Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Cisco IOS XR Software — Vulnerabilities & Security Advisories 106

All 106 CVE vulnerabilities found in Cisco IOS XR Software, with AI-generated Chinese analysis, references, and POCs.

This page documents vulnerabilities associated with Cisco IOS XR Software, a core operating system for Cisco’s high-end network routers. It focuses on Common Weakness Enumeration (CWE) classifications to provide a structured view of security flaws affecting this platform. The content aggregates historical security data, covering advisory releases from the product’s initial deployment through recent updates, ensuring a comprehensive view of its security posture over time. Here, you can track vendor-specific advisories issued by Cisco to understand how threats were identified and mitigated in official channels. Additionally, the page allows you to understand broader weakness classes by mapping specific flaws to standard CWE identifiers, facilitating better risk assessment and remediation planning. You may also look up the product’s vulnerability history to analyze trends in defect discovery and patch deployment. This resource serves as a centralized reference for security professionals, developers, and system administrators who need to assess the impact of known issues on their networks. By organizing information around vulnerability types rather than individual CVEs, it helps users grasp the underlying architectural or logical weaknesses present in the software. The aggregation emphasizes clarity and accessibility, enabling rapid identification of relevant security contexts without sifting through unrelated data. All entries are sourced from official vendor disclosures and verified security databases to ensure accuracy. This approach supports informed decision-making regarding software updates, configuration changes, and network segmentation strategies. Whether conducting an audit or planning a migration, this summary provides essential insights into the security landscape of Cisco IOS XR Software.

Vendor: n/a

CVE IDTitleCVSSSeverityPublished
CVE-2026-20118 Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability CWE-460 6.8 Medium2026-03-11
CVE-2026-20046 Cisco IOS XR Software CLI Privilege Escalation Vulnerability CWE-264 8.8 High2026-03-11
CVE-2026-20074 Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability CWE-1287 7.4 High2026-03-11
CVE-2026-20040 Cisco IOS XR Software CLI Privilege Escalation Vulnerability CWE-78 8.8 High2026-03-11
CVE-2025-20340 Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability CWE-400 7.4 High2025-09-10
CVE-2025-20159 Cisco IOS XR Software Management Interface ACL Bypass Vulnerability CWE-284 5.3 Medium2025-09-10
CVE-2025-20248 Cisco IOS XR Software Image Verification Bypass Vulnerability CWE-347 6.0 Medium2025-09-10
CVE-2025-20154 Cisco IOS, IOS XE and IOS XR Software TWAMP Denial of Service Vulnerability CWE-20 8.6 High2025-05-07
CVE-2025-20209 Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability CWE-770 7.5 High2025-03-12
CVE-2025-20177 Cisco IOS XR Software Image Verification Bypass Vulnerability CWE-274 6.7 Medium2025-03-12
CVE-2025-20146 Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Routing Denial of Service Vulnerability CWE-20 8.6 High2025-03-12
CVE-2025-20145 Cisco IOS XR Software Access Control List Bypass Vulnerability CWE-264 5.8 Medium2025-03-12
CVE-2025-20144 Cisco IOS XR Software Access Control List Bypass Vulnerability CWE-284 4.0 Medium2025-03-12
CVE-2025-20143 Cisco IOS XR Software Secure Boot Bypass Vulnerability CWE-347 6.7 Medium2025-03-12
CVE-2025-20142 Cisco IOS XR Software for ASR 9000 Series Routers L2VPN Denial of Service Vulnerability CWE-20 8.6 High2025-03-12
CVE-2025-20141 Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerabillity CWE-770 7.4 High2025-03-12
CVE-2025-20138 Cisco IOS XR Software CLI Privilege Escalation Vulnerability CWE-78 8.8 High2025-03-12
CVE-2025-20115 Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability CWE-120 8.6 High2025-03-12
CVE-2021-1440 Cisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service Vulnerability CWE-617 6.8 Medium2024-11-18
CVE-2022-20655 Cisco 多款产品操作系统命令注入漏洞 CWE-78 8.8 High2024-11-15
CVE-2022-20846 Cisco IOS XR Software Cisco Discovery Protocol Buffer Overflow Vulnerability CWE-120 4.3 Medium2024-11-15
CVE-2022-20845 Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability CWE-789 6.0 Medium2024-11-15
CVE-2022-20849 Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability CWE-391 6.1 Medium2024-11-15
CVE-2024-20304 Cisco IOS XR Software Packet Memory Exhaustion Vulnerability CWE-401 8.6 High2024-09-11
CVE-2024-20489 Cisco Routed Passive Optical Network Cleartext Password Vulnerability CWE-256 8.4 High2024-09-11
CVE-2024-20483 Cisco IOS XR PON Controller Command Injection Vulnerabilities CWE-78 7.2 High2024-09-11
CVE-2024-20406 Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability CWE-20 7.4 High2024-09-11
CVE-2024-20381 Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability CWE-285 8.8 High2024-09-11
CVE-2024-20317 Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability CWE-684 7.4 High2024-09-11
CVE-2024-20398 Cisco IOS XR Software Local Privilege Escalation Vulnerability CWE-78 8.8 High2024-09-11

All 106 known CVE vulnerabilities affecting Cisco IOS XR Software with full Chinese analysis, references, and POCs where available.