# Cisco Patches Critical Vulnerabilities in SD-WAN and IOS XE Updates address 12 security flaws, including three with maximum 9.8 CVSS scores. - **Source:** [The Hacker News](https://brifing.si/source/f944ec2b-8180-47bc-94de-57085b5a6563) - **Published:** 2026-08-06 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/f8556546-7d86-4ba7-b7c9-51a4d8a576bc ## Critical Vulnerabilities and Impacts Cisco has released updates addressing 12 security vulnerabilities in Catalyst SD-WAN and IOS XE software, three of which carry the maximum criticality rating of 9.8 CVSS. These flaws affect all SD-WAN software regardless of device configuration and IOS XE systems running in autonomous or controller mode. The company confirmed no evidence of active exploitation has been found. ## SD-WAN Software Issues The security flaws in Catalyst SD-WAN software were discovered during Cisco's internal security testing. The company revealed it utilized both traditional methods and AI models in these tests. Users are strongly advised to apply relevant updates immediately. Complete vulnerability lists and fixed software versions are published in Cisco's security bulletin. ## Core Problems in IOS XE IOS XE software vulnerabilities stem from critical issues like improper access control, command injection, and invalid input validation. These were classified as seven distinct vulnerabilities and addressed in specific IOS XE versions. Cisco urged all customers to implement these updates urgently to maintain system security. ## High-Risk IMC Vulnerability Cisco also released patches for a high-severity flaw (CVE-2026-20200) in the Integrated Management Controller (IMC) web interface, with proof-of-concept exploit availability confirmed. Security researcher Christoph Peil emphasized IMC's critical position influencing BIOS and SecureBoot functionality. ## Deep System Access Threat Experts warn that exploiting the IMC vulnerability could allow attackers to embed themselves deeply in systems, bypassing even operating-system-level protections. This compromises the fundamental security anchor of server hardware, posing particular risks for data center operations and enterprise infrastructure. ## Other Recent Security Alerts These disclosures follow just one week after Cisco's warning about another vulnerability (CVE-2026-20316) in Secure Firewall Management Center (FMC) software. Rated 5.3 CVSS, this flaw could allow low-privilege accounts to access sensitive data. The company confirmed active exploitation of this vulnerability in the wild. ## Enterprise Security Implications Cisco's updates carry critical importance for organizations with large-scale network infrastructure. Security professionals stress the necessity of proactive security management and timely patch implementation. The increasing role of AI-assisted security testing in vulnerability discovery is becoming evident in the industry. ## End-User Recommendations Cisco customers using affected products should immediately apply relevant security updates. System administrators should implement additional safeguards against IMC and FMC vulnerabilities. The company advises closely following technical details and patch guidance provided in security bulletins for comprehensive protection. ## Sources covering this story - https://thehackernews.com/2026/08/cisco-patches-12-sd-wan-and-ios-xe.html — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._