Cisco patched 24 vulnerabilities across its Catalyst SD-WAN, IOS XE, FMC, IMC, and other products. Critical issues include CVE-2026-20079 in FMC, a critical authentication bypass allowing remote unauthenticated root access via crafted HTTP requests (CVSS 10.0). Catalyst SD-WAN has multiple critical flaws (CVE-2026-20303, CVE-2026-20304, CVE-2026-20310) with CVSS 9.9 scores involving improper input validation and access control. IOS XE fixes include critical command injection and access control vulnerabilities (CVE-2026-20272, CVE-2026-20267). IMC's CVE-2026-20200 is a high-severity improper input validation flaw exploitable remotely with authentication, with public proof-of-concept code available. Cisco has not reported any exploitation in the wild and advises applying patches promptly.

Successful exploitation of these vulnerabilities could allow remote attackers to execute arbitrary commands or scripts with root privileges, bypass authentication, and access sensitive information. The FMC authentication bypass (CVE-2026-20079) is particularly severe, enabling unauthenticated remote root access. Other critical flaws in SD-WAN and IOS XE could lead to command injection or unauthorized access. The IMC vulnerability with available PoC code increases the risk of exploitation in environments using affected UCS C-Series M7 and M8 Rack Servers. No active exploitation has been reported so far.

Cisco has released official patches for all identified vulnerabilities. Users should apply these updates immediately to affected products including Catalyst SD-WAN, IOS XE, FMC, IMC, and others. Cisco’s security advisories provide detailed patch information. There are no indications that these vulnerabilities are currently exploited in the wild, but timely patching is strongly recommended to prevent potential attacks.