Medium severity · published Mar 11, 2026
CVE-2026-20118
Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability
6.8
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series with NC57 line cards and Cisco NCS 5700 Routers and Cisco IOS XR Software for Third Party Software could allow an unauthenticated, remote attacker to cause the network processing unit (NPU) and ASIC to stop processing, preventing traffic from traversing the interface.
This vulnerability is due to the corruption of packets in specific cases when an EPNI Aligner interrupt is triggered while an affected device is experiencing heavy transit traffic. An attacker could exploit this vulnerability by sending a continuous flow of crafted packets to an interface of the affected device. A successful exploit could allow the attacker to cause persistent, heavy packet loss, resulting in a denial of service (DoS) condition.
Note: If active exploitation of this vulnerability is suspected, contact the Cisco Technical Assistance Center (TAC) or your contracted maintenance provider.
Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates. This change was made because the affected device operates within a critical network segment where compromise could lead to significant disruption or exposure, thereby elevating the overall risk beyond the base technical severity.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Cisco IOS XR Software · Cisco
7.9.1; 7.10.1; 7.9.2; 7.11.1; 7.10.2; 24.1.1; +17 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-20118
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-20118
sec.cloudapps.cisco.com
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xrncs-epni-int-dos-TWMffUsN
More from Cisco IOS XR Software
8.8
CVE-2020-3118
Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability
8.6
CVE-2020-3569
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities
8.6
CVE-2020-3566
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
6.5
CVE-2022-20821
Cisco IOS XR Software Health Check Open Port Vulnerability
9.8
CVE-2026-20279
Cisco IOS XR Software Security Hardening Release: September 2026
