Skip to content
OpenAdvisories
High WID-SEC-2026-0706 4 CVEs

Cisco IOS XR: Mehrere Schwachstellen

Published Mar 11, 2026 · Updated Mar 11, 2026 · de-DE

Vendor: Cisco Product: IOS XR

Summary

Ein Angreifer kann mehrere Schwachstellen in Cisco IOS XR ausnutzen, um seine Privilegien zu erhöhen, um beliebigen Code mit root-rechten auszuführen, und um einen Denial of Service Angriff durchzuführen.

Product

Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird.

Vulnerabilities 4

  • High 8.8
    CVE-2026-20040

    Cisco IOS XR Software CLI Privilege Escalation Vulnerability

    A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user argum…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 8.8
    CVE-2026-20046

    Cisco IOS XR Software CLI Privilege Escalation Vulnerability

    A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges and gain full administrative control of an affected device. This vulnerability is due to incorrect …

    Cisco Cisco IOS XR Software iOS Network devices
  • High 7.4
    CVE-2026-20074

    Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability

    A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due t…

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 6.8
    CVE-2026-20118

    Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability

    A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series with NC57 line cards and Cisco NCS 5700 Routers and Cisco IOS XR Software for Third …

    Cisco Cisco IOS XR Software iOS Network devices

Revision history

  1. #1

    Initiale Fassung

References