Cisco IOS XR Software vulnerabilities

13 CVEs affecting Cisco IOS XR Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20279, published 2026-09-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-20655, published 2024-11-15. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to…
CVE-2024-20266, published 2024-03-13. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to trigger a crash of the dhcpd process, resulting in a denial…
CVE-2025-20340, published 2025-09-10. High severity, CVSS 7.4. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the Address Resolution Protocol (ARP) implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger a broadcast storm, leading to a denial of…
CVE-2024-20315, published 2024-03-13. Medium severity, CVSS 5.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured…
CVE-2026-20118, published 2026-03-11. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series with NC57 line cards and…
CVE-2024-20318, published 2024-03-13. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the line card network processor to reset, resulting in a denial of…
CVE-2025-20159, published 2025-09-10. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the management interface access control list (ACL) processing feature in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass configured ACLs for the…
CVE-2026-20279, published 2026-09-02. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review…
CVE-2026-20278, published 2026-09-02. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review…
CVE-2026-20277, published 2026-09-02. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review…

Latest

CVE-2026-20275, published 2026-09-02. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review…
CVE-2022-20845, published 2024-11-15. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the TL1 function of Cisco Network Convergence System (NCS) 4000 Series could allow an authenticated, local attacker to cause a memory leak in the TL1 process. This…