Skip to content
Sign in

Cisco product

IOS XR Software

Alert
No IOS XR Software CVE is in the CISA KEV catalogue.

Tracked since 12 Mar · latest article 3 Sep · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 0 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date

No IOS XR Software CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds IOS XR Software CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a IOS XR Software CVE to KEV.

Fix listed

0 of 6 CVEs in coverage

6 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-20274: 44.6th percentileCVE-2026-20279: 42th percentileCVE-2026-20118: 26.1th percentileCVE-2026-20040: 7.3th percentileCVE-2026-20074: 5.9th percentileCVE-2026-20046: 3.3th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-2027444.6
CVE-2026-2027942
CVE-2026-2011826.1
CVE-2026-200407.3
CVE-2026-200745.9
CVE-2026-200463.3

Coverage2 articles · all time

The latest 2 articles naming IOS XR Software, in the shared story grammar.

Full timeline
Quiet for 8 weekslast report 3 Sep2 articles2 outlets

2 articles from 2 outlets since 12 Mar. Quiet since 3 Sep.

Now12 Mar13151 Sep345626 OctFirst reportSecurityWeek · 12 Mar, 10:38Picked up againafter 25 weeks quiet
  • Thu 12 Mar, 10:38 UTC. SecurityWeek, first report. Cisco Patches High-Severity IOS XR Vulnerabilities.
  • Thu 3 Sep, 10:35 UTC. SecurityOnline, its first report on the story. Cisco Fixes Critical Cisco IOS XR Vulnerabilities.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 2 articles as a list
  1. Thu 12 MarDay 01
    1. Cisco Patches High-Severity IOS XR Vulnerabilities10:38 · SecurityWeek · First report

  2. Quiet for 25 weeks

    Thu 3 SepDay 1751
    1. Cisco Fixes Critical Cisco IOS XR Vulnerabilities10:35 · SecurityOnline · Picked up again

All CVEs in coverage6

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-20274

    Cisco IOS XR Software Security Hardening Release: September 2026

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-20279

    Cisco IOS XR Software Security Hardening Release: September 2026

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-20118

    Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability

    Not scored0.3% EPSS · 1 article
  • CVE-2026-20040

    Cisco IOS XR Software CLI Privilege Escalation Vulnerability

    Not scored0.2% EPSS · 1 article
  • CVE-2026-20074

    Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability

    Not scored0.2% EPSS · 1 article
  • CVE-2026-20046

    Cisco IOS XR Software CLI Privilege Escalation Vulnerability

    Not scored0.1% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in