CVE-2026-20046

HIGH 8.8

Cisco IOS XR Software CLI Privilege Escalation Vulnerability

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges and gain full administrative control of an affected device. This vulnerability is due to incorrect mapping of a command to task groups within the source code. An attacker with a low-privileged account could exploit this vulnerability by using the CLI command to bypass the task group–based checks. A successful exploit could allow the attacker to elevate privileges and perform actions on an affected device without authorization checks.

CWE	CWE-264
Vendor	cisco
Product	cisco ios xr software
Ecosystems	Networking
Industries	NetworkingTelecommunications
Published	Mar 11, 2026
Last Updated	Mar 12, 2026

Stay Ahead of the Next One

Get instant alerts for cisco cisco ios xr software

Be the first to know when new high vulnerabilities affecting cisco cisco ios xr software are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Cisco / Cisco IOS XR Software

6.6.1 6.5.3 7.0.1 6.5.1 6.5.2 6.6.2 6.6.25 7.1.1 7.0.90 6.6.3 7.0.2 7.1.2 7.2.1 6.6.4 7.3.1 7.4.1 7.2.2 7.3.2 7.5.1 7.6.1 7.5.2 7.3.4 7.3.3 7.4.2 7.7.1 7.6.2 7.8.1 7.7.2 7.9.1 7.8.2 7.5.4 7.8.22 7.10.1 7.7.21 7.9.2 7.5.5 7.11.1 7.10.2 7.3.6 24.1.1 7.11.2 24.2.1 24.1.2 24.3.1 24.4.1 24.2.2 7.11.21 24.2.20 24.3.2 24.4.2 25.1.1 24.3.20 25.2.1 25.1.2 24.3.30 24.2.21 25.1.30

References

NVD ↗ CVE.org ↗ EPSS Data ↗

sec.cloudapps.cisco.com: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-privesc-bF8D5U4W