Vulnerabilities

Cisco patches critical Catalyst SD-WAN, IOS XE and Secure Firewall Management Center flaws

Source: Badtech.org Vulnerabilities · Radar

SecurityWeek reported that Cisco released fixes for roughly two dozen vulnerabilities across its products, including critical issues in Catalyst SD-WAN, IOS XE and Secure Firewall Management Center.

For Catalyst SD-WAN, SecurityWeek and Secure ISS said Cisco identified CVE-2026-20303, CVE-2026-20304 and CVE-2026-20310 as critical vulnerabilities, and listed fixed releases 20.9.10, 20.12.8.1, 20.15.6, 20.18.4 and 26.1.2 by branch. The reporting also listed IOS XE fixes for CVE-2026-20272 and CVE-2026-20267, with fixed releases including 17.9.10, 17.12.8, 17.15.6, 17.18.4 or 17.18.4a, and 26.1.2.

SecurityWeek said Cisco also patched CVE-2026-20079 in Secure Firewall Management Center, described as a critical authentication-bypass flaw that could let a remote unauthenticated attacker execute scripts and commands and gain root privileges. The brief says no workarounds were available for the Catalyst SD-WAN and IOS XE hardening issues, and the reporting said Cisco was not aware of exploitation at disclosure time.

Sources

N-able N-central auth-bypass flaw is under active exploitation; customers told to verify 2026.3.1.7

N-able’s N-central RMM platform is under active exploitation through an authentication-bypass flaw, with Huntress reporting multiple affected organizations and observed follow-on activity including reconnaissance, process-list requests, and abuse of the Take Control remote-access feature on downstream hosts. N-central is a remote monitoring

Water utility cyber incidents across at least seven U.S. states disrupted monitoring and control across at least seven U.S. states

CBS News, NBC News, and CNN Newsource via KEYT reported that the FBI and EPA said water and wastewater utilities in at least seven U.S. states experienced malicious cyber incidents, with some activity degrading operations. The reporting says the activity targeted internet-facing programmable logic controllers, or PLCs, which

Broadcom patches critical VMware vCenter and ESXi flaws including auth bypass, RCE, and VM escape

Security Affairs, Mallory.ai, and Field Effect reported that Broadcom released patches on July 29 for five VMware vulnerabilities affecting ESXi, vCenter, Workstation, and Fusion, including three rated critical. They said the most severe issue, CVE-2026-59309, is a critical vCenter authentication bypass rated CVSS 9.8, and that

Sources

Read more

N-able N-central auth-bypass flaw is under active exploitation; customers told to verify 2026.3.1.7

Water utility cyber incidents across at least seven U.S. states disrupted monitoring and control across at least seven U.S. states

Broadcom patches critical VMware vCenter and ESXi flaws including auth bypass, RCE, and VM escape