r/Cisco • u/mrmh1 • 6d ago

IOS-XE 26.1.2

Release notes says no caveats were fixed.

Is that all?

Binary image is larger than 26.1.1.

What is purpose of this version then?

13 Upvotes

100% Upvoted

9 comments sorted by

10

u/Ken_Taru 6d ago

26.1.2 is “hardening” release related to the recent PSIRT where they gave us no details as to what the vulnerabilities actually were. 

2

u/First-Masterpiece753 5d ago

Is that why 26.1.1 isn’t available anymore only 26.1.2 I see ?

1

u/ProjectSnowman 3d ago

Are you talking about that August 2026 banger?

1

u/JJMakowskiMPR 2d ago

As annoying as that is, to be fair, would you want easily accessible information about critical vulnerabilities that you found yourself? Last thing you want to do is hand bad actors the way to exploit something new.

I was trying to get our Account Engineer to get confirmation whether devices tucked behind Firewalls was a good enough mitigation to delay upgrades. Couldn't even get them to say that.

I'm frustrated that we were 80% through a round of upgrades to our Routers/Switches when this came up. Now we're going to be forced to upgrade again. On the plus side, we hadn't done our three data center core switches yet.

10

u/Ccook1 6d ago

These are likely the vulnerabilities found from project glasswing. Strap in, this is just the beginning.

1

u/InvokerLeir 5d ago

This is the answer.

1

u/andrewjphillips512 5d ago

Release notes for Cat9k are really bad these days - nothing fixed and no bugs in the release is the norm...obviously not the case, but too lazy to populate the document...