Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs
Read original article ↗AI Summary
Cisco has released security updates to address 12 critical vulnerabilities in its Catalyst SD-WAN and IOS XE Software, including three with CVSS scores of 9.8 or higher. The flaws involve improper input validation, access control, command injection, and other memory and logic vulnerabilities that could allow remote attackers to execute arbitrary code, escalate privileges, or access sensitive data. Additionally, Cisco patched a high-severity flaw in the Integrated Management Controller (IMC) web interface, CVE-2026-20200, for which a proof-of-concept exploit exists, allowing authenticated attackers with low privileges to achieve root-level command execution and deeply compromise server hardware trust.
AI-extracted · verify before operational use
No entities or IoCs were extracted from this article.