Advisories
Cisco Catalyst SD‑WAN Hardening Update: Critical Vulnerabilities Resolved (CVE‑2026‑20303‑20313)
Cisco’s SD‑WAN software team released a hardening patch in August 2026 after an internal audit uncovered several critical weaknesses. Five CVEs—CVE‑2026‑20303, ‑20304, ‑20310, ‑20312, ‑20313—were addressed through a single update per CWE class. No workarounds exist, so all Catalyst SD‑WAN customers should apply the new releases immediately to close the gaps.
Cisco’s Catalyst SD‑WAN engineering squad conducted a comprehensive internal security review and identified a handful of high‑impact vulnerabilities. The company grouped these weaknesses by Common Weakness Enumeration (CWE) categories and assigned one CVE identifier to each group. The resulting hardening releases patch the five CVEs listed below.
Fixed CVEs
- CVE-2026-20303
- CVE-2026-20304
- CVE-2026-20310
- CVE-2026-20312
- CVE-2026-20313
Security Impact Rating: Critical
There are no known workarounds for these issues; the only remediation is to apply the updated firmware. Cisco urges all Catalyst SD‑WAN customers to download and install the latest patches as soon as possible.
"We remain committed to proactive security and product quality, and we thank our customers for their cooperation as we continue to strengthen our solutions."
Related vulnerabilities
Cisco Issues Critical Hardening Patch for Secure Workload – Five CVEs Resolved
Cisco's Secure Workload engineering team released a hardening update in August 2026 after an internal review uncovered five critical vulnerabilities. The patches address CVE‑2026‑20231, CVE‑2026‑20315, CVE‑2026‑20317, CVE‑2026‑20318, and CVE‑2026‑20319. No workarounds are available, so customers must apply the updates immediately.
Read briefing
Cisco Crosswork Hardening Release: Critical CVEs Uncovered in August 2026
Cisco’s Crosswork team has rolled out a hardening update after an internal security audit revealed several critical weaknesses. Four CVEs—CVE‑2026‑20030, CVE‑2026‑20357, CVE‑2026‑20358, and CVE‑2026‑20359—were patched in the new firmware, with no workarounds available. The vulnerabilities were not known to be actively exploited, but the critical rating urges immediate action. Update your Crosswork devices now to stay protected.
Read briefing
Critical Cisco Hardening Release: ASA, FTD, FMC Patch Internal Exploits
Cisco’s security team has rolled out a hardening update for its Secure Firewall Adaptive Security Appliance, Threat Defense, and Management Center software, addressing a suite of internally discovered flaws. Eight CVEs (CVE‑2026‑20329 through CVE‑2026‑20336) cover issues ranging from static credential exposure to authentication bypass, with two vulnerabilities already being actively exploited. No workarounds exist; customers must install the patches promptly to mitigate the critical risk.
Read briefing
Cisco IOS XE Hardening Release Addresses 7 Critical CVEs – August 2026
Cisco’s IOS XE team rolled out a hardening update in August 2026 that patches seven critical vulnerabilities discovered during internal testing. No workarounds exist; customers should apply the latest firmware to mitigate the risks. The CVEs span multiple CWE categories and carry a Critical impact rating.
Read briefing