Cisco Catalyst SD-WAN and IOS XE: Critical Flaws Fixed

**Executive summary:** Cisco published security advisories for multiple critical vulnerabilities impacting Catalyst SD-WAN (three CVSS 9.9 issues), IOS XE (CVSS 9.8), and Cisco IMC, providing fixed releases and recommending immediate upgrades because there are no workarounds for the highest-severity issues; Cisco reports no active exploitation for SD-WAN/IOS XE while a proof-of-concept exists for an IMC flaw.