09/11/2024 | SeverityHigh |
|---|
CVE-2024-20304Cisco IOS XR Software Packet Memory Exhaustion Vulnerability | Exploitation statusNot exploited | FixNo | Published09/11/2024 | SeverityHigh |
|---|
CVE-2024-20456CVE-2024-20456 | Exploitation statusNot exploited | FixNo | Published07/10/2024 | SeverityMedium |
|---|
CVE-2024-20327CVE-2024-20327 | Exploitation statusNot exploited | FixNo | Published03/13/2024 | SeverityHigh |
|---|
CVE-2024-20322CVE-2024-20322 | Exploitation statusNot exploited | FixNo | Published03/13/2024 | SeverityMedium |
|---|
CVE-2024-20320CVE-2024-20320 | Exploitation statusNot exploited | FixNo | Published03/13/2024 | SeverityHigh |
|---|
CVE-2024-20319CVE-2024-20319 | Exploitation statusNot exploited | FixNo | Published03/13/2024 | SeverityMedium |
|---|
CVE-2024-20318CVE-2024-20318 | Exploitation statusNot exploited | FixNo | Published03/13/2024 | SeverityHigh |
|---|
CVE-2024-20315CVE-2024-20315 | Exploitation statusNot exploited | FixNo | Published03/13/2024 | SeverityMedium |
|---|
CVE-2024-20266CVE-2024-20266 | Exploitation statusNot exploited | FixNo | Published03/13/2024 | SeverityMedium |
|---|
101 Results | Page 1 of 3