Skip to content
OpenAdvisories
High NCSC-2026-0277 5 CVEs

Kwetsbaarheden verholpen in Cisco Catalyst SD-WAN

Published Aug 6, 2026 · Updated Aug 6, 2026 · nl

Vendor: Cisco Product: Catalyst SD-WAN Controller Product: Catalyst SD-WAN Manager

Summary

Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Catalyst SD-WAN.

Details

Interpretaties
De gevonden problemen betreffen onder andere onjuiste inputvalidatie, onjuiste toegangscontrole, onjuiste linkresolutie voorafgaand aan bestandsaccess en het opslaan van gevoelige informatie in cleartext. Door deze kwetsbaarheden kan de software mogelijk onbedoeld gedrag vertonen bij het verwerken van invoer, het controleren van toegangsrechten, het openen van bestanden, en het beschermen van gevoelige data.

Oplossingen
Cisco heeft updates uitgebracht. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 5

  • Critical 9.9
    CVE-2026-20303 Public exploit

    Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple inter…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
  • Critical 9.9
    CVE-2026-20304

    Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that address multiple inte…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
  • Critical 9.1
    CVE-2026-20310

    Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple inter…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
  • High 8.8
    CVE-2026-20312

    Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple inter…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
  • High 7.7
    CVE-2026-20313

    Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple inter…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices

Revision history

  1. #1.0.0

    Initiele versie

References

  • Reference
    https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-sdwan-faLcR3K