Cisco has released patches to mitigate several critical vulnerabilities discovered in its Catalyst SD-WAN and IOS XE Software. The update is part of an extensive internal security review aimed at enhancing the protection of these systems.
Details of the Discovered Vulnerabilities
The vulnerabilities affect both the Catalyst SD-WAN Software, regardless of its configuration, and Cisco’s IOS XE Software, whether operating in autonomous or controlled mode. Cisco reported that these vulnerabilities, identified through internal testing and advanced AI models, have not been exploited in the wild as of now.
Among the vulnerabilities addressed in the Catalyst SD-WAN Software are CVE-2026-20303, CVE-2026-20304, and CVE-2026-20310, each with a CVSS score of 9.9. These issues include improper input validation and access control weaknesses. Additionally, several other vulnerabilities like CVE-2026-20312 and CVE-2026-20313 were also rectified in various software versions.
Resolved Issues in IOS XE Software
The IOS XE Software was affected by vulnerabilities related to improper access control, command injection, and input validation, such as CVE-2026-20267 and CVE-2026-20272, the latter having a CVSS score of 9.8. These issues have been resolved in recent software updates, including versions 17.9, 17.12, and 26.1.
Updates for these flaws are crucial as they prevent potential exploitation, which could lead to unauthorized access or control over affected systems. Cisco has provided clear guidance on which software versions have addressed these issues, urging users to apply the necessary updates promptly.
Additional Security Fixes and Future Implications
Cisco also addressed a high-severity flaw in the Integrated Management Controller’s web-based interface, identified as CVE-2026-20200, which could allow attackers to execute arbitrary commands with elevated privileges. This vulnerability underscores the critical nature of maintaining robust security measures across all system components.
Security researcher Christoph Peil, who discovered CVE-2026-20200, highlighted the potential for deep system compromise if attackers gain control over the IMC. Such a breach could bypass typical security measures, posing a significant risk to the foundational security of the affected hardware.
As Cisco continues to address security vulnerabilities, it remains vital for organizations to stay informed and updated on the latest patches to safeguard their network infrastructure from potential threats.
