CVE-2026-76505
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
A vulnerability in IPv4 packet processing in Cisco IOS XR Software affects ASR 9000 and 9900 Series routers and ASR 9902/9903 Compact routers. Incorrect handling of crafted IPv4 packets processed as for-us traffic can cause network processor errors, line card reset or shutdown, and denial of service.
Risk Assessment
An unauthenticated remote attacker can cause traffic loss on the affected line card, and repeated resets may lead to persistent network processor shutdown requiring manual line card reload.
Recommendation
Apply available Cisco IOS XR software updates for affected platforms or implement mitigations such as filtering crafted IPv4 traffic destined to the device.
Other vulnerabilities in Cisco IOS XR Software
See all- CVE-2017-6731High
A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the MSDP session to be unexpectedly reset, leading to a short denial of service (DoS) condition. The MSDP session will restart within a few seconds.
- CVE-2017-6728High
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary code at the root privilege level on an affected system, due to Incorrect Permissions.
- CVE-2016-9205High
A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon (emsd) to crash, resulting in a denial of service (DoS) condition.
- CVE-2020-3569HighActively exploited
Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to immediately crash the IGMP process or cause memory exhaustion and eventual crash. This is due to incorrect handling of IGMP packets.
- CVE-2020-3566HighActively exploited
A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. This is due to insufficient queue management for IGMP packets.
- CVE-2026-20280High
A vulnerability in Cisco IOS XR Software was discovered during an internal security review. It relates to improper checking or handling of exceptional conditions, classified as CWE-703.
- CVE-2026-20278High
A vulnerability in Cisco IOS XR Software was discovered during an internal security review. It relates to improper neutralization issues, classified as CWE-707.
- CVE-2026-20277High
A vulnerability in Cisco IOS XR Software was discovered during an internal security review. It relates to protection mechanism failure issues, classified as CWE-693.
- CVE-2026-20276High
A vulnerability in Cisco IOS XR Software was discovered during an internal security review. It relates to insufficient control flow management issues, classified as CWE-691.
- CVE-2026-20275High
A vulnerability in Cisco IOS XR Software was discovered during an internal security review. It relates to incorrect calculation issues, classified as CWE-682.
Original NVD description (English source)
A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network processor (NP) errors, resulting in a line card reset or shutdown and a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of crafted IPv4 packets that are received on an affected line card interface and processed as for-us traffic. The issue can result in an NP reset, causing traffic loss on the affected line card while it recovers. Under repeated reset conditions, the network processor may enter a persistent shutdown state, in which case an explicit line card reload may be required to restore traffic. The vulnerability is within the IPv4 packet-processing path. Transit IPv4 traffic does not trigger this issue and IPv6 traffic cannot trigger it.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS