Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-20118

23
FAUCET Score

CVE-2026-20118 is a denial-of-service vulnerability in Cisco IOS XR Software affecting NCS 5500 Series with NC57 line cards and NCS 5700 Routers. This flaw involves packet corruption during Egress Packet Network Interface (EPNI) Aligner interrupt handling under heavy transit traffic, which can cause the network processing unit (NPU) and ASIC to cease traffic processing. An unauthenticated, remote attacker can exploit this by sending a continuous flow of crafted packets, leading to persistent, heavy packet loss and a denial-of-service condition. While the technical attack complexity is high, Cisco has assigned a Security Impact Rating of High due to the critical network segment where these devices operate. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion regarding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
CiscoCisco IOS XR Software
24.1.1, 24.1.2, 24.2.1, 24.2.11, 24.2.2, 24.2.20, 24.2.21, 24.3.1, 24.3.2, 24.3.20, 24.3.30, 24.4.1, 24.4.2, 24.4.30, 25.1.1, 25.1.2, 7.10.1, 7.10.2, 7.11.1, 7.11.2, 7.11.21, 7.9.1, 7.9.2CNA affecteddefault unknown

CVSS Data

CVSS version used by this source: 3.1

6.8MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
2.2
Impact Score
4.0
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.32%
Probability of exploitation in next 30 days
EPSS Percentile
24.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0032 is in the 3rd percentile among its peer group of 19,955 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (4)

jenkinspatch availablevia llm_extracted
Fixed in: 1.0
View patch
opensipspatch availablevia llm_extracted
Fixed in: 1.0
View patch
h2ovendor investigatingvia llm_extracted
jellyfinvendor investigatingvia llm_extracted
View patch

Vendor Advisories (4)

jenkinsllm-jenkins-7a3c3526a8943968HIGH

Cisco IOS XR Egress Packet Network Interface Aligner Interrupt Denial of Service Vulnerability

Mar 11, 2026
h2ollm-h2o-b193a8e4ccd7a08fHIGH

Cisco IOS XR Egress Packet Network Interface Aligner Interrupt Denial of Service Vulnerability

Mar 11, 2026
jellyfinllm-jellyfin-5e27ac614fbfebbfHIGH

Cisco IOS XR Egress Packet Network Interface Aligner Interrupt Denial of Service Vulnerability

Mar 11, 2026
opensipsllm-opensips-f07277d414aba133HIGH

Cisco IOS XR Egress Packet Network Interface Aligner Interrupt Denial of Service Vulnerability

Mar 11, 2026

References

sec.cloudapps.cisco.com / security/center/content/CiscoSecurityAdvisory/cisco-sa-xrncs-epni-int-dos-TWMffUsN