HIGH CWE-1284
CVE-2026-20313
Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities
Cisco·Catalyst SD-WAN Controller
7.7/ 10
CVSS 3.1
High severity
0.42%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 37% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Aug 5, 2026
- Updated
- Aug 14, 2026
- First covered
- Aug 6, 2026
- Latest story
- 3 months ago
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.The vulnerabilities tracked by CVE-2026-20313 are related to Improper link resolution before file access issues that are grouped under the Common Weakness Enumeration (CWE) CWE-1284.
CWE-1284Improper Validation of Specified Quantity in Input
Attack profile
Attack vectorNetwork
ComplexityLow
PrivilegesLow
User interactionNone
ScopeChanged
ConfidentialityNone
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HAffected products
- Cisco Catalyst SD-WAN Controller20.6.420.9.220.3.620.7.2
- Cisco Catalyst SD-WAN Manager20.1.1219.2.118.4.418.4.5