CI
Product
Cisco IOS XR Software
On CISA KEVExploited in the wild
47
CVEs
4
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 3High 28Medium 16Low 0
Watch
Add Cisco IOS XR Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3118 In wildKEV | 8.8 | Feb 5 | Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability Affected: before 6.6.3 |
| CVE-2020-3569 In wildKEV | 8.6 | Sep 23 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities Affected: All versions, or not specified |
| CVE-2020-3566 In wildKEV | 8.6 | Aug 29 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Affected: All versions, or not specified |
| CVE-2026-20278 | 8.8 | Sep 2 | Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more |
| CVE-2026-20280 | 8.8 | Sep 2 | Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more |
| CVE-2026-20275 | 8.8 | Sep 2 | Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more |
| CVE-2026-20046 | 8.8 | Mar 11 | Cisco IOS XR Software CLI Privilege Escalation Vulnerability Affected: 6.6.1; 6.5.3; 7.0.1; 6.5.1; 6.5.2; 6.6.2; +34 more |
| CVE-2026-20040 | 8.8 | Mar 11 | Cisco IOS XR Software CLI Privilege Escalation Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2025-20138 | 8.8 | Mar 12 | Cisco IOS XR Software CLI Privilege Escalation Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2022-20655 | 8.8 | Nov 15 | A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack Affected: All versions, or not specified |
| CVE-2024-20381 | 8.8 | Sep 11 | Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2026-20276 | 8.6 | Sep 2 | Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more |
| CVE-2025-20154 | 8.6 | May 7 | Cisco IOS, IOS XE and IOS XR Software TWAMP Denial of Service Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2025-20146 | 8.6 | Mar 12 | Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Routing Denial of Service Vulnerability Affected: 7.11.1; 7.9.21; 7.10.2; 24.1.1; 7.11.2; 24.2.1; +5 more |
| CVE-2025-20142 | 8.6 | Mar 12 | Cisco IOS XR Software for ASR 9000 Series Routers L2VPN Denial of Service Vulnerability Affected: 7.1.15; 7.1.2; 6.7.2; 7.1.25; 7.1.3; 6.7.3; +28 more |
| CVE-2025-20115 | 8.6 | Mar 12 | Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2026-20277 | 8.2 | Sep 2 | Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more |
| CVE-2024-20398 | 7.8 | Sep 11 | Cisco IOS XR Software Local Privilege Escalation Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2025-20172 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a DoS… Affected: 7.0.1; 7.0.2; 7.0.12; 7.0.14; 7.1.1; 7.1.15; +34 more |
| CVE-2026-76505 | 7.5 | Oct 21 | Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability Affected: 7.0.1; 7.1.1; 7.0.90; 6.7.1; 7.0.2; 7.1.15; +34 more |
| CVE-2025-20209 | 7.5 | Mar 12 | Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability Affected: 6.5.3; 6.6.1; 6.5.2; 6.6.2; 6.5.1; 7.0.1; +34 more |
| CVE-2024-20304 | 7.5 | Sep 11 | Cisco IOS XR Software Packet Memory Exhaustion Vulnerability Affected: 7.8.1; 7.8.12; 7.7.1; 7.7.2; 7.9.1; 7.10.1; +12 more |
| CVE-2026-20074 | 7.4 | Mar 11 | Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability Affected: 7.8.1; 7.9.1; 7.10.1; 7.8.2; 7.8.22; 7.9.2; +26 more |
| CVE-2025-20340 | 7.4 | Sep 10 | Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more |
| CVE-2025-20141 | 7.4 | Mar 12 | Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerabillity Affected: 7.9.2 |
| CVE-2024-20406 | 7.4 | Sep 11 | Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability Affected: 7.4.1; 6.8.1; 7.4.15; 7.5.1; 7.4.16; 7.6.1; +24 more |
| CVE-2024-20317 | 7.4 | Sep 11 | Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability Affected: 7.7.1; 7.8.1; 7.7.2; 7.9.1; 7.8.2; 7.8.22; +4 more |
| CVE-2024-20483 | 7.2 | Sep 11 | Cisco IOS XR PON Controller Command Injection Vulnerabilities Affected: 24.1.1; 24.2.1; 24.1.2; 24.2.11; 24.3.1 |
Showing 28