Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs

Cisco has released security updates to address 12 vulnerabilities affecting Catalyst SD-WAN and IOS XE Software, including three with a CVSS score of 9.8. The flaws were discovered during internal security testing using existing processes and frontier AI models, and are not known to be actively exploited.

The Catalyst SD-WAN vulnerabilities include CVE-2026-20303, CVE-2026-20304, and CVE-2026-20310, each with a CVSS score of 9.9, along with CVE-2026-20312 (8.8) and CVE-2026-20313 (7.7). These issues affect all configurations of Catalyst SD-WAN Software and are fixed in versions 20.9.10, 20.12.8.1, 20.15.6, 20.18.4, and 26.1.2.

For IOS XE Software, Cisco addressed seven flaws, including CVE-2026-20272 (CVSS 9.8), CVE-2026-20267 (9.0), and five others rated 8.6 (CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20273). These are fixed in versions 17.9.10, 17.12.8, 17.15.6, 17.18.4/17.18.4a, and 26.1.2.

Additionally, Cisco patched a high-severity flaw in the Integrated Management Controller (IMC) web interface (CVE-2026-20200, CVSS 8.8) for which a proof-of-concept exploit is available. This vulnerability could allow an authenticated low-privilege attacker to execute arbitrary commands and escalate to root. Researcher Christoph Peil warned that compromising the IMC undermines the server’s trust anchor, affecting BIOS and SecureBoot.

Cisco also fixed CVE-2026-20288 (CVSS 6.5) in IMC and recently warned of active exploitation of CVE-2026-20316 in Secure Firewall Management Center. Customers are urged to apply the updates promptly.