CI
Product
Cisco IOS XR Software
On CISA KEVExploited in the wild
47
CVEs
4
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 3High 28Medium 16Low 0
Watch
Add Cisco IOS XR Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3118 In wildKEV | 8.8 | Feb 5 | Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability Affected: before 6.6.3 |
| CVE-2020-3569 In wildKEV | 8.6 | Sep 23 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities Affected: All versions, or not specified |
| CVE-2020-3566 In wildKEV | 8.6 | Aug 29 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Affected: All versions, or not specified |
| CVE-2022-20821 In wildKEV | 6.5 | May 26 | Cisco IOS XR Software Health Check Open Port Vulnerability Affected: All versions, or not specified |
| CVE-2026-20279 | 9.8 | Sep 2 | Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more |
| CVE-2026-20274 | 9.8 | Sep 2 | Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more |
| CVE-2025-20363 | 9.0 | Sep 25 | A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software,… Affected: 6.5.1; 6.5.2; 6.5.3; 6.6.2; 6.6.3; 6.6.25; +7 more |
| CVE-2026-20278 | 8.8 | Sep 2 | Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more |
| CVE-2026-20280 | 8.8 | Sep 2 | Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more |
| CVE-2026-20275 | 8.8 | Sep 2 | Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more |
| CVE-2026-20046 | 8.8 | Mar 11 | Cisco IOS XR Software CLI Privilege Escalation Vulnerability Affected: 6.6.1; 6.5.3; 7.0.1; 6.5.1; 6.5.2; 6.6.2; +34 more |
| CVE-2026-20040 | 8.8 | Mar 11 | Cisco IOS XR Software CLI Privilege Escalation Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2025-20138 | 8.8 | Mar 12 | Cisco IOS XR Software CLI Privilege Escalation Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2022-20655 | 8.8 | Nov 15 | A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack Affected: All versions, or not specified |
| CVE-2024-20381 | 8.8 | Sep 11 | Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2026-20276 | 8.6 | Sep 2 | Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more |
| CVE-2025-20154 | 8.6 | May 7 | Cisco IOS, IOS XE and IOS XR Software TWAMP Denial of Service Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2025-20146 | 8.6 | Mar 12 | Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Routing Denial of Service Vulnerability Affected: 7.11.1; 7.9.21; 7.10.2; 24.1.1; 7.11.2; 24.2.1; +5 more |
| CVE-2025-20142 | 8.6 | Mar 12 | Cisco IOS XR Software for ASR 9000 Series Routers L2VPN Denial of Service Vulnerability Affected: 7.1.15; 7.1.2; 6.7.2; 7.1.25; 7.1.3; 6.7.3; +28 more |
| CVE-2025-20115 | 8.6 | Mar 12 | Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2026-20277 | 8.2 | Sep 2 | Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more |
| CVE-2024-20398 | 7.8 | Sep 11 | Cisco IOS XR Software Local Privilege Escalation Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2025-20172 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a DoS… Affected: 7.0.1; 7.0.2; 7.0.12; 7.0.14; 7.1.1; 7.1.15; +34 more |
| CVE-2026-76505 | 7.5 | Oct 21 | Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability Affected: 7.0.1; 7.1.1; 7.0.90; 6.7.1; 7.0.2; 7.1.15; +34 more |
| CVE-2025-20209 | 7.5 | Mar 12 | Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability Affected: 6.5.3; 6.6.1; 6.5.2; 6.6.2; 6.5.1; 7.0.1; +34 more |
| CVE-2024-20304 | 7.5 | Sep 11 | Cisco IOS XR Software Packet Memory Exhaustion Vulnerability Affected: 7.8.1; 7.8.12; 7.7.1; 7.7.2; 7.9.1; 7.10.1; +12 more |
| CVE-2026-20074 | 7.4 | Mar 11 | Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability Affected: 7.8.1; 7.9.1; 7.10.1; 7.8.2; 7.8.22; 7.9.2; +26 more |
| CVE-2025-20340 | 7.4 | Sep 10 | Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2025-20141 | 7.4 | Mar 12 | Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerabillity Affected: 7.9.2 |
| CVE-2024-20406 | 7.4 | Sep 11 | Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability Affected: 7.4.1; 6.8.1; 7.4.15; 7.5.1; 7.4.16; 7.6.1; +24 more |
| CVE-2024-20317 | 7.4 | Sep 11 | Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability Affected: 7.7.1; 7.8.1; 7.7.2; 7.9.1; 7.8.2; 7.8.22; +4 more |
| CVE-2024-20483 | 7.2 | Sep 11 | Cisco IOS XR PON Controller Command Injection Vulnerabilities Affected: 24.1.1; 24.2.1; 24.1.2; 24.2.11; 24.3.1 |
| CVE-2026-20118 | 6.8 | Mar 11 | Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability Affected: 7.9.1; 7.10.1; 7.9.2; 7.11.1; 7.10.2; 24.1.1; +17 more |
| CVE-2021-1440 | 6.8 | Nov 18 | Cisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service Vulnerability Affected: 6.6.1; 6.5.3; 7.0.1; 6.6.11; 6.5.1; 6.5.2; +15 more |
| CVE-2025-20177 | 6.7 | Mar 12 | Cisco IOS XR Software Image Verification Bypass Vulnerability Affected: 7.0.1; 7.0.0; 7.1.1; 7.0.90; 6.7.1; 7.0.2; +34 more |
| CVE-2025-20143 | 6.7 | Mar 12 | Cisco IOS XR Software Secure Boot Bypass Vulnerability Affected: 6.5.3; 6.5.2; 6.5.92; 6.5.1; 6.5.15; 6.6.2; +34 more |
| CVE-2024-20456 | 6.7 | Jul 10 | A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Secure Boot functionality and… Affected: 24.2.1 |
| CVE-2022-20849 | 6.1 | Nov 15 | Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability Affected: 6.5.3; 6.6.1; 6.5.15; 7.0.1; 6.6.25; 6.6.2; +27 more |
| CVE-2025-20248 | 6.0 | Sep 10 | Cisco IOS XR Software Image Verification Bypass Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2022-20845 | 6.0 | Nov 15 | Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability Affected: 6.5.29; 6.5.26; 6.5.25; 6.5.28; 6.5.31; 6.5.32 |
| CVE-2025-20145 | 5.8 | Mar 12 | Cisco IOS XR Software Access Control List Bypass Vulnerability Affected: 6.5.3; 6.5.2; 6.5.92; 6.5.1; 6.6.2; 7.0.1; +34 more |
| CVE-2025-20144 | 5.8 | Mar 12 | Cisco IOS XR Software Access Control List Bypass Vulnerability Affected: 6.5.3; 6.5.2; 6.5.92; 6.5.1; 6.6.2; 7.0.1; +34 more |
| CVE-2024-20489 | 5.5 | Sep 11 | Cisco Routed Passive Optical Network Cleartext Password Vulnerability Affected: 24.1.1; 24.2.1; 24.1.2; 24.2.11; 24.3.1 |
| CVE-2024-20343 | 5.5 | Sep 11 | Cisco IOS XR Software CLI Arbitrary File Read Vulnerability Affected: 6.5.3; 6.6.1; 6.5.2; 6.5.92; 6.5.1; 6.5.15; +34 more |
| CVE-2025-20159 | 5.3 | Sep 10 | Cisco IOS XR Software Management Interface ACL Bypass Vulnerability Affected: 6.6.1; 6.5.3; 7.0.1; 6.6.11; 6.5.1; 6.5.2; +34 more |
| CVE-2024-20390 | 5.3 | Sep 11 | Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2022-20846 | 4.3 | Nov 15 | Cisco IOS XR Software Cisco Discovery Protocol Buffer Overflow Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
Showing 47