CP-XR-DE21-S--4G-Router-Vulnerabilities

CP-XR-DE21-S--4G-Router-Vulnerabilities This report is for CVE-2025-44039 reserved for Router UART vulnerability assigned to Discoverer Yashodhan Vivek Mandke. Please download the report pdf in this repositoy...

LoongBleed

LoongBleed 中文 LoongBleed is a hardware vulnerability, conceptually similar to ZenBleed CVE-2023-20593 — affecting Loongson LA464/LA664 processors that implement both LSX 128-bit SIMD and LASX 256-bit SIMD. On LoongArch, the LSX $vr registers 128-bit alias the lower half of the LASX $xr registers...

Cisco IOS XR DoS

The vulnerability of the IPv4 packet processing function in Cisco IOS XR operating systems for Cisco ASR 9000 and ASR 9900 networking devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets DoS (cisco-sa-asr9k-tUyxcyXN)

According to its self-reported version, Cisco IOS XR is affected by a vulnerability. - A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact...

CVE-2026-76505

A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network...

CVE-2026-76505 Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability

A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network...

EUVD-2026-107359

A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network...

CVE-2026-76505 Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability

A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network...

CVE-2026-76505

A vulnerability exists in the IPv4 packet processing functionality of Cisco IOS XR Software affecting ASR 9000 and 9900 Series Aggregation Services Routers , as well as ASR 9902 and 9903 Compact High-Performance Routers . An unauthenticated, remote attacker can exploit incorrect handling of craft...

Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability

A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network...

PT-2026-122474

Уязвимость функции обработки пакетов IPv4 операционной системы Cisco IOS XR сетевых устройств Cisco ASR 9000 и ASR 9900 связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

Cisco IOS-XR: CVE-2026-76505: Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability

A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network...

PT-2026-120711

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description An issue exists in the IPv4 packet processing functionality affecting Cisco ASR 9000 and 9900 Series Aggregation Services Routers, and Cisco ASR 9902 and 9903 Compact...

Cisco IOS XR Software input validation error vulnerability

Cisco IOS XR Software contains an input validation error vulnerability. This vulnerability stems from improper handling of specially crafted IPv4 packets received on the line card interface and processed as traffic directed to the local machine. Unauthenticated remote attackers can exploit this...

Astra Linux – Vulnerability in Chromium

The information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information through a crafted HTML page. Chromium security severity: Low...

Cisco Advance Notification for Publication of October 21, 2026, Security Advisories

On October 21, 2026, the Cisco Product Security Incident Response Team PSIRT published the following advisories. To remediate the vulnerabilities that were disclosed on October 21, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories. Fo...

XR component

The XR component vulnerability in Google Chrome and Microsoft Edge web browsers is related to information disclosure. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Beyond the Headset: A Systematization of Knowledge on Extended Reality Privacy and Security in Healthcare

Extended reality XR systems are increasingly used in healthcare applications ranging from surgical planning to remote rehabilitation and mental health support. However, the rich streams of sensor, biometric, behavioral, and environmental data that enable these applications also introduce...

GAZEleak: Passcode Inference against Eye-Tracking XR Devices through External Observation

Mixed-reality headsets such as Apple Vision Pro replace the touch screen with gaze-as-pointer interaction: the wearer looks at a target and confirms with an air pinch. Because the display is inside the headset and the eye tracker is walled off from third-party software, such input is widely assum...

CVE-2026-79125

A flaw was found in Google Chrome. This information leak vulnerability, specifically within the XR component, allows a remote attacker to obtain sensitive information. The attacker can achieve this by enticing a user to visit a specially crafted HTML page. This could lead to the unauthorized...