Improper Link Resolution Vulnerability in Cisco Catalyst SD-WAN
CVE-2026-20310

9.1CRITICAL

Key Information:

Vendor

Cisco
Status
Cisco Catalyst Sd-wan Controller
Cisco Catalyst Sd-wan Manager
Vendor
CVE Published:
5 August 2026

Badges

👾 Exploit Exists

What is CVE-2026-20310?

The vulnerability found in Cisco Catalyst SD-WAN relates to improper link resolution before file access, posing potential security risks. Discovered during an extensive internal security review, these vulnerabilities highlight the importance of proactive measures in safeguarding network devices. Users are encouraged to apply the latest hardening releases to mitigate the risks associated with this issue.

Affected Version(s)

Cisco Catalyst SD-WAN Controller 20.6.4

Cisco Catalyst SD-WAN Controller 20.9.2

Cisco Catalyst SD-WAN Controller 20.3.6

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.