Vulnerabilities of Cisco Cisco IOS XR Software
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-76505 | A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and… | 7.5 High | Oct 21, 2026 |
| CVE-2026-20278 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering… | 8.8 High | Sep 2, 2026 |
| CVE-2026-20280 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software… | 8.8 High | Sep 2, 2026 |
| CVE-2026-20279 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering… | 9.8 Critical | Sep 2, 2026 |
| CVE-2026-20275 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering… | 8.8 High | Sep 2, 2026 |
| CVE-2026-20274 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering… | 9.8 Critical | Sep 2, 2026 |
| CVE-2026-20276 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering… | 8.6 High | Sep 2, 2026 |
| CVE-2026-20277 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering… | 8.2 High | Sep 2, 2026 |
| CVE-2026-20118 | A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR… | 6.8 Medium | Mar 11, 2026 |
| CVE-2026-20046 | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an… | 8.8 High | Mar 11, 2026 |
| CVE-2026-20040 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary… | 8.8 High | Mar 11, 2026 |
| CVE-2026-20074 | A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) multi-instance routing feature of Cisco IOS XR… | 7.4 High | Mar 11, 2026 |
| CVE-2025-20363 | A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure… | 9.0 Critical | Sep 25, 2025 |
| CVE-2025-20340 | A vulnerability in the Address Resolution Protocol (ARP) implementation of Cisco IOS XR Software could allow an… | 7.4 High | Sep 10, 2025 |
| CVE-2025-20248 | A vulnerability in the installation process of Cisco IOS XR Software could allow an authenticated, local attacker to… | 6.0 Medium | Sep 10, 2025 |
| CVE-2025-20159 | A vulnerability in the management interface access control list (ACL) processing feature in Cisco IOS XR Software… | 5.3 Medium | Sep 10, 2025 |
| CVE-2025-20154 | A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE… | 8.6 High | May 7, 2025 |
| CVE-2025-20209 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) function of Cisco IOS XR Software could allow an… | 7.5 High | Mar 12, 2025 |
| CVE-2025-20177 | A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass… | 6.7 Medium | Mar 12, 2025 |
| CVE-2025-20146 | A vulnerability in the Layer 3 multicast feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services… | 8.6 High | Mar 12, 2025 |
| CVE-2025-20145 | A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow… | 5.8 Medium | Mar 12, 2025 |
| CVE-2025-20144 | A vulnerability in the hybrid access control list (ACL) processing of IPv4 packets in Cisco IOS XR Software could… | 4.0 Medium | Mar 12, 2025 |
| CVE-2025-20143 | A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high… | 6.7 Medium | Mar 12, 2025 |
| CVE-2025-20142 | A vulnerability in the IPv4 access control list (ACL) feature and quality of service (QoS) policy feature of Cisco IOS… | 8.6 High | Mar 12, 2025 |
| CVE-2025-20141 | A vulnerability in the handling of specific packets that are punted from a line card to a route processor in Cisco IOS… | 7.4 High | Mar 12, 2025 |
Other Cisco products
Cisco Small Business RV Series Router Firmware 262
Cisco IOS XE Software 248
Cisco Identity Services Engine Software 199
Cisco Firepower Threat Defense Software 162
Cisco Adaptive Security Appliance (ASA) Software 161
Cisco Firepower Management Center 129
Cisco NX-OS Software 102
Cisco Secure Firewall Threat Defense (FTD) Software 81
Cisco Data Center Network Manager 74
Cisco Unified Communications Manager 62
Cisco SD-WAN vManage 61
Cisco SD-WAN Solution 55