CVE-2026-20312: Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities

Published Aug 5, 2026

Updated

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20312 are related to Cleartext storage of sensitive information issues that are grouped under the Common Weakness Enumeration (CWE) CWE-312.

Affected Software

1 affected component

Cisco Cisco Catalyst SD-WAN

Event History

Aug 5, 2026

CVE Published

via MITRE·04:31 PM

Data Sourced

via MITRE·04:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-20312?

CVE-2026-20312 has a severity score of 8.8, classified as high risk.

What type of vulnerability is described in CVE-2026-20312?

CVE-2026-20312 describes information disclosure vulnerabilities in Cisco Catalyst SD-WAN.

How do I fix CVE-2026-20312?

To fix CVE-2026-20312, apply the latest security hardening release provided by Cisco for the Cisco Catalyst SD-WAN.

What products are affected by CVE-2026-20312?

CVE-2026-20312 affects the Cisco Catalyst SD-WAN software.

When was CVE-2026-20312 published?

CVE-2026-20312 was published on August 5, 2026.