Cisco: 400G push, SD‑WAN risk
Cisco joined the 400G Optical MSA Alliance and is rolling AI‑optimized data‑center gear like the N9100 switch built for Blackwell GPUs, signaling a push to standardize 400G+ optics for AI clusters. At the same time, researchers warned about overlooked, high‑severity flaws in Cisco SD‑WAN—highlighting security gaps even as Cisco doubles down on AI networking. (simplywall.st) (networkworld.com) (cybersecuritydive.com)
Founding members of the 400G Optical MSA include Broadcom, Cisco, MACOM, NVIDIA and Semtech, and the MSA’s initial charter targets single‑wavelength 400G links with reach objectives up to 500 meters. (businesswire.com)) The MSA spec documents call out dual operating modes at 425 Gbps (212.5 GBaud PAM4) and 453.75 Gbps (226.875 GBaud PAM4), optional inner (128,120) Hamming FEC and end‑to‑end RS(544,514) KP4 FEC, plus link‑training and TXFIR-based transmitter architectures. (400gopticalmsa.com)) Cisco’s N9100 platform uses NVIDIA Spectrum‑X switching silicon and was presented in Cisco/NVIDIA joint materials tied to Nvidia’s GTC reference architectures, with Cisco positioning the N9100 for NVIDIA Cloud Partner and Cisco Cloud Reference Architecture deployments. (sdxcentral.com)) Cisco’s broader AI‑stack messaging lists integrations across Cisco Silicon One P200 switch chips and Nvidia‑aligned compute POD configurations, with public Cisco messaging dating the major N9100/NVIDIA announcements to an October 28, 2025 GTC release window. (prnewswire.com)) The SD‑WAN crisis centers on CVE‑2026‑20127, a remote authentication‑bypass in Cisco Catalyst SD‑WAN Controller/Manager rated as maximum/critical and tracked as exploited in the wild by multiple agencies. (nvd.nist.gov)) Researchers pointed out a separate high‑severity issue, CVE‑2026‑20133, tied to insufficient file system access restrictions and arbitrary file overwrite risks that may be attracting active exploitation attention alongside the well‑known zero‑day. (cybersecuritydive.com)) U.S. and allied cyber agencies have issued joint alerts and an emergency directive, CISA added the zero‑day to its Known Exploited Vulnerabilities list and Cisco has published advisories and released software updates covering CVE‑2026‑20127 plus a set of related SD‑WAN fixes. (cisa.gov))
