HIGH CWE-312
CVE-2026-20312
Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities
Cisco·Catalyst SD-WAN Controller
8.8/ 10
CVSS 3.1
High severity
0.31%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 24% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Aug 5, 2026
- Updated
- Aug 14, 2026
- First covered
- Aug 6, 2026
- Latest story
- 3 months ago
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.The vulnerabilities tracked by CVE-2026-20312 are related to Cleartext storage of sensitive information issues that are grouped under the Common Weakness Enumeration (CWE) CWE-312.
CWE-312Cleartext Storage of Sensitive Information
Attack profile
Attack vectorNetwork
ComplexityLow
PrivilegesLow
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HAffected products
- Cisco Catalyst SD-WAN Controller20.6.420.9.220.3.620.7.2
- Cisco Catalyst SD-WAN Manager20.1.1219.2.118.4.418.4.5