Cisco Patches Critical SD-WAN, IOS XE, FMC Vulnerabilities

Cisco disclosed and patched approximately two dozen vulnerabilities across Catalyst SD-WAN, IOS XE, and Secure Firewall Management Center, with the most critical flaws enabling authentication bypass, command injection, and improper input validation — some scoring a perfect 10.0 on the CVSS scale. These vulnerabilities are particularly dangerous because they affect core network infrastructure components that organizations rely on for routing, segmentation, and security enforcement. The existence of public proof-of-concept exploit code for at least one high-severity vulnerability significantly shortens the window between disclosure and active exploitation. Organizations that delay patching critical network appliances expose themselves to full network compromise, as attackers can leverage authentication bypasses to gain unauthorized administrative access. This incident underscores that unpatched network infrastructure remains one of the highest-risk attack surfaces in any enterprise environment.