Repeated Connection Attempts Consistent with CVE-2026-20274 Resource Exhaustion

Arnold Chan@slaz

•updated Sep 4, 2026•0•0•5

This rule detects a high volume of TCP synchronization (SYN) packets from external sources directed at a Cisco IOS XR network device. This behavioral pattern is indicative of a resource exhaustion denial-of-service (DoS) attack, potentially attempting to exploit vulnerabilities such as CVE-2026-20274 by flooding the control plane.