CVE-2026-76505: Cisco IOS XR Software 7.0.1, 7.1.1, 7.0.90, 6.7.1, 7.0.2, 7.1.15, 7.1.2, 6.7.2, 7.1.25, 7.1.3, 6.7.3, 7.3.1, 7.4.1…

Affected technology

Cisco IOS XR Software · 7.0.1, 7.1.1, 7.0.90, 6.7.1, 7.0.2, 7.1.15, 7.1.2, 6.7.2, 7.1.25, 7.1.3, 6.7.3, 7.3.1, 7.4.1, 6.8.1, 7.3.2, 7.5.1, 7.6.1, 7.5.2, 7.3.3, 6.8.2, 7.7.1, 7.4.2, 7.3.4, 6.7.35, 6.9.1, 7.6.2, 7.8.1, 7.5.3, 7.7.2, 6.9.2, 7.9.1, 7.8.2, 7.5.4, 7.8.22, 7.10.1, 7.9.2, 7.3.5, 7.5.5, 7.11.1, 7.9.21, 7.10.2, 24.1.1, 7.11.2, 24.2.1, 24.1.2, 24.3.1, 24.4.1, 24.2.2, 7.8.23, 7.11.21, 24.3.2, 24.3.20, 24.3.30
Cisco

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated, remote attacker could cause network processor (NP) errors, resulting in a line card reset or shutdown and a denial of service (DoS) condition. Vendor/CNA’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high.