{
  "id": 5490155,
  "title": "Cisco searched for IOS XR bugs and found so many it rolled them into an update release",
  "url": "https://urgent.news/2026/09/04/cisco-searched-for-ios-xr-bugs-and-found-so-many-it-rolled-them-into-5490155",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-04T02:18:36.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/09/04/cisco-searched-for-ios-xr-bugs-and-found-so-many-it-rolled-them-into-an-update-release/5294410"
  },
  "original_language": "en",
  "account": "Cisco has disclosed three critical flaws in its products, including vulnerabilities in the Cisco IOS XR operating system. The most severe, CVE-2026-20274, scored a high 9.8 on the CVSS scale, with others ranging from 8.6 to 8.2. These bugs were discovered during an internal security review, though specifics are unclear. Cisco strongly recommends customers upgrade to the latest IOS XR versions to rectify the issues. One flaw, CVE-2026-20212, is particularly concerning as it stems from an improper integration with Cisco’s Silicon One networking processors. This can allow unauthenticated remote attackers to execute code with root privileges through crafted input or crash the S1HAL process, potentially causing a device reload. The vulnerability affects ten Nexus 9000 Series Switches, and while Cisco hasn’t observed attacks, the risk is high as AI tools could aid malicious actors in exploiting these flaws. To mitigate the risk, Cisco advises customers to use infrastructure access control lists to restrict management and control plane traffic to affected devices or explicitly deny TCP packets destined for ports 43210 or 43211.",
  "summary": "Three critical vulns demand your attention, one a make-me-root mess in Nexus 9000 Series Switches that you can mitigate, not fix",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register Science",
        "title": "Cisco searched for IOS XR bugs and found so many it rolled them into an update release",
        "url": "https://urgent.news/2026/09/04/cisco-searched-for-ios-xr-bugs-and-found-so-many-it-rolled-them-into",
        "published": "2026-09-04T02:18:36.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}