# Cisco Ios Xr


- [CVE-2020-3118](https://insights.sbomify.com/CVE-2020-3118/): Cisco IOS XR Software Discovery Protocol Format String (high 8.8, exploited in the wild)
- [CVE-2018-0167](https://insights.sbomify.com/CVE-2018-0167/): Cisco IOS, XR, and XE Software Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2020-3569](https://insights.sbomify.com/CVE-2020-3569/): Cisco IOS XR Software DVMRP Memory Exhaustion (high 8.6, exploited in the wild)
- [CVE-2020-3566](https://insights.sbomify.com/CVE-2020-3566/): Cisco IOS XR Software DVMRP Memory Exhaustion (high 8.6, exploited in the wild)
- [CVE-2018-0175](https://insights.sbomify.com/CVE-2018-0175/): Cisco IOS, XR, and XE Software Buffer Overflow (high 8.0, exploited in the wild)
- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)
- [CVE-2016-6415](https://insights.sbomify.com/CVE-2016-6415/): Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2010-3035](https://insights.sbomify.com/CVE-2010-3035/): Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2022-20821](https://insights.sbomify.com/CVE-2022-20821/): Cisco IOS XR Open Port (medium 6.5, exploited in the wild)
- [CVE-2009-2055](https://insights.sbomify.com/CVE-2009-2055/): Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service (medium 5.9, exploited in the wild)
- [CVE-2026-20274](https://insights.sbomify.com/CVE-2026-20274/): Cisco IOS XR Software Security Hardening Release: September 2026 (critical 9.8)
- [CVE-2019-1710](https://insights.sbomify.com/CVE-2019-1710/): Cisco IOS XR 64-Bit Software for Cisco ASR 9000 Series Aggregation Services Routers Network Isolation Vulnerability (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/cisco/ios-xr/