Cisco Advance Notification for Publication of August 5, 2026, Security Advisories

To fully remediate the vulnerabilities that were disclosed on August 5, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.

For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer-Focused Response to AI-Accelerated Vulnerability Discovery.

1. Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026

   CriticalCVSS 9.9
   CVE-2026-20303CVE-2026-20304CVE-2026-20310CVE-2026-20312CVE-2026-20313

2. Cisco IOS XE Software Security Hardening Release: August 2026

   CriticalCVSS 9.8
   CVE-2026-20267CVE-2026-20268CVE-2026-20269CVE-2026-20270CVE-2026-20271CVE-2026-20272CVE-2026-20273

3. Cisco Integrated Management Controller Argument Injection Vulnerabilities

   HighCVSS 8.8
   CVE-2026-20200CVE-2026-20288

4. Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability

   HighCVSS 8.6
   CVE-2026-20301

5. Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability

   HighCVSS 8.6
   CVE-2026-20263

6. Cisco IOS XE Software SNMP Denial of Service Vulnerability

   HighCVSS 7.7
   CVE-2026-20124

7. Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

   MediumCVSS 6.5
   CVE-2026-20294

8. Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability

   MediumCVSS 6.3
   CVE-2026-20311

9. Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability

   MediumCVSS 5.7
   CVE-2026-20289

10. Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability

    MediumCVSS 5.0
    CVE-2026-20028

11. Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

    MediumCVSS 4.8
    CVE-2026-20198

12. Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability

    MediumCVSS 4.3
    CVE-2026-20308