CISCO-CVE-2026-20040

HIGH8.8

Cisco IOS XR Software CLI Privilege Escalation Vulnerability

Published Mar 11, 2026

Modified 1 months ago

Affected Packages

Cisco IOS XR

CiscoIOSXR

Affected versions:

24.1.124.1.224.2.124.2.1124.2.224.2.2024.2.2124.3.124.3.224.3.20+106 more

CVSS Analysis

CVSS v3.1

8.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Upstream

Ecosystems

Timeline

PublishedMar 11, 2026

ModifiedMar 11, 2026