CVE-2026-76505

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software (affected versions not specified)

Description An issue exists in the IPv4 packet processing functionality affecting Cisco ASR 9000 and 9900 Series Aggregation Services Routers, and Cisco ASR 9902 and 9903 Compact High-Performance Routers. An unauthenticated remote attacker can cause network processor (NP) errors by sending crafted IPv4 packets to an affected line card interface that are processed as for-us traffic. This can lead to a line card reset or shutdown, resulting in a denial of service (DoS) condition and traffic loss. If resets occur repeatedly, the network processor may enter a persistent shutdown state requiring a manual line card reload. This issue only affects the IPv4 packet-processing path for for-us traffic; transit IPv4 traffic and all IPv6 traffic are not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.