Critical 9.8

CVE-2026-20200

Cisco patches critical SD-WAN, IOS XE, and IMC vulnerabilities; PoC released for IMC bug

Vendor / product: Cisco Integrated Management Controller (IMC)

Event date: 2026-08-06

Victim organization: not stated

Public PoC: Yes

First tracked by RiskWire: 2026-07-28

Sources & citations (23)

Cisco Addresses Catalyst SD-WAN Software Multiple Vulnerabilities (CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, & CVE-2026-20313) threatprotect.qualys.com · 2026-08-06
Critical Cisco IMC bug gives attackers root, PoC is out (CVE-2026-20200) helpnetsecurity.com · 2026-08-06
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs thehackernews.com · 2026-08-06
Critical Cisco SD-WAN Flaws Expose Systems to Access Control Bypass Attacks gbhackers.com · 2026-08-06
Cisco Patched Multiple Critical Vulnerabilities in Catalyst SD-WAN cybersecuritynews.com · 2026-08-06
Cisco Patches Multiple Critical Cisco IOS XE Software Vulnerabilities – Patch Now! cybersecuritynews.com · 2026-08-06
Cisco IOS XE Software Multiple Vulnerabilities (CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, & CVE-2026-20273) threatprotect.qualys.com · 2026-08-06
Cisco Patches 7 IOS XE Vulnerability Classes, Including Critical Command Injection Flaws gbhackers.com · 2026-08-06
Cisco FMC static credentials exploited by attackers (CVE-2026-20316) helpnetsecurity.com · 2026-07-30
CISA Warns of Cisco Secure Firewall Management Center Vulnerability (CVE-2026-20316) threatprotect.qualys.com · 2026-07-31
Attackers exploit backdoor in Cisco's firewall management software heise.de · 2026-07-30
Cisco warns of FMC static credential flaw exploited in zero-day attacks bleepingcomputer.com · 2026-07-29
Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data thehackernews.com · 2026-07-30
Cisco Firewall Management Center 0-Day Actively Exploited to Access Sensitive Data cybersecuritynews.com · 2026-07-30
Cisco FMC CVE-2026-20316 Exploited: Patch Now blog.gridinsoft.com · 2026-07-30
U.S. CISA adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog securityaffairs.com · 2026-07-30
CISA Warns of Cisco Secure Firewall Management 0-Day Vulnerability Exploited in Attacks cybersecuritynews.com · 2026-07-30
CISA Adds Cisco Secure Firewall Management Flaw to Exploited Vulnerabilities List gbhackers.com · 2026-07-30
CISCO FMC Archives securityaffairs.com · 2026-07-30
Cisco Secure Firewall Management Center Archives securityaffairs.com · 2026-07-30

+3 more sources

References

View on NVD ↗ View on MITRE CVE ↗ Search CISA ↗ KEV lookup tool

See CVE-2026-20200 in context

RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.

Book a 20-min demo →