Cisco Addresses 12 Critical Vulnerabilities in SD-WAN and IOS XE Software, Including High-Severity Flaws

Cisco released patches for 12 critical vulnerabilities in SD-WAN and IOS XE software, including three with 9.8 CVSS scores, following internal security testing. A high-severity IMC flaw (CVE-2026-20200) with a proof-of-concept exploit was also addressed, posing significant risks to hardware-level security.

Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software as part of a comprehensive internal security review.

The security issues affect Cisco Catalyst SD-WAN Software, regardless of device configuration, and Cisco IOS XE Software when it is running in autonomous or controller mode.

"These vulnerabilities were found

Read original article