Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs

Cisco released updates addressing multiple critical vulnerabilities in Cisco Catalyst SD-WAN and IOS XE software (several CVEs with CVSS scores up to 9.9). The report lists affected CVEs, descriptions (improper input validation, command injection, access control, buffer overflows, cleartext storage, etc.), and the fixed software versions; it also notes an IMC web-management flaw with an available proof-of-concept and recent active exploitation of a separate FMC vulnerability—customers are urged to apply updates promptly.