Cisco Advance Notification for Publication of August 5, 2026, Security Advisories
On August 5, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026 CVE-2026-20303 CVE-2026-20304 CVE-2026-20310 CVE-2026-20312 CVE-2026-20313 Critical 9.9 Cisco IOS XE Software Security Hardening Release: August 2026 CVE-2026-20267 CVE-2026-20268 CVE-2026-20269 CVE-2026-20270 CVE-2026-20271 CVE-2026-20272 CVE-2026-20273 Critical 9.8 Cisco Integrated Management Controller Argument Injection Vulnerabilities CVE-2026-20200 CVE-2026-20288 High 8.8 Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability CVE-2026-20301 High 8.6 Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability CVE-2026-20263 High 8.6 Cisco IOS XE Software SNMP Denial of Service Vulnerability CVE-2026-20124 High 7.7 Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability CVE-2026-20294 Medium 6.5 Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability CVE-2026-20311 Medium 6.3 Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability CVE-2026-20289 Medium 5.7 Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability CVE-2026-20028 Medium 5.0 Cisco Integrated Management Controller Cross-Site Scripting Vulnerability CVE-2026-20198 Medium 4.8 < Security Impact Rating: Informational
CSIRTS triage
- What
- Cisco will publish security advisories on August 5, 2026, for various products.
- Who is affected
- Users of Cisco products listed for upcoming advisories.
- Urgency
- Remediation is important to address vulnerabilities that will be disclosed.
- Action
- Prepare to upgrade to fixed software versions once advisories are published.
AI-assisted analysis generated from the source advisory — verify against the original.
Details
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-203030.32% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 25% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203040.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 20% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203100.41% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 34% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203120.26% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 18% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203130.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 20% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-202670.26% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 18% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-202680.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-202690.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-202700.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-202710.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 20% of all EPSS-scored CVEs.
Referenced CVEs
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownMultiple vulnerabilities in Cisco IOS XE (August 25, 2026)cert-fr-avis
- unknownexploitedCisco Products Multiple Vulnerabilitieshkcert
- mediumCisco Catalyst SD-WAN Manager Information Disclosure Vulnerabilitycisco-psirt
- unknownNCSC-2026-0279 [1.00] [M/H] Vulnerabilities patched in Cisco IOS XE Softwarencsc-nl
- high[NEW] [high] Cisco IOS: Vulnerability Enables Denial of Servicecert-bund
- high[NEW] [high] Cisco IOS XE: Multiple Vulnerabilitiescert-bund
- high[NEW] [high] Cisco Integrated Management Controller: Multiple Vulnerabilitiescert-bund
- high[NEW] [high] Cisco Catalyst SD-WAN Manager: Multiple Vulnerabilitiescert-bund
- unknownNCSC-2026-0277 [1.00] [M/H] Vulnerabilities patched in Cisco Catalyst SD-WANncsc-nl
- unknownCisco Products Multiple Vulnerabilitieshkcert
- unknownMultiple vulnerabilities in Cisco products (August 6, 2026)cert-fr-avis
- highCVE-2026-20313: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cat…nvd
Recent advisories for Cisco Advance Notification
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- unknownCisco Advance Notification for Publication of September 16, 2026, Security Advisoriescisco-psirt · 2026-09-09
- criticalCisco Advance Notification for Publication of September 2, 2026, Security Advisoriescisco-psirt · 2026-09-02
- criticalCisco Advance Notification for Publication of August 19, 2026, Security Advisoriescisco-psirt · 2026-08-19
- highCisco Advance Notification for Publication of July 15, 2026, Security Advisoriescisco-psirt · 2026-07-15
- highCisco Advance Notification for Publication of July 1, 2026, Security Advisoriescisco-psirt · 2026-07-01
More from Cisco Security Advisories
- criticalCisco IOS XR Software Security Hardening Release: September 20262026-09-11
- criticalCisco Secure Firewall Management Center Software Authentication Bypass Vulnerability2026-09-09
- unknownCisco Advance Notification for Publication of September 16, 2026, Security Advisories2026-09-09
- highCisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability2026-09-08
- mediumCisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities2026-09-08