{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20276", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.403Z", "datePublished": "2026-09-02T16:13:28.545Z", "dateUpdated": "2026-09-16T03:56:11.884Z"}, "containers": {"cna": {"title": "Cisco IOS XR Software Security Hardening Release: September 2026", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "baseScore": 8.6, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}}], "descriptions": [{"lang": "en", "value": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20276 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-691."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM", "name": "cisco-sa-hardening-iosxr-qg64NcM"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-hardening-iosxr-qg64NcM", "discovery": "INTERNAL", "defects": ["CSCwu14807"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Insufficient Control Flow Management", "type": "cwe", "cweId": "CWE-691"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco IOS XR Software", "versions": [{"version": "6.5.29", "status": "affected"}, {"version": "7.0.1", "status": "affected"}, {"version": "6.5.26", "status": "affected"}, {"version": "6.5.25", "status": "affected"}, {"version": "6.5.28", "status": "affected"}, {"version": "6.5.90", "status": "affected"}, {"version": "7.1.1", "status": "affected"}, {"version": "7.0.90", "status": "affected"}, {"version": "6.7.1", "status": "affected"}, {"version": "7.0.2", "status": "affected"}, {"version": "7.1.15", "status": "affected"}, {"version": "7.2.1", "status": "affected"}, {"version": "7.1.2", "status": "affected"}, {"version": "6.7.2", "status": "affected"}, {"version": "7.0.11", "status": "affected"}, {"version": "7.0.12", "status": "affected"}, {"version": "7.0.14", "status": "affected"}, {"version": "7.1.25", "status": "affected"}, {"version": "7.2.12", "status": "affected"}, {"version": "7.3.1", "status": "affected"}, {"version": "7.1.3", "status": "affected"}, {"version": "6.7.3", "status": "affected"}, {"version": "7.4.1", "status": "affected"}, {"version": "7.2.2", "status": "affected"}, {"version": "6.7.4", "status": "affected"}, {"version": "6.5.31", "status": "affected"}, {"version": "7.3.15", "status": "affected"}, {"version": "7.3.16", "status": "affected"}, {"version": "6.8.1", "status": "affected"}, {"version": "7.4.15", "status": "affected"}, {"version": "6.5.32", "status": "affected"}, {"version": "7.3.2", "status": "affected"}, {"version": "7.5.1", "status": "affected"}, {"version": "7.4.16", "status": "affected"}, {"version": "7.3.27", "status": "affected"}, {"version": "7.6.1", "status": "affected"}, {"version": "7.5.2", "status": "affected"}, {"version": "7.8.1", "status": "affected"}, {"version": "7.6.15", "status": "affected"}, {"version": "7.5.12", "status": "affected"}, {"version": "7.8.12", "status": "affected"}, {"version": "7.3.3", "status": "affected"}, {"version": "7.7.1", "status": "affected"}, {"version": "6.8.2", "status": "affected"}, {"version": "7.3.4", "status": "affected"}, {"version": "7.4.2", "status": "affected"}, {"version": "6.7.35", "status": "affected"}, {"version": "6.9.1", "status": "affected"}, {"version": "7.6.2", "status": "affected"}, {"version": "7.5.3", "status": "affected"}, {"version": "7.7.2", "status": "affected"}, {"version": "6.9.2", "status": "affected"}, {"version": "7.9.1", "status": "affected"}, {"version": "7.10.1", "status": "affected"}, {"version": "7.8.2", "status": "affected"}, {"version": "7.5.4", "status": "affected"}, {"version": "6.5.33", "status": "affected"}, {"version": "7.8.22", "status": "affected"}, {"version": "7.7.21", "status": "affected"}, {"version": "7.9.2", "status": "affected"}, {"version": "7.3.5", "status": "affected"}, {"version": "7.5.5", "status": "affected"}, {"version": "7.11.1", "status": "affected"}, {"version": "7.9.21", "status": "affected"}, {"version": "7.10.2", "status": "affected"}, {"version": "24.1.1", "status": "affected"}, {"version": "7.6.3", "status": "affected"}, {"version": "7.3.6", "status": "affected"}, {"version": "7.5.52", "status": "affected"}, {"version": "7.11.2", "status": "affected"}, {"version": "24.2.1", "status": "affected"}, {"version": "24.1.2", "status": "affected"}, {"version": "24.2.11", "status": "affected"}, {"version": "24.3.1", "status": "affected"}, {"version": "24.4.1", "status": "affected"}, {"version": "24.2.2", "status": "affected"}, {"version": "7.8.23", "status": "affected"}, {"version": "7.11.21", "status": "affected"}, {"version": "24.2.20", "status": "affected"}, {"version": "24.3.2", "status": "affected"}, {"version": "24.4.10", "status": "affected"}, {"version": "6.5.35", "status": "affected"}, {"version": "25.1.1", "status": "affected"}, {"version": "24.4.2", "status": "affected"}, {"version": "24.3.20", "status": "affected"}, {"version": "24.4.15", "status": "affected"}, {"version": "25.2.1", "status": "affected"}, {"version": "6.5.351", "status": "affected"}, {"version": "25.1.2", "status": "affected"}, {"version": "24.3.30", "status": "affected"}, {"version": "25.3.1", "status": "affected"}, {"version": "6.5.352", "status": "affected"}, {"version": "24.4.30", "status": "affected"}, {"version": "24.2.21", "status": "affected"}, {"version": "25.4.1", "status": "affected"}, {"version": "25.2.2", "status": "affected"}, {"version": "25.2.15", "status": "affected"}, {"version": "7.2.0", "status": "affected"}, {"version": "7.0.0", "status": "affected"}, {"version": "25.2.30", "status": "affected"}, {"version": "6.5.353", "status": "affected"}, {"version": "26.1.1", "status": "affected"}, {"version": "25.1.30", "status": "affected"}, {"version": "25.3.15", "status": "affected"}, {"version": "26.2.100", "status": "affected"}, {"version": "25.4.2", "status": "affected"}, {"version": "26.2.1", "status": "affected"}, {"version": "25.4.30", "status": "affected"}, {"version": "26.1.2", "status": "affected"}, {"version": "25.4.201", "status": "affected"}, {"version": "26.2.101", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-09-16T03:56:11.884Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20276", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-02T16:45:14.731008Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-02T17:58:59.117Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-09-15T17:03:58.514Z"}, "descriptions": [{"lang": "en", "value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."}], "tags": ["x_bundling-flagged-by-CVE-Program"], "references": [{"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"tags": ["x_bundling-flagged-by-CVE-Program"], "references": [{"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"}], "descriptions": [{"lang": "en", "value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-09-15T17:03:58.514Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20276", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-02T16:45:14.731008Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-02T17:56:51.080Z"}}], "cna": {"title": "Cisco IOS XR Software Security Hardening Release: September 2026", "source": {"defects": ["CSCwu14807"], "advisory": "cisco-sa-hardening-iosxr-qg64NcM", "discovery": "INTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Cisco", "product": "Cisco IOS XR Software", "versions": [{"status": "affected", "version": "6.5.29"}, {"status": "affected", "version": "7.0.1"}, {"status": "affected", "version": "6.5.26"}, {"status": "affected", "version": "6.5.25"}, {"status": "affected", "version": "6.5.28"}, {"status": "affected", "version": "6.5.90"}, {"status": "affected", "version": "7.1.1"}, {"status": "affected", "version": "7.0.90"}, {"status": "affected", "version": "6.7.1"}, {"status": "affected", "version": "7.0.2"}, {"status": "affected", "version": "7.1.15"}, {"status": "affected", "version": "7.2.1"}, {"status": "affected", "version": "7.1.2"}, {"status": "affected", "version": "6.7.2"}, {"status": "affected", "version": "7.0.11"}, {"status": "affected", "version": "7.0.12"}, {"status": "affected", "version": "7.0.14"}, {"status": "affected", "version": "7.1.25"}, {"status": "affected", "version": "7.2.12"}, {"status": "affected", "version": "7.3.1"}, {"status": "affected", "version": "7.1.3"}, {"status": "affected", "version": "6.7.3"}, {"status": "affected", "version": "7.4.1"}, {"status": "affected", "version": "7.2.2"}, {"status": "affected", "version": "6.7.4"}, {"status": "affected", "version": "6.5.31"}, {"status": "affected", "version": "7.3.15"}, {"status": "affected", "version": "7.3.16"}, {"status": "affected", "version": "6.8.1"}, {"status": "affected", "version": "7.4.15"}, {"status": "affected", "version": "6.5.32"}, {"status": "affected", "version": "7.3.2"}, {"status": "affected", "version": "7.5.1"}, {"status": "affected", "version": "7.4.16"}, {"status": "affected", "version": "7.3.27"}, {"status": "affected", "version": "7.6.1"}, {"status": "affected", "version": "7.5.2"}, {"status": "affected", "version": "7.8.1"}, {"status": "affected", "version": "7.6.15"}, {"status": "affected", "version": "7.5.12"}, {"status": "affected", "version": "7.8.12"}, {"status": "affected", "version": "7.3.3"}, {"status": "affected", "version": "7.7.1"}, {"status": "affected", "version": "6.8.2"}, {"status": "affected", "version": "7.3.4"}, {"status": "affected", "version": "7.4.2"}, {"status": "affected", "version": "6.7.35"}, {"status": "affected", "version": "6.9.1"}, {"status": "affected", "version": "7.6.2"}, {"status": "affected", "version": "7.5.3"}, {"status": "affected", "version": "7.7.2"}, {"status": "affected", "version": "6.9.2"}, {"status": "affected", "version": "7.9.1"}, {"status": "affected", "version": "7.10.1"}, {"status": "affected", "version": "7.8.2"}, {"status": "affected", "version": "7.5.4"}, {"status": "affected", "version": "6.5.33"}, {"status": "affected", "version": "7.8.22"}, {"status": "affected", "version": "7.7.21"}, {"status": "affected", "version": "7.9.2"}, {"status": "affected", "version": "7.3.5"}, {"status": "affected", "version": "7.5.5"}, {"status": "affected", "version": "7.11.1"}, {"status": "affected", "version": "7.9.21"}, {"status": "affected", "version": "7.10.2"}, {"status": "affected", "version": "24.1.1"}, {"status": "affected", "version": "7.6.3"}, {"status": "affected", "version": "7.3.6"}, {"status": "affected", "version": "7.5.52"}, {"status": "affected", "version": "7.11.2"}, {"status": "affected", "version": "24.2.1"}, {"status": "affected", "version": "24.1.2"}, {"status": "affected", "version": "24.2.11"}, {"status": "affected", "version": "24.3.1"}, {"status": "affected", "version": "24.4.1"}, {"status": "affected", "version": "24.2.2"}, {"status": "affected", "version": "7.8.23"}, {"status": "affected", "version": "7.11.21"}, {"status": "affected", "version": "24.2.20"}, {"status": "affected", "version": "24.3.2"}, {"status": "affected", "version": "24.4.10"}, {"status": "affected", "version": "6.5.35"}, {"status": "affected", "version": "25.1.1"}, {"status": "affected", "version": "24.4.2"}, {"status": "affected", "version": "24.3.20"}, {"status": "affected", "version": "24.4.15"}, {"status": "affected", "version": "25.2.1"}, {"status": "affected", "version": "6.5.351"}, {"status": "affected", "version": "25.1.2"}, {"status": "affected", "version": "24.3.30"}, {"status": "affected", "version": "25.3.1"}, {"status": "affected", "version": "6.5.352"}, {"status": "affected", "version": "24.4.30"}, {"status": "affected", "version": "24.2.21"}, {"status": "affected", "version": "25.4.1"}, {"status": "affected", "version": "25.2.2"}, {"status": "affected", "version": "25.2.15"}, {"status": "affected", "version": "7.2.0"}, {"status": "affected", "version": "7.0.0"}, {"status": "affected", "version": "25.2.30"}, {"status": "affected", "version": "6.5.353"}, {"status": "affected", "version": "26.1.1"}, {"status": "affected", "version": "25.1.30"}, {"status": "affected", "version": "25.3.15"}, {"status": "affected", "version": "26.2.100"}, {"status": "affected", "version": "25.4.2"}, {"status": "affected", "version": "26.2.1"}, {"status": "affected", "version": "25.4.30"}, {"status": "affected", "version": "26.1.2"}, {"status": "affected", "version": "25.4.201"}, {"status": "affected", "version": "26.2.101"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM", "name": "cisco-sa-hardening-iosxr-qg64NcM"}], "descriptions": [{"lang": "en", "value": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20276 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-691."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-691", "description": "Insufficient Control Flow Management"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-09-16T03:56:11.884Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20276", "state": "PUBLISHED", "dateUpdated": "2026-09-16T03:56:11.884Z", "dateReserved": "2025-10-08T11:59:15.403Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2026-09-02T16:13:28.545Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Cisco IOS XR Software", "vendor": "Cisco", "versions": [{"status": "affected", "version": "6.5.29"}, {"status": "affected", "version": "7.0.1"}, {"status": "affected", "version": "6.5.26"}, {"status": "affected", "version": "6.5.25"}, {"status": "affected", "version": "6.5.28"}, {"status": "affected", "version": "6.5.90"}, {"status": "affected", "version": "7.1.1"}, {"status": "affected", "version": "7.0.90"}, {"status": "affected", "version": "6.7.1"}, {"status": "affected", "version": "7.0.2"}, {"status": "affected", "version": "7.1.15"}, {"status": "affected", "version": "7.2.1"}, {"status": "affected", "version": "7.1.2"}, {"status": "affected", "version": "6.7.2"}, {"status": "affected", "version": "7.0.11"}, {"status": "affected", "version": "7.0.12"}, {"status": "affected", "version": "7.0.14"}, {"status": "affected", "version": "7.1.25"}, {"status": "affected", "version": "7.2.12"}, {"status": "affected", "version": "7.3.1"}, {"status": "affected", "version": "7.1.3"}, {"status": "affected", "version": "6.7.3"}, {"status": "affected", "version": "7.4.1"}, {"status": "affected", "version": "7.2.2"}, {"status": "affected", "version": "6.7.4"}, {"status": "affected", "version": "6.5.31"}, {"status": "affected", "version": "7.3.15"}, {"status": "affected", "version": "7.3.16"}, {"status": "affected", "version": "6.8.1"}, {"status": "affected", "version": "7.4.15"}, {"status": "affected", "version": "6.5.32"}, {"status": "affected", "version": "7.3.2"}, {"status": "affected", "version": "7.5.1"}, {"status": "affected", "version": "7.4.16"}, {"status": "affected", "version": "7.3.27"}, {"status": "affected", "version": "7.6.1"}, {"status": "affected", "version": "7.5.2"}, {"status": "affected", "version": "7.8.1"}, {"status": "affected", "version": "7.6.15"}, {"status": "affected", "version": "7.5.12"}, {"status": "affected", "version": "7.8.12"}, {"status": "affected", "version": "7.3.3"}, {"status": "affected", "version": "7.7.1"}, {"status": "affected", "version": "6.8.2"}, {"status": "affected", "version": "7.3.4"}, {"status": "affected", "version": "7.4.2"}, {"status": "affected", "version": "6.7.35"}, {"status": "affected", "version": "6.9.1"}, {"status": "affected", "version": "7.6.2"}, {"status": "affected", "version": "7.5.3"}, {"status": "affected", "version": "7.7.2"}, {"status": "affected", "version": "6.9.2"}, {"status": "affected", "version": "7.9.1"}, {"status": "affected", "version": "7.10.1"}, {"status": "affected", "version": "7.8.2"}, {"status": "affected", "version": "7.5.4"}, {"status": "affected", "version": "6.5.33"}, {"status": "affected", "version": "7.8.22"}, {"status": "affected", "version": "7.7.21"}, {"status": "affected", "version": "7.9.2"}, {"status": "affected", "version": "7.3.5"}, {"status": "affected", "version": "7.5.5"}, {"status": "affected", "version": "7.11.1"}, {"status": "affected", "version": "7.9.21"}, {"status": "affected", "version": "7.10.2"}, {"status": "affected", "version": "24.1.1"}, {"status": "affected", "version": "7.6.3"}, {"status": "affected", "version": "7.3.6"}, {"status": "affected", "version": "7.5.52"}, {"status": "affected", "version": "7.11.2"}, {"status": "affected", "version": "24.2.1"}, {"status": "affected", "version": "24.1.2"}, {"status": "affected", "version": "24.2.11"}, {"status": "affected", "version": "24.3.1"}, {"status": "affected", "version": "24.4.1"}, {"status": "affected", "version": "24.2.2"}, {"status": "affected", "version": "7.8.23"}, {"status": "affected", "version": "7.11.21"}, {"status": "affected", "version": "24.2.20"}, {"status": "affected", "version": "24.3.2"}, {"status": "affected", "version": "24.4.10"}, {"status": "affected", "version": "6.5.35"}, {"status": "affected", "version": "25.1.1"}, {"status": "affected", "version": "24.4.2"}, {"status": "affected", "version": "24.3.20"}, {"status": "affected", "version": "24.4.15"}, {"status": "affected", "version": "25.2.1"}, {"status": "affected", "version": "6.5.351"}, {"status": "affected", "version": "25.1.2"}, {"status": "affected", "version": "24.3.30"}, {"status": "affected", "version": "25.3.1"}, {"status": "affected", "version": "6.5.352"}, {"status": "affected", "version": "24.4.30"}, {"status": "affected", "version": "24.2.21"}, {"status": "affected", "version": "25.4.1"}, {"status": "affected", "version": "25.2.2"}, {"status": "affected", "version": "25.2.15"}, {"status": "affected", "version": "7.2.0"}, {"status": "affected", "version": "7.0.0"}, {"status": "affected", "version": "25.2.30"}, {"status": "affected", "version": "6.5.353"}, {"status": "affected", "version": "26.1.1"}, {"status": "affected", "version": "25.1.30"}, {"status": "affected", "version": "25.3.15"}, {"status": "affected", "version": "26.2.100"}, {"status": "affected", "version": "25.4.2"}, {"status": "affected", "version": "26.2.1"}, {"status": "affected", "version": "25.4.30"}, {"status": "affected", "version": "26.1.2"}, {"status": "affected", "version": "25.4.201"}, {"status": "affected", "version": "26.2.101"}]}], "source": "psirt@cisco.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.25:*:*:*:*:*:*:*", "matchCriteriaId": "EDAABB7C-DD62-418F-9CD3-B868913453AF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.26:*:*:*:*:*:*:*", "matchCriteriaId": "DECAACAE-0DFF-43CE-83AF-84FEABAB2CAF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.28:*:*:*:*:*:*:*", "matchCriteriaId": "4B9EE8F5-2F17-45E8-91BD-9DB5EE97B0CD", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.29:*:*:*:*:*:*:*", "matchCriteriaId": "C3C1199B-57C2-4076-A612-5F75AE46B3D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.31:*:*:*:*:*:*:*", "matchCriteriaId": "6CB20C4D-F8AD-4887-8B73-07495439BA3D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.32:*:*:*:*:*:*:*", "matchCriteriaId": "EE3676F8-475D-4C5D-A932-633E55A1C115", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.33:*:*:*:*:*:*:*", "matchCriteriaId": "13E2915D-36F8-4AFE-A2E0-59A8DF87A101", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.35:*:*:*:*:*:*:*", "matchCriteriaId": "79FABFF0-0D27-4954-8BA9-42187F7D9B66", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.90:*:*:*:*:*:*:*", "matchCriteriaId": "2F6FF116-1FFB-4960-942E-A1A16ACEA7F0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.351:*:*:*:*:*:*:*", "matchCriteriaId": "F824AD72-3E91-49B7-82BE-B3D047F16BBE", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.352:*:*:*:*:*:*:*", "matchCriteriaId": "0C4D8B96-C233-4432-8020-FAF19447FC13", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.5.353:*:*:*:*:*:*:*", "matchCriteriaId": "53D6E607-97DC-4A6A-9358-B99F888D974C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "DB06AB15-7F91-4B17-BBBD-AC4E4D1EBF9E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.2:*:*:*:*:*:*:*", "matchCriteriaId": "D1D7FA61-7D81-4FF3-827C-A97D35AB541B", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.3:*:*:*:*:*:*:*", "matchCriteriaId": "870B498C-3358-4EC0-B75A-B9A5D1DD40DC", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.4:*:*:*:*:*:*:*", "matchCriteriaId": "95BB2A02-11B4-48C1-97D7-25A9DF28ABB2", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.7.35:*:*:*:*:*:*:*", "matchCriteriaId": "A5CEC350-6245-453D-BB6D-79D444E1A5FA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "004286E0-375F-4385-87EB-0C74BD9CAF6F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "1B255442-4F12-41A1-8050-B805AAE65947", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "89FBA2B4-490F-4A00-8967-063F91F197E7", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "93125F1D-0CE5-423F-A73E-46F2A91E5FC2", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "00D33162-F298-4B99-A3D4-283A2A4FA091", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "82AF763B-9299-4EDC-B42D-B83736839CA1", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "5F70AB37-3C0B-40A8-BC37-5A79DA5F45F6", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "921B3622-76A3-4D9F-936C-25A965CE1A0E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "56092600-ABD2-4703-BA00-9DD0AE09B46D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "C4B7EEF2-9B6A-43FC-8DBE-F82B8E01BCAE", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.0.90:*:*:*:*:*:*:*", "matchCriteriaId": "2E5C0909-27D8-4B6E-A644-9B8ADFA24266", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "E90BEFD1-AAA5-4D39-A180-4B5ED3427AFC", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "8B842317-A5DB-4890-948A-DD26B7AE2540", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "00EA89C8-AAE8-48F1-91E4-7AE46083A802", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.15:*:*:*:*:*:*:*", "matchCriteriaId": "48928FFF-871C-4C07-8352-8C802FAD8F53", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.1.25:*:*:*:*:*:*:*", "matchCriteriaId": "06FDB11D-C54D-4654-8142-B50D306A6A28", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "84BABFE7-1350-4FB0-B9ED-5F08E386BC40", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "B7FE3667-1B5E-48FB-B3BB-1C1854FFEE72", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "2B0370A9-E422-4109-81A3-DE2118A20827", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.2.12:*:*:*:*:*:*:*", "matchCriteriaId": "3E20F814-87D4-41A5-B0A0-30AC6C6F2BB8", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "82CD7F68-9569-43F4-88ED-96F9A15C065D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "D2C4C062-F816-41FE-ADAD-F994F4FA4A07", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "A07E9C56-D143-45FA-99FF-30F54A828BF6", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.4:*:*:*:*:*:*:*", "matchCriteriaId": "F406EAA7-0607-419F-97E3-7ACEC8A3FA5B", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.5:*:*:*:*:*:*:*", "matchCriteriaId": "DB9D0641-28F8-4CCB-AEC3-205409D1704A", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "1ECA7B4C-8FDD-4053-B37B-E5E0969C0CB4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.15:*:*:*:*:*:*:*", "matchCriteriaId": "D21DEFD5-EC43-496B-BBE1-C71C6055BC04", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.16:*:*:*:*:*:*:*", "matchCriteriaId": "83150BDE-63B7-4B36-8584-E2E950E878CE", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.3.27:*:*:*:*:*:*:*", "matchCriteriaId": "8511927B-4297-47BA-BC02-6250BC40DF2B", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "40C6D7C4-A5D9-4365-9664-EF35586925AA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "EC41A004-2029-4E22-A88F-2B93D9786B6C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.4.15:*:*:*:*:*:*:*", "matchCriteriaId": "2E19F529-B25B-4B4B-879B-872D45C7C3B1", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.4.16:*:*:*:*:*:*:*", "matchCriteriaId": "D501F5A6-4E23-4A9F-A550-37BB94691687", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "57F7D7FD-24A8-4DD4-8280-A18244059F34", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "7A7448D1-BC19-45AB-BF6F-3434F8CA2CC8", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "7A057808-1BCA-4C7C-A2D9-0BD5B09D20F6", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "A7D09FC0-73C5-4F7A-8013-0B0E5CC834FB", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.5:*:*:*:*:*:*:*", "matchCriteriaId": "DFA4A8AF-348D-4F90-B1CB-AE784E0A6EBE", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.12:*:*:*:*:*:*:*", "matchCriteriaId": "23A66FF7-9BAB-40DA-8B90-C3C271D7E893", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.5.52:*:*:*:*:*:*:*", "matchCriteriaId": "88776859-57A0-4422-8D23-A09D64E72F63", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "6C95648D-A37A-446B-B106-12612C00A34D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "4DF31489-C029-4D4C-8401-26873FC469E3", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "2F79CAFA-73B0-4589-9938-B7898071279C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.6.15:*:*:*:*:*:*:*", "matchCriteriaId": "43AA14EF-3240-442E-935A-DF455FB107D7", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "1807BE16-BAA9-4BC6-B98A-13D584A12821", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.7.2:*:*:*:*:*:*:*", "matchCriteriaId": "375746CB-695E-4019-89C9-42ED37A5E958", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.7.21:*:*:*:*:*:*:*", "matchCriteriaId": "CE7D05C0-4065-448B-AAC6-F29E379F3DA6", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "D8ADA2B1-FD5A-4900-953B-30951C8EF9AE", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "9B4C7223-3EFB-48C2-BE22-941F60826D0C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.8.12:*:*:*:*:*:*:*", "matchCriteriaId": "9A14959D-63E1-4B5A-BB7F-A9A2AF3F1137", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.8.22:*:*:*:*:*:*:*", "matchCriteriaId": "4EE83701-C0B7-4ED2-866B-44B7F54FCA0F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.8.23:*:*:*:*:*:*:*", "matchCriteriaId": "0C8B2427-D8C6-420B-A71F-7FD7274DF0A1", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "164B241C-397A-4921-BC5B-F928A21E91C2", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "FAD3875D-D283-4961-BE31-750FDF9CDF56", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.9.21:*:*:*:*:*:*:*", "matchCriteriaId": "87EF9DC5-4BE2-429D-B9BA-EF9F29E7E0F7", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.10.1:*:*:*:*:*:*:*", "matchCriteriaId": "BAEC28C0-8091-49F9-88D1-CB96234BF52A", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.10.2:*:*:*:*:*:*:*", "matchCriteriaId": "E1ED2B72-A65C-47E4-87B3-D83F29428396", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.11.1:*:*:*:*:*:*:*", "matchCriteriaId": "8904CAA5-4E01-462C-AE57-067902CD95FC", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.11.2:*:*:*:*:*:*:*", "matchCriteriaId": "7750EA99-EC55-4F94-8730-18583647BBBA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:7.11.21:*:*:*:*:*:*:*", "matchCriteriaId": "FFEA7A0B-E20F-4ECC-A789-A4282EAC3029", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "BCE8E968-111F-4F57-93D3-E509AB540B87", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "B342A550-8600-45CF-8B9A-530770C9A0F4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "D64E1C4D-46B0-4A18-B8EE-BEA732CBF1F8", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "52002032-AB4E-4F3C-B832-EAA83F9EF97D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.2.11:*:*:*:*:*:*:*", "matchCriteriaId": "11288A28-F0CF-4FEC-A0B7-3D93866F01FE", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.2.20:*:*:*:*:*:*:*", "matchCriteriaId": "35D1FF2C-A40C-44EB-AAB1-A70B94E3D717", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.2.21:*:*:*:*:*:*:*", "matchCriteriaId": "EDBBD98B-A4AC-4C5B-B25F-A2F9C2A6CA6C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "3FD120B9-0671-473C-8420-872E5BB9933F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "7288D433-8CFC-4589-BBCA-466B497251E8", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.3.20:*:*:*:*:*:*:*", "matchCriteriaId": "1D20D314-93AD-4FC8-BB89-A6B0E09E6CD0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.3.30:*:*:*:*:*:*:*", "matchCriteriaId": "0E819927-875C-4AFE-9D6E-E2F434A2B3C3", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "D1BB813A-DAC5-4F74-B998-D5284B90BBB6", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "F41CA6B7-A3C4-4306-8930-2B0255859BE9", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.4.10:*:*:*:*:*:*:*", "matchCriteriaId": "583F513D-DB3E-41FB-8388-9F974D5B2B3E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.4.15:*:*:*:*:*:*:*", "matchCriteriaId": "177C347D-3119-4DA9-A68F-716D76BECF60", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:24.4.30:*:*:*:*:*:*:*", "matchCriteriaId": "BD7B9BB8-CE52-4E34-BAAB-3015CA64892B", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:25.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "F2F68106-8760-4521-9E60-8054BC67FEE1", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:25.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "2223A186-34D7-4BE4-9C45-BFB6F88E4D5F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:25.1.30:*:*:*:*:*:*:*", "matchCriteriaId": "CAA9C578-A485-4298-BCFA-493E1002BF3A", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:25.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "83C8F81F-E218-44BA-BE1F-3831690F8CE2", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:25.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "53158D00-7C30-48C0-B371-C7C685E3735D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:25.2.15:*:*:*:*:*:*:*", "matchCriteriaId": "776FD7A7-AC85-465A-85CC-5E58091A4695", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:25.2.30:*:*:*:*:*:*:*", "matchCriteriaId": "A00A2969-B71D-4B7A-A904-AB03E64CBB58", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:25.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "E8D1E267-0E3C-42E3-8407-4E7BACA93827", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:25.3.15:*:*:*:*:*:*:*", "matchCriteriaId": "996A4654-5E70-4983-9BFB-6AFFC34741F8", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:25.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "0C752FF9-E443-4C7A-ABC8-E6F761BCC260", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:25.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "346D3674-B627-462A-AA09-4F430B685207", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:25.4.30:*:*:*:*:*:*:*", "matchCriteriaId": "B293282E-862D-43F7-A845-7EF66407A1A5", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:25.4.201:*:*:*:*:*:*:*", "matchCriteriaId": "15822103-D5B5-42C3-90C1-84C2847B5BAA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:26.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "401B7CA4-0BC4-4611-973D-66BA3B6259F5", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:26.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "7083262C-5216-4F46-98DD-A1CC67A1C703", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:26.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "A201966B-D610-4242-9BAD-0B53BEBFE2DB", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:26.2.100:*:*:*:*:*:*:*", "matchCriteriaId": "2E503DFF-0A61-42C1-9AB6-08065C89B505", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xr:26.2.101:*:*:*:*:*:*:*", "matchCriteriaId": "7148B77C-4EBF-41DF-A215-E908CF05F568", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20276 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-691."}], "id": "CVE-2026-20276", "lastModified": "2026-09-17T18:56:12.250", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.0, "source": "psirt@cisco.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.0, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20276", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-02T16:45:14.731008Z", "version": "2.0.3"}}]}, "published": "2026-09-02T17:17:32.957", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-691"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.5.29"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.0.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.5.26"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.5.25"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.5.28"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.5.90"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.1.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.0.90"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.7.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.0.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.1.15"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.1.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.7.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.0.11"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.0.12"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.0.14"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.1.25"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.12"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.3.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.1.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.7.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.4.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.7.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.5.31"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.3.15"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.3.16"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.8.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.4.15"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.5.32"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.3.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.5.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.4.16"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.3.27"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.5.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.8.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.15"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.5.12"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.8.12"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.3.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.7.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.8.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.3.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.4.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.7.35"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.9.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.5.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.7.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.9.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.9.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.10.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.8.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.5.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.5.33"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.8.22"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.7.21"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.9.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.3.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.5.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.11.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.9.21"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.10.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.1.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.3.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.5.52"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.11.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.1.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.2.11"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.3.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.4.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.2.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.8.23"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.11.21"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.2.20"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.3.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.4.10"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.5.35"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "25.1.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.4.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.3.20"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.4.15"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "25.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.5.351"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "25.1.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.3.30"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "25.3.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.5.352"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.4.30"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "24.2.21"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "25.4.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "25.2.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "25.2.15"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.2.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.0.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "25.2.30"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.5.353"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "26.1.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "25.1.30"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "25.3.15"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "26.2.100"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "25.4.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "26.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "25.4.30"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "26.1.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "25.4.201"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "26.2.101"}}], "enrichment": {"confidence": 88.0, "confidence_source": "matching", "scores": [{"score": 88.0, "source": "matching"}]}, "original": {"product": "Cisco IOS XR Software", "source": "cna", "vendor": "Cisco"}, "product": "ios_xr_software", "vendor": "cisco"}], "created": "2026-09-03T11:30:03.601208+00:00", "updated": "2026-09-03T15:30:05.354347+00:00", "vendors": ["cisco", "cisco$PRODUCT$ios_xr_software"]}