CVE-2026-20303
CriticalCVSS 9.9Summary
Cisco Catalyst SD-WAN contains a vulnerability related to improper input validation (CWE-20). It was discovered during an internal security review and addressed in software hardening releases.
Risk Assessment
The vulnerability may allow an attacker to inject unexpected data, potentially leading to unauthorized actions or disruption of SD-WAN operations.
Recommendation
It is recommended to promptly apply the latest Cisco Catalyst SD-WAN software releases containing security fixes and monitor Cisco advisories for details.
Original NVD description (English source)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20303 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) CWE-20.