Cisco Issues Critical Security Advisories for IOS XE and SD-WAN Vulnerabilities

Cisco published critical security advisories on August 5, 2026, for multiple high-severity vulnerabilities affecting IOS XE and Catalyst SD-WAN (notably CVE-2026-20272 and CVE-2026-20304 with CVSS 9.8 and 9.9). Cisco reports no confirmed active exploitation, but urges rapid patching because edge devices are high-value targets; additional IMC flaws with a public proof-of-concept are also noted.