9.9
Critical
CVE-2026-20303 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering…
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20303 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) CWE-20.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Catalyst SD-WAN Controller 26.1 | 26.1.1 → 26.1.1.2 | No fix stated |
| Cisco Catalyst SD-WAN Controller 20.18 | 20.18.1 → 20.18.3.1 | No fix stated |
| Cisco Catalyst SD-WAN Controller | 20.16.1 | No fix stated |
| Cisco Catalyst SD-WAN Controller 20.15 | 20.15.1 → 20.15.6 | No fix stated |
| Cisco Catalyst SD-WAN Controller | 20.14.1 | No fix stated |
| Cisco Catalyst SD-WAN Controller | 20.13.1 | No fix stated |
| Cisco Catalyst SD-WAN Controller 20.12 | 20.12.1 → 20.12.7.2 | No fix stated |
| Cisco Catalyst SD-WAN Controller 20.11 | 20.11.1 → 20.11.1.1 | No fix stated |
| Cisco Catalyst SD-WAN Controller 20.10 | 20.10.1 → 20.10.1.1 | No fix stated |
Show the 42 other branches Hide the 42 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Catalyst SD-WAN Controller 20.9 | 20.9.1 → 20.9.9.2 | No fix stated |
| Cisco Catalyst SD-WAN Controller | 20.8.1 | No fix stated |
| Cisco Catalyst SD-WAN Controller 20.7 | 20.7.1 → 20.7.2 | No fix stated |
| Cisco Catalyst SD-WAN Controller 20.6 | 20.6.1 → 20.6.8 | No fix stated |
| Cisco Catalyst SD-WAN Controller | 20.5.1 | No fix stated |
| Cisco Catalyst SD-WAN Controller 20.4 | 20.4.1 → 20.4.2.3 | No fix stated |
| Cisco Catalyst SD-WAN Controller 20.3 | 20.3.1 → 20.3.8 | No fix stated |
| Cisco Catalyst SD-WAN Controller 20.1 | 20.1.1 → 20.1.12 | No fix stated |
| Cisco Catalyst SD-WAN Controller | 19.3.0 | No fix stated |
| Cisco Catalyst SD-WAN Controller 19.2 | 19.2.0 → 19.2.929 | No fix stated |
| Cisco Catalyst SD-WAN Controller | 19.1.0 | No fix stated |
| Cisco Catalyst SD-WAN Controller 19.0 | 19.0.0 → 19.0.1a | No fix stated |
| Cisco Catalyst SD-WAN Controller 18.4 | 18.4.0 → 18.4.303 | No fix stated |
| Cisco Catalyst SD-WAN Controller 18.3 | 18.3.0 → 18.3.8 | No fix stated |
| Cisco Catalyst SD-WAN Controller | 18.2.0 | No fix stated |
| Cisco Catalyst SD-WAN Controller 17.2 | 17.2.4 → 17.2.10 | No fix stated |
| Cisco Catalyst SD-WAN Manager 26.1 | 26.1.1 → 26.1.1.2 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 26.0.1 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.18 | 20.18.1 → 20.18.3.1 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 20.16.1 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.15 | 20.15.1 → 20.15.6 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 20.14.1 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 20.13.1 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.12 | 20.12.1 → 20.12.501 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.11 | 20.11.1 → 20.11.1.2 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.10 | 20.10.1 → 20.10.1.2 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.9 | 20.9.1EFT2 → 20.9.9.2 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 20.8.1 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.7 | 20.7.1EFT2 → 20.7.2 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.6 | 20.6.0.18.3 → 20.6.8 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.5 | 20.5.0.1.1 → 20.5.1.2 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.4 | 20.4.1 → 20.4.2.3 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.3 | 20.3.1 → 20.3.814 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.1 | 20.1.1 → 20.1.12 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 19.3.0 | No fix stated |
| Cisco Catalyst SD-WAN Manager 19.2 | 19.2.0 → 19.2.929 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 19.1.0 | No fix stated |
| Cisco Catalyst SD-WAN Manager 19.0 | 19.0.0 → 19.0.1a | No fix stated |
| Cisco Catalyst SD-WAN Manager 18.4 | 18.4.0 → 18.4.303 | No fix stated |
| Cisco Catalyst SD-WAN Manager 18.3 | 18.3.0 → 18.3.8 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 18.2.0 | No fix stated |
| Cisco Catalyst SD-WAN Manager 17.2 | 17.2.4 → 17.2.10 | No fix stated |
References
- cisco-sa-hardening-sdwan-faLcR3K sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Catalyst SD-WAN Controller
The 7 CVEs of Cisco Catalyst SD-WAN Controller →
CVE-2026-20313
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering…
7.7
High
CVE-2026-20312
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering…
8.8
High
CVE-2026-20310
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering…
9.1
Critical
CVE-2026-20304
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering…
9.9
Critical