# Cisco IOS XR Software vulnerabilities Source: https://junglewise.ai/threats/technologies/ios-xr-software Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/ios-xr-software.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 9 vulnerabilities in Cisco IOS XR Software: 0 in the last 7 days and 6 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-20280, was published on 2 September 2026. Nothing was published in the last eight weeks. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 6 - All time: 9 (3 critical, 0 exploited in the wild) ## About Cisco IOS XR Software Cisco operating system for routing and network infrastructure. ## Latest Cisco IOS XR Software vulnerabilities - [CVE-2026-20280: Cisco IOS XR Software improper exception handling](https://junglewise.ai/threats/cve-2026-20280-cisco-ios-xr-software-improper-exception-handling) (high, CVSS 8.8, published 2 Sep 2026) - [CVE-2026-20279: Cisco IOS XR Software improper access control](https://junglewise.ai/threats/cve-2026-20279-cisco-ios-xr-software-improper-access-control) (critical, CVSS 9.8, published 2 Sep 2026) - [CVE-2026-20277: Cisco IOS XR Software protection mechanism failure](https://junglewise.ai/threats/cve-2026-20277-cisco-ios-xr-software-protection-mechanism-failure) (high, CVSS 8.2, published 2 Sep 2026) - [CVE-2026-20276: Cisco IOS XR Software control flow management vulnerability](https://junglewise.ai/threats/cve-2026-20276-cisco-ios-xr-software-control-flow-management-vulnerability) (high, CVSS 8.6, published 2 Sep 2026) - [CVE-2026-20275: Cisco IOS XR Software incorrect calculation vulnerability](https://junglewise.ai/threats/cve-2026-20275-cisco-ios-xr-software-incorrect-calculation-vulnerability) (high, CVSS 8.8, published 2 Sep 2026) - [CVE-2026-20274: Cisco IOS XR Software resource control vulnerabilities](https://junglewise.ai/threats/cve-2026-20274-cisco-ios-xr-software-resource-control-vulnerabilities) (critical, CVSS 9.8, published 2 Sep 2026) - [CVE-2026-20074: Cisco IOS XR Software DoS in IS-IS Multi-Instance Routing](https://junglewise.ai/threats/cve-2026-20074-cisco-ios-xr-software-dos-in-is-is-multi-instance-routing) (high, CVSS 7.4, published 11 Mar 2026) - [CVE-2026-20046: Cisco IOS XR Software privilege escalation in task group assignment](https://junglewise.ai/threats/cve-2026-20046-cisco-ios-xr-software-privilege-escalation-in-task-group) (high, CVSS 8.8, published 11 Mar 2026) - [CVE-2025-20363: Cisco multiple platforms code execution in web services](https://junglewise.ai/threats/cve-2025-20363-cisco-multiple-platforms-code-execution-in-web-services) (critical, CVSS 9, published 25 Sep 2025) ## Most severe Cisco IOS XR Software vulnerabilities - [CVE-2026-20274: Cisco IOS XR Software resource control vulnerabilities](https://junglewise.ai/threats/cve-2026-20274-cisco-ios-xr-software-resource-control-vulnerabilities) (critical, CVSS 9.8, published 2 Sep 2026) - [CVE-2026-20279: Cisco IOS XR Software improper access control](https://junglewise.ai/threats/cve-2026-20279-cisco-ios-xr-software-improper-access-control) (critical, CVSS 9.8, published 2 Sep 2026) - [CVE-2025-20363: Cisco multiple platforms code execution in web services](https://junglewise.ai/threats/cve-2025-20363-cisco-multiple-platforms-code-execution-in-web-services) (critical, CVSS 9, published 25 Sep 2025) - [CVE-2026-20280: Cisco IOS XR Software improper exception handling](https://junglewise.ai/threats/cve-2026-20280-cisco-ios-xr-software-improper-exception-handling) (high, CVSS 8.8, published 2 Sep 2026) - [CVE-2026-20275: Cisco IOS XR Software incorrect calculation vulnerability](https://junglewise.ai/threats/cve-2026-20275-cisco-ios-xr-software-incorrect-calculation-vulnerability) (high, CVSS 8.8, published 2 Sep 2026) - [CVE-2026-20046: Cisco IOS XR Software privilege escalation in task group assignment](https://junglewise.ai/threats/cve-2026-20046-cisco-ios-xr-software-privilege-escalation-in-task-group) (high, CVSS 8.8, published 11 Mar 2026) - [CVE-2026-20276: Cisco IOS XR Software control flow management vulnerability](https://junglewise.ai/threats/cve-2026-20276-cisco-ios-xr-software-control-flow-management-vulnerability) (high, CVSS 8.6, published 2 Sep 2026) - [CVE-2026-20277: Cisco IOS XR Software protection mechanism failure](https://junglewise.ai/threats/cve-2026-20277-cisco-ios-xr-software-protection-mechanism-failure) (high, CVSS 8.2, published 2 Sep 2026) - [CVE-2026-20074: Cisco IOS XR Software DoS in IS-IS Multi-Instance Routing](https://junglewise.ai/threats/cve-2026-20074-cisco-ios-xr-software-dos-in-is-is-multi-instance-routing) (high, CVSS 7.4, published 11 Mar 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 6 | 2 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Cisco technologies - [Cisco IOS](https://junglewise.ai/threats/technologies/ios): 70 vulnerabilities - [Cisco Identity Services Engine](https://junglewise.ai/threats/technologies/identity-services-engine): 58 vulnerabilities - [Cisco IOS XE](https://junglewise.ai/threats/technologies/ios-xe): 57 vulnerabilities - [Cisco Firepower Threat Defense](https://junglewise.ai/threats/technologies/firepower-threat-defense): 33 vulnerabilities - [Cisco Firepower Threat Defense Software](https://junglewise.ai/threats/technologies/firepower-threat-defense-software): 33 vulnerabilities - [Cisco IOS XR](https://junglewise.ai/threats/technologies/ios-xr): 31 vulnerabilities - [Cisco IOS XE Software](https://junglewise.ai/threats/technologies/ios-xe-software): 28 vulnerabilities - [Cisco Adaptive Security Appliance Software](https://junglewise.ai/threats/technologies/secure-firewall-asa-software): 23 vulnerabilities - [Cisco Snort 3](https://junglewise.ai/threats/technologies/snort-3): 20 vulnerabilities - [Cisco Ios Software](https://junglewise.ai/threats/technologies/ios-software): 19 vulnerabilities - [Cisco ISE Passive Identity Connector](https://junglewise.ai/threats/technologies/ise-passive-identity-connector): 19 vulnerabilities - [Cisco Secure Firewall Management Center](https://junglewise.ai/threats/technologies/secure-firewall-management-center): 16 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Cisco IOS XR Software vulnerabilities", https://junglewise.ai/threats/technologies/ios-xr-software, 11 November 2026.