CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

Cisco Advance Notification for Publication of August 5, 2026, Security Advisories

criticalpublic exploitCVE-2026-20303CVE-2026-20304CVE-2026-20310CVE-2026-20312CVE-2026-20313CVE-2026-20267
On August 5, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026 CVE-2026-20303 CVE-2026-20304 CVE-2026-20310 CVE-2026-20312 CVE-2026-20313 Critical 9.9 Cisco IOS XE Software Security Hardening Release: August 2026 CVE-2026-20267 CVE-2026-20268 CVE-2026-20269 CVE-2026-20270 CVE-2026-20271 CVE-2026-20272 CVE-2026-20273 Critical 9.8 Cisco Integrated Management Controller Argument Injection Vulnerabilities CVE-2026-20200 CVE-2026-20288 High 8.8 Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability CVE-2026-20301 High 8.6 Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability CVE-2026-20263 High 8.6 Cisco IOS XE Software SNMP Denial of Service Vulnerability CVE-2026-20124 High 7.7 Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability CVE-2026-20294 Medium 6.5 Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability CVE-2026-20311 Medium 6.3 Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability CVE-2026-20289 Medium 5.7 Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability CVE-2026-20028 Medium 5.0 Cisco Integrated Management Controller Cross-Site Scripting Vulnerability CVE-2026-20198 Medium 4.8 < Security Impact Rating: Informational

CSIRTS triage

What
Cisco will publish security advisories on August 5, 2026, for various products.
Who is affected
Users of Cisco products listed for upcoming advisories.
Urgency
Remediation is important to address vulnerabilities that will be disclosed.
Action
Prepare to upgrade to fixed software versions once advisories are published.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source
Cisco Security Advisories (INTL · vendor-psirt · site)
Severity
critical
Published
2026-08-05
Exploitation
Not in CISA KEV at last sync

Original advisory: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-L4XfJg8S?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20August%205,%202026,%20Security%20Advisories%26vs_k=1

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-20303coverage & exploitation statusNVD · CVE.org
CVE-2026-20304coverage & exploitation statusNVD · CVE.org
CVE-2026-20310coverage & exploitation statusNVD · CVE.org
CVE-2026-20312coverage & exploitation statusNVD · CVE.org
CVE-2026-20313coverage & exploitation statusNVD · CVE.org
CVE-2026-20267coverage & exploitation statusNVD · CVE.org
CVE-2026-20268coverage & exploitation statusNVD · CVE.org
CVE-2026-20269coverage & exploitation statusNVD · CVE.org
CVE-2026-20270coverage & exploitation statusNVD · CVE.org
CVE-2026-20271coverage & exploitation statusNVD · CVE.org
CVE-2026-20272coverage & exploitation statusNVD · CVE.org
CVE-2026-20273coverage & exploitation statusNVD · CVE.org
CVE-2026-20200coverage & exploitation statusNVD · CVE.org
CVE-2026-20288coverage & exploitation statusNVD · CVE.org
CVE-2026-20301coverage & exploitation statusNVD · CVE.org
CVE-2026-20263coverage & exploitation statusNVD · CVE.org
CVE-2026-20124coverage & exploitation statusNVD · CVE.org
CVE-2026-20294coverage & exploitation statusNVD · CVE.org
CVE-2026-20311coverage & exploitation statusNVD · CVE.org
CVE-2026-20289coverage & exploitation statusNVD · CVE.org
CVE-2026-20028coverage & exploitation statusNVD · CVE.org
CVE-2026-20198coverage & exploitation statusNVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for Cisco Advance Notification

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

More from Cisco Security Advisories