Description
A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco Catalyst Center | 2.3.7.0-VA, 2.3.7.5-VA, 2.3.7.6-VA, 2.3.7.7-VA, 2.3.7.9-VA, 3.1.3, 3.1.3-VA, 2.3.7.10-VA, 3.1.5, 3.1.5-VA, 3.1.5-VA on AWS, 3.1.5-RevUp, 3.1.6, 3.1.6-VA, 3.1.6-BETA, 3.1.6-GSMU100, 3.1.6-VA-GSMU100 | — |
Advisories 2
- WID-SEC-2026-2174 Cisco Catalyst Center: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jul 2, 2026
- NCSC-2026-0218 Kwetsbaarheid verholpen in Cisco Catalyst Center NCSC-NL (Netherlands) · Jul 2, 2026