What is CVE-2026-20118?

CVE-2026-20118 is a medium-severity vulnerability in Cisco Ios Xr Software, classified under CWE-460. CVSS score: 6.8/10. Published 2026-03-11.

How severe is CVE-2026-20118?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Vulnerability in Cisco Ios Xr Software

CVE-2026-20118

A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series with NC57 line cards and Cisco NCS 5700 Routers and Cisco IOS XR…

EPSS: 0.001 (26.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H.

Affected products

Cisco Ios Xr Software — versions 7.9.1, 7.10.1, 7.9.2

Weakness classification (CWE)

CWE-460

References

cisco-sa-xrncs-epni-int-dos-TWMffUsN

Frequently asked questions

What is CVE-2026-20118?: CVE-2026-20118 is a medium-severity vulnerability in Cisco Ios Xr Software, classified under CWE-460. CVSS score: 6.8/10. Published 2026-03-11.
How severe is CVE-2026-20118?: Medium severity. CVSS v3 base score is 6.8 out of 10.