Forwarded from TWCERTCC Cybersecurity Alert TWCERTCC-200-202608-00000005

Cisco Catalyst SD-WAN is Cisco's cloud-centric software-defined wide area network architecture, providing centralized management, secure encryption, and application performance optimization to ensure reliable connectivity across multi-cloud environments. The Catalyst SD-WAN software development team discovered multiple security vulnerabilities during an internal security review and has completed remediation.

Currently, there is no evidence indicating that these vulnerabilities are being actively exploited. To assist customers in deploying security updates in a timely manner and simplify the vulnerability disclosure process, Cisco has publicly released the relevant vulnerability information and remediation recommendations. CVE-2026-20303 (CVSS: 9.9) is an Improper Input Validation vulnerability; CVE-2026-20304 (CVSS: 9.9) is an Improper Access Control vulnerability; CVE-2026-20310 (CVSS: 9.9) is an Improper Link Resolution Before File Access vulnerability; CVE-2026-20312 (CVSS: 8.8) is a Cleartext Storage of Sensitive Information vulnerability.