Cisco has released a security update for IOS XE Software, addressing seven vulnerabilities found internally, including a critical flaw rated CVSS 9.8 that could allow unauthenticated attackers to execute code remotely. Unlike typical disclosures tied to external researcher reports or bug bounty submissions, this update was developed internally using existing QA procedures and cutting-edge AI tools. This flaw enables remote exploitation without authentication and user interaction, impacting devices running Cisco IOS XE software across various releases 17.9, 17.12, 17.15, 17.18, and 26.1.
Affected Products and Fixes The flaws impact Cisco IOS XE Software in both autonomous and controller modes on devices of the following models: Catalyst 3650 and 3850 Series Switches were excluded as they do not run these releases; any confirmed impacts will be addressed separately. However, due to the severity and network-facing nature of IOS XE deployments, threat actors are anticipated to reverse-engineer patches quickly once technical details become available, following a pattern observed with previous Cisco IOS XE CVEs. Enhance your SOC by gaining comprehensive phishing visibility to minimize Mean Time To Resolution (MTTR).
