Cisco IOS XR Software vulnerabilities | LiveThreat CVE Feed

Product

Cisco IOS XR Software

by Cisco · last CVE Oct 21, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 2High 9Medium 1Low 0

Severity

All severities12 Critical2 High9 Medium1 Low0

Exploitation

On CISA KEV4 Exploited in the wild4

Watch

Add Cisco IOS XR Software to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-3118 In wildKEV	8.8	12%	Feb 5	Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability Affected: before 6.6.3
CVE-2020-3569 In wildKEV	8.6	3%	Sep 23	Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities Affected: All versions, or not specified
CVE-2020-3566 In wildKEV	8.6	4%	Aug 29	Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Affected: All versions, or not specified
CVE-2022-20821 In wildKEV	6.5	11%	May 26	Cisco IOS XR Software Health Check Open Port Vulnerability Affected: All versions, or not specified
CVE-2026-20279	9.8	0%	Sep 2	Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more
CVE-2026-20274	9.8	1%	Sep 2	Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more
CVE-2026-20278	8.8	0%	Sep 2	Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more
CVE-2026-20280	8.8	0%	Sep 2	Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more
CVE-2026-20275	8.8	0%	Sep 2	Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more
CVE-2026-20276	8.6	0%	Sep 2	Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more
CVE-2026-20277	8.2	0%	Sep 2	Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more
CVE-2026-76505 New	7.5	0%	Oct 21	Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability Affected: 7.0.1; 7.1.1; 7.0.90; 6.7.1; 7.0.2; 7.1.15; +34 more