Cisco IOS XR Software vulnerabilities | LiveThreat CVE Feed

Product

Cisco IOS XR Software

by Cisco · last CVE Oct 21, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities16 In the news0 Timeline

Severity mix

Critical 2High 12Medium 2Low 0

Severity

All severities16 Critical2 High12 Medium2 Low0

Exploitation

On CISA KEV4 Exploited in the wild4

Watch

Add Cisco IOS XR Software to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-3118 In wildKEV	8.8	12%	Feb 5	Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability Affected: before 6.6.3
CVE-2020-3569 In wildKEV	8.6	3%	Sep 23	Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities Affected: All versions, or not specified
CVE-2020-3566 In wildKEV	8.6	4%	Aug 29	Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability Affected: All versions, or not specified
CVE-2026-20278	8.8	0%	Sep 2	Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more
CVE-2026-20280	8.8	0%	Sep 2	Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more
CVE-2026-20275	8.8	0%	Sep 2	Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more
CVE-2026-20046	8.8	0%	Mar 11	Cisco IOS XR Software CLI Privilege Escalation Vulnerability Affected: 6.6.1; 6.5.3; 7.0.1; 6.5.1; 6.5.2; 6.6.2; +34 more
CVE-2026-20040	8.8	0%	Mar 11	Cisco IOS XR Software CLI Privilege Escalation Vulnerability Affected: 6.5.3; 6.5.29; 6.5.1; 6.6.1; 6.5.2; 6.5.92; +34 more
CVE-2026-20276	8.6	0%	Sep 2	Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more
CVE-2026-20277	8.2	0%	Sep 2	Cisco IOS XR Software Security Hardening Release: September 2026 Affected: 6.5.29; 7.0.1; 6.5.26; 6.5.25; 6.5.28; 6.5.90; +34 more
CVE-2026-76505 New	7.5	0%	Oct 21	Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability Affected: 7.0.1; 7.1.1; 7.0.90; 6.7.1; 7.0.2; 7.1.15; +34 more
CVE-2026-20074	7.4	0%	Mar 11	Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability Affected: 7.8.1; 7.9.1; 7.10.1; 7.8.2; 7.8.22; 7.9.2; +26 more