cyber.hendryadrian.com
Vulnerability & Exploit · securityweek.com

Cisco Patches Critical Vulnerabilities in SD-WAN, IOS XE, and FMC

· Original article ↗

Summary

Cisco patched vulnerabilities across its products, including critical flaws in Catalyst SD-WAN, IOS XE, and FMC. An FMC authentication bypass could enable remote root access; Cisco says it is unaware of in-the-wild exploitation.

Key points

  • Cisco released patches for two dozen vulnerabilities across its products.
  • Three Catalyst SD-WAN CVEs have CVSS scores of 9.9; the article also identifies two high-severity flaws.
  • IOS XE fixes include a CVSS 9.8 command-injection flaw and a CVSS 9.0 improper-access-control flaw.
  • FMC's CVE-2026-20079, rated CVSS 10, is an authentication bypass that could let unauthenticated remote attackers execute scripts and commands for root access.
  • IMC's CVE-2026-20200 could allow remote command execution and root access; exploitation requires authentication, and proof-of-concept code exists.
  • Cisco says it is unaware of any of the vulnerabilities being exploited in the wild.

Article Details

Vulnerability Types
  • Improper input validation
  • Improper access control
  • Improper link resolution before file access
  • Cleartext storage of sensitive information
  • Improper validation of specified quantity in input
  • Command injection
  • Authentication bypass
  • Improper validation of user-supplied input
Severity
Critical, high, and medium; the highest reported CVSS score is 10.0.
Affected Versions
  • UCS C-Series M7 Rack Servers (standalone mode)
  • UCS C-Series M8 Rack Servers (standalone mode)
Exploitation Status
not_reported
Exploit Availability
public_poc
Patch Status
available

MITRE ATT&CK

T1190 · Exploit Public-Facing ApplicationThe FMC authentication-bypass vulnerability can be exploited remotely with crafted HTTP requests sent to an affected device.

CVE

CVE-2026-20079Cisco · Cisco Secure Firewall Management Center (FMC)FMC received patches for CVE-2026-20079 (CVSS score of 10), a critical authentication bypass that allows remote, unauthenticated attackers to execute scripts and gain root privileges.CVE-2026-20200Cisco · Unified computing systemOf these, CVE-2026-20200 (CVSS score of 8.8) deserves special attention.CVE-2026-20267Cisco · Ios xeTwo of them, CVE-2026-20272 (CVSS score of 9.8) and CVE-2026-20267 (CVSS score of 9.0), are critical-severity command injection and improper access control defects, while the rest are high-severity flaws.CVE-2026-20272Cisco · Ios xeTwo of them, CVE-2026-20272 (CVSS score of 9.8) and CVE-2026-20267 (CVSS score of 9.0), are critical-severity command injection and improper access control defects, while the rest are high-severity flaws.CVE-2026-20303Vendor / Product unavailableThree of the CVEs, namely CVE-2026-20303, CVE-2026-20304, and CVE-2026-20310, have a CVSS score of 9.9 and are described as improper input validation, improper access control, and improper link resolution before fileCVE-2026-20304Vendor / Product unavailableThree of the CVEs, namely CVE-2026-20303, CVE-2026-20304, and CVE-2026-20310, have a CVSS score of 9.9 and are described as improper input validation, improper access control, and improper link resolution before fileCVE-2026-20310Vendor / Product unavailableThree of the CVEs, namely CVE-2026-20303, CVE-2026-20304, and CVE-2026-20310, have a CVSS score of 9.9 and are described as improper input validation, improper access control, and improper link resolution before fileCVE-2026-20312Vendor / Product unavailableThe remaining two, CVE-2026-20312 and CVE-2026-20313, are high-severity flaws described as cleartext storage of sensitive information and improper validation of specified quantity in input.CVE-2026-20313Vendor / Product unavailableThe remaining two, CVE-2026-20312 and CVE-2026-20313, are high-severity flaws described as cleartext storage of sensitive information and improper validation of specified quantity in input.

Vendors

CiscoCisco on Wednesday rolled out patches for two dozen vulnerabilities across its products, including critical-severity bugs in Catalyst SD-WAN, IOS XE, and Secure Firewall Management Center (FMC).

Products

Cisco Catalyst SD-WAN ManagerCisco on Wednesday rolled out patches for two dozen vulnerabilities across its products, including critical-severity bugs in Catalyst SD-WAN, IOS XE, and Secure Firewall Management Center (FMC). (IMC), IOS XE, and IOS, and medium-severity bugs in IOS XE, Terminal Service (TS) Agent, Catalyst SD-WAN Manager, RoomOS, and IMC.Cisco IOS XECisco on Wednesday rolled out patches for two dozen vulnerabilities across its products, including critical-severity bugs in Catalyst SD-WAN, IOS XE, and Secure Firewall Management Center (FMC).Integrated Management Controller (IMC)The company also patched high-severity security defects in Integrated Management Controller (IMC), IOS XE, and IOS, and medium-severity bugs in IOS XE, Terminal Service (TS) Agent, Catalyst SD-WAN Manager, RoomOS, andiOSCisco on Wednesday rolled out patches for two dozen vulnerabilities across its products, including critical-severity bugs in Catalyst SD-WAN, IOS XE, and Secure Firewall Management Center (FMC).RoomOSXE, and IOS, and medium-severity bugs in IOS XE, Terminal Service (TS) Agent, Catalyst SD-WAN Manager, RoomOS, and IMC.Secure Firewall Management Center (FMC)Cisco on Wednesday rolled out patches for two dozen vulnerabilities across its products, including critical-severity bugs in Catalyst SD-WAN, IOS XE, and Secure Firewall Management Center (FMC).Terminal Service (TS) AgentIntegrated Management Controller (IMC), IOS XE, and IOS, and medium-severity bugs in IOS XE, Terminal Service (TS) Agent, Catalyst SD-WAN Manager, RoomOS, and IMC.

Related Articles