Improper Input Validation in Cisco Catalyst SD-WAN
CVE-2026-20303

9.9CRITICAL

Key Information:

Vendor

Cisco
Status
Cisco Catalyst Sd-wan Controller
Cisco Catalyst Sd-wan Manager
Vendor
CVE Published:
5 August 2026

Badges

👾 Exploit Exists

What is CVE-2026-20303?

Cisco's Catalyst SD-WAN product has been identified with vulnerabilities stemming from improper input validation, as revealed during an internal security review. These issues can potentially expose the system to various security risks, underscoring the importance of implementing software hardening measures. Users are encouraged to apply the latest updates provided by Cisco to mitigate these vulnerabilities effectively. For more details, refer to the official Cisco advisory.

Affected Version(s)

Cisco Catalyst SD-WAN Controller 20.6.4

Cisco Catalyst SD-WAN Controller 20.9.2

Cisco Catalyst SD-WAN Controller 20.3.6

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.