CVE-2026-20312highCWE-312

CVE-2026-20312: falha de alta gravidade em Cisco Catalyst SD-WAN Controller

Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cisco Catalyst SD-WAN Manager+ Monitorar Cisco Catalyst SD-WAN Controller

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Ela tem alerta oficial do governo brasileiro.

ssvc Trackcvss 8.8epss 0.3%
Alerta oficial no Brasil

O governo federal publicou alerta, recomendação ou boletim que cita esta vulnerabilidade.

Fonte: CTIR Gov (GSI) e CISC Gov.br, sob licença CC BY-ND 3.0.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20312 are related to Cleartext storage of sensitive information issues that are grouped under the Common Weakness Enumeration (CWE) CWE-312.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco Catalyst SD-WAN ControllerCisco · Cisco Catalyst SD-WAN Manager
CVEs relacionadas — Cisco Catalyst SD-WAN Controller

No mesmo produto, das mais perigosas para as menos.

CVE-2026-20182CRITICALCisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityEPSS 91.8%KEVCVE-2026-20127CRITICALCisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityEPSS 87.6%KEVCVE-2026-76504CRITICALCisco Catalyst SD-WAN Manager System Account Authorization Bypass VulnerabilityEPSS 38.9%KEVCVE-2026-20133MEDIUMCVE-2026-20133EPSS 35.3%KEVCVE-2026-20262MEDIUMCisco Catalyst SD-WAN Manager Arbitrary File Write VulnerabilityEPSS 29.1%KEVCVE-2026-20122MEDIUMCisco Catalyst SD-WAN Manager Arbitrary File Overwrite VulnerabilityEPSS 25.8%KEV