Critical Cisco SD

Gbhackers •Divya • August 6, 2026

Cisco has released important security updates for Catalyst SD-WAN Software after discovering several critical vulnerabilities that could allow for access control bypass, unauthorized privilege escalation, and exposure of sensitive data. The most severe vulnerabilities are CVE-2026-20303, CVE-2026-20304, and CVE-2026-20310, each with a maximum CVSS v3.1 score of 9.9. Critical Cisco SD-WAN Flaws These vulnerabilities were […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco Issues Critical Security Advisories for IOS XE and SD-WAN Vulnerabilities Cisco has released critical security advisories for multiple vulnerabilities affecting its IOS XE and Catalyst SD-WAN Software. The advisories, published on August 5, 2026, detail vulnerabilities that could allow attackers to bypass security controls, execute arbitrary commands, and gain unauthorized access. Key vulnerabilities include CVE-2026-20272 for IOS XE with a CVSS score of 9.8, and CVE-2026-20304 for SD-WAN, also with a CVSS score of 9.9. Cisco confirmed that there is currently no evidence of active exploitation for these vulnerabilities. The advisories emphasize the importance of patching affected systems promptly, as edge devices are often targeted by attackers. Organizations are urged to follow NCSC-UK's guidance on vulnerability management. Additional vulnerabilities in Cisco's Integrated Management Controller (IMC) were also disclosed, with a public proof-of-concept exploit available. 43 sources 74

Extracted Entities

Critical Cisco SD

The full story

Extracted Entities

CVEs (3)

CWE Weaknesses (2)

Platforms (2)