Cisco Catalyst SD-WAN vulnerabilities

7 known CVE vulnerabilities in Cisco Catalyst SD-WAN, translated and rated.

CVE-2026-20310Critical
Vulnerability in Cisco Catalyst SD-WAN related to improper link resolution before file access (CWE-59). Discovered during internal security review, addressed in a software hardening release.
CVE-2026-20304Critical
As part of an internal security review in Cisco Catalyst SD-WAN, multiple vulnerabilities related to improper access control (CWE-284) were discovered. A hardened software release addressing these issues has been issued.
CVE-2026-20303Critical
Cisco Catalyst SD-WAN contains a vulnerability related to improper input validation (CWE-20). It was discovered during an internal security review and addressed in software hardening releases.
CVE-2026-20245HighActively exploited
A vulnerability in the CLI of Cisco Catalyst SD-WAN devices (Controller, Manager, Validator) allows an authenticated local attacker with netadmin privileges to execute arbitrary commands as root by uploading a crafted file. The issue is due to insufficient input validation. Cisco has observed limited exploitation resulting in configuration changes on edge devices.
CVE-2026-20133MediumActively exploited
A vulnerability in Cisco Catalyst SD-WAN Software due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could access the vshell and read sensitive information from the underlying operating system.
CVE-2026-20313High
As part of an internal security review in Cisco Catalyst SD-WAN, multiple vulnerabilities related to improper link resolution before file access (CWE-1284) were discovered. Hardened software releases addressing these issues have been issued.
CVE-2026-20312High
As part of an internal security review in Cisco Catalyst SD-WAN, multiple vulnerabilities related to cleartext storage of sensitive information (CWE-312) were discovered. Hardened software releases addressing these issues have been issued.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS