Ce mail provient de l'extérieur, restons vigilants ===================================================================== CERT-Renater Note d'Information No. 2026/VULN826 _____________________________________________________________________ DATE : 06/08/2026 HARDWARE PLATFORM(S): / OPERATING SYSTEM(S): Systems running Cisco Catalyst SD-WAN Software, Cisco IOS XE Software, Cisco Integrated Management Controller software, Cisco IOS Software and IOS XE Software Extensible Messaging Client, Cisco RoomOS, Cisco Terminal Services Agent. ===================================================================== https://csaf.arubanetworking.hpe.com/2026/hpe_aruba_networking_-_hpesbnw05100.txt _____________________________________________________________________ Below is the list of Cisco Security Advisories published by Cisco PSIRT on 2026-August-05. The following PSIRT security advisories (2 Critical, 4 High, 6 Medium) were published at 16:00 UTC today. Table of Contents: 1) Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026 - SIR: Critical 2) Cisco IOS XE Software Security Hardening Release: August 2026 - SIR: Critical 3) Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability - SIR: High 4) Cisco Integrated Management Controller Argument Injection Vulnerabilities - SIR: High 5) Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability - SIR: High 6) Cisco IOS XE Software SNMP Denial of Service Vulnerability - SIR: High 7) Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability - SIR: Medium 8) Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability - SIR: Medium 9) Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability - SIR: Medium 10) Cisco Integrated Management Controller Cross-Site Scripting Vulnerability - SIR: Medium 11) Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability - SIR: Medium 12) Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability - SIR: Medium +-------------------------------------------------------------------- 1) Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026 CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313 SIR: Critical CVSS Score v(3.1): 9.9 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-sdwan-faLcR3K ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-sdwan-faLcR3K"] +-------------------------------------------------------------------- 2) Cisco IOS XE Software Security Hardening Release: August 2026 CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273 SIR: Critical CVSS Score v(3.1): 9.8 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ"] +-------------------------------------------------------------------- 3) Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability CVE-2026-20301 SIR: High CVSS Score v(3.1): 8.6 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xmcp-thbAr34t ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xmcp-thbAr34t"] +-------------------------------------------------------------------- 4) Cisco Integrated Management Controller Argument Injection Vulnerabilities CVE-2026-20200, CVE-2026-20288 SIR: High CVSS Score v(3.1): 8.8 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-arg-inject-upSHdMfU ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-arg-inject-upSHdMfU"] +-------------------------------------------------------------------- 5) Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability CVE-2026-20263 SIR: High CVSS Score v(3.1): 8.6 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-bing-MGHrFAkd ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-bing-MGHrFAkd"] +-------------------------------------------------------------------- 6) Cisco IOS XE Software SNMP Denial of Service Vulnerability CVE-2026-20124 SIR: High CVSS Score v(3.1): 7.7 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-snmp-dos-ZAqNm4MD ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-snmp-dos-ZAqNm4MD"] +-------------------------------------------------------------------- 7) Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability CVE-2026-20294 SIR: Medium CVSS Score v(3.1): 6.5 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-infodis-SPuJBDCe ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-infodis-SPuJBDCe"] +-------------------------------------------------------------------- 8) Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability CVE-2026-20311 SIR: Medium CVSS Score v(3.1): 6.3 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-PtAODAWW ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-PtAODAWW"] +-------------------------------------------------------------------- 9) Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability CVE-2026-20289 SIR: Medium CVSS Score v(3.1): 5.7 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-qBXjfmWm ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-qBXjfmWm"] +-------------------------------------------------------------------- 10) Cisco Integrated Management Controller Cross-Site Scripting Vulnerability CVE-2026-20198 SIR: Medium CVSS Score v(3.1): 4.8 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-xss-7EhBFxBp ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-xss-7EhBFxBp"] +-------------------------------------------------------------------- 11) Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability CVE-2026-20028 SIR: Medium CVSS Score v(3.1): 5.0 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ts-agent-fw-bypass-MYBTMrev ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ts-agent-fw-bypass-MYBTMrev"] +-------------------------------------------------------------------- 12) Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability CVE-2026-20308 SIR: Medium CVSS Score v(3.1): 4.3 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-dos-qdc7qx3 ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-dos-qdc7qx3"] For additional information on Cisco's vulnerability management, disclosure cadence, and software patching strategy, see Cisco's Transition to a Risk-Based Vulnerability Disclosure Model: https://sec.cloudapps.cisco.com/security/center/resources/risk-based-disclosure ========================================================= + CERT-RENATER | tel : 01-53-94-20-44 + + 23/25 Rue Daviel | fax : 01-53-94-20-41 + + 75013 Paris | email:cert@support.renater.fr + =========================================================