CVE-2026-20310: Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access

Published Aug 5, 2026

Updated

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20310 are related to improper link resolution before file access issues that are grouped under the Common Weakness Enumeration (CWE) CWE-59.

Affected Software

1 affected component

Cisco Cisco Catalyst SD-WAN

Event History

Aug 5, 2026

CVE Published

via MITRE·04:30 PM

Data Sourced

via MITRE·04:30 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-20310?

CVE-2026-20310 has a critical severity rating of 9.1.

How do I fix CVE-2026-20310?

To address CVE-2026-20310, ensure that you apply the latest Cisco SD-WAN software security hardening release.

What systems are affected by CVE-2026-20310?

CVE-2026-20310 affects Cisco Catalyst SD-WAN software.

What type of vulnerability is CVE-2026-20310?

CVE-2026-20310 is classified as an improper link resolution before file access vulnerability.

What impact does CVE-2026-20310 have on security?

CVE-2026-20310 could lead to unauthorized file access and compromise the security of the affected system.