CVE-2026-20310

Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access

Severity
Critical 9.1
CVSS 3.1
Exploited
Not listed
EPSS
Discovered by
Vendor
Published by the vendor
Published
Aug 5, 2026
Assigned by cisco

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20310 are related to improper link resolution before file access issues that are grouped under the Common Weakness Enumeration (CWE) CWE-59.

Weakness: CWE-59

Affected products

Vendor Product Category Matched by
Cisco Cisco Catalyst SD-WAN Manager Network & Security Management cna-assigner
Vendor-reported affected versions (2)
  • Cisco · Cisco Catalyst SD-WAN Controller
  • Cisco · Cisco Catalyst SD-WAN Manager