Multiple vulnerabilities in Cisco products (20 August 2026)

unknownCVE-2026-20317 CVE-2026-20358 CVE-2026-20359 CVE-2026-20231 CVE-2026-20318 CVE-2026-20030

Multiple vulnerabilities have been discovered in Cisco products. Some of them allow an attacker to cause arbitrary code execution remotely, privilege escalation and breach of data confidentiality.

CSIRTS triage

vendor: Cisco Remote code execution Privilege escalation Information disclosure

What: Multiple vulnerabilities across Cisco products allow remote code execution, privilege escalation, and data confidentiality breach.
Who is affected: Organizations deploying various Cisco products.
Urgency: High priority; RCE and privilege escalation indicate critical severity across Cisco product line.
Action: Identify affected Cisco products and apply vendor security updates for all eight CVEs listed.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-08-20
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1058/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-203170.44% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-203580.46% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 38% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-203590.36% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 29% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-202310.50% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 41% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-203180.35% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 28% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-200300.55% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 44% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-203150.41% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 35% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-203200.39% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 32% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-203570.55% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 44% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-203190.37% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 30% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-20317	coverage & exploitation status	NVD · CVE.org
CVE-2026-20358	coverage & exploitation status	NVD · CVE.org
CVE-2026-20359	coverage & exploitation status	NVD · CVE.org
CVE-2026-20231	coverage & exploitation status	NVD · CVE.org
CVE-2026-20318	coverage & exploitation status	NVD · CVE.org
CVE-2026-20030	coverage & exploitation status	NVD · CVE.org
CVE-2026-20315	coverage & exploitation status	NVD · CVE.org
CVE-2026-20320	coverage & exploitation status	NVD · CVE.org
CVE-2026-20357	coverage & exploitation status	NVD · CVE.org
CVE-2026-20319	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for Cisco products

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

unknownCisco Products Multiple Vulnerabilitieshkcert · 2026-09-03
highCVE-2026-20280: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS…nvd · 2026-09-02
criticalCVE-2026-20279: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS…nvd · 2026-09-02
highCVE-2026-20278: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS…nvd · 2026-09-02
highCVE-2026-20277: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS…nvd · 2026-09-02
highCVE-2026-20276: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS…nvd · 2026-09-02