EUVD-2026-53460

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that address multiple internally discovered vulnerabilities. The...

CVE-2026-20304

Cisco CVE-2026-20304 relates to improper access control (CWE-284) in Cisco Catalyst SD-WAN. The connected documents indicate a hardening software release addressing multiple internally discovered vulnerabilities. Metrics show a 3.1 CVSSv3.1 base score of 9.9 (CRITICAL) with NETWORK attack vector,...

Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to insufficient access control enforcement for specific template types...

Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

PT-2026-68248

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN affected versions not specified Description An issue exists involving improper link resolution before file access. This occurs when the system does not properly validate symbolic links or shortcuts before accessing the...

CVE-2026-20313: Improper Validation of Specified Quantity in Input

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

PT-2026-68246

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN affected versions not specified Description Improper access control issues exist within the software, categorized under CWE-284, which refers to a failure to properly restrict access to a component or function...

PT-2026-68251

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN affected versions not specified Description An issue exists involving improper link resolution before file access. This occurs when the system does not correctly validate symbolic links or shortcuts before accessing the...

CVE-2026-20304: Improper Access Control

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that address multiple internally discovered vulnerabilities. The...

CVE-2026-20310: Improper Link Resolution Before File Access

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-20294: Cleartext Transmission of Sensitive Information

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to insufficient access control enforcement for specific template types...

PT-2026-68250

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN affected versions not specified Description Sensitive information is stored in cleartext, a condition where data is saved without encryption, making it accessible to unauthorized parties who gain access to the storage...

CVE-2026-20312: Cleartext Storage of Sensitive Information

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-20303: Improper Input Validation

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

PT-2026-68245

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN affected versions not specified Description Improper input validation issues exist within the software. These issues are categorized under CWE-20, which refers to a failure to properly validate input before it is processe...

PT-2026-68243

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Manager affected versions not specified Description An issue in the web-based management interface allows an authenticated, remote attacker to view sensitive information in clear text. This occurs due to insufficient acce...

CVE-2026-63456

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

CVE-2026-63456

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

CVE-2026-63455: Missing Authentication for Critical Function

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

PT-2026-67776

Name of the Vulnerable Software and Affected Versions HPE Networking SD-WAN Orchestrator affected versions not specified Description Multiple issues in the REST API interface allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. This could...