CVE-2026-20304
CriticalCVSS 9.9Summary
As part of an internal security review in Cisco Catalyst SD-WAN, multiple vulnerabilities related to improper access control (CWE-284) were discovered. A hardened software release addressing these issues has been issued.
Risk Assessment
These vulnerabilities may allow unauthorized access to system resources, potentially leading to confidentiality and integrity breaches.
Recommendation
It is recommended to update Cisco Catalyst SD-WAN software to the latest hardened version as soon as possible.
Original NVD description (English source)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20304 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.