In August 2026 Cisco disclosed CVE-2026-20349, an 8.6 CVSS flaw in the SSL VPN of its ASA and FTD firewalls: one unauthenticated HTTP request forces the device to reload and drops VPN access for every remote worker. With no workaround available, patching is the only fix — and the flaw is already being exploited in the wild.
On August 5, 2026, Cisco shipped a massive hardening release for IOS XE and SD-WAN, bundling fixes for 12 vulnerabilities uncovered during an internal AI-assisted security review. Three reach CVSS 9.9. The era of AI-accelerated vulnerability discovery has hit the network hardware industry — and Cisco just showed what that looks like in production.
On July 29, 2026, Cisco disclosed two zero-day vulnerabilities in Secure Firewall Management Center: static hardcoded credentials (CVE-2026-20316) and a CVSS 10.0 authentication bypass (CVE-2026-20079). Check your logs immediately — both flaws share the same indicator of compromise.
The MEF published the MEF 70 standard in July 2019, Broadcom acquired VMware VeloCloud in November 2023, and FlexiWAN crossed 4,000 accounts in 2025 with open-source SD-WAN. The SD-WAN market hit $3.4 billion in 2024 and is projected to reach $13.7 billion by 2028 according to Gartner — here is why your MPLS contract is becoming a subscription to a horse-drawn carriage.
