Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class — Common Weakness Enumeration (CWE) — and assigned a single Common Vulnerabilities and Exposures identifier (CVE ID) to each CWE grouping. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-sdwan-faLcR3K Security Impact Rating: Critical CVE: CVE-2026-20303,CVE-2026-20304,CVE-2026-20310,CVE-2026-20312,CVE-2026-20313
CSIRTS triage
- What
- Multiple internally discovered vulnerabilities in Catalyst SD-WAN Software grouped by Common Weakness Enumeration class.
- Who is affected
- All versions of Cisco Catalyst SD-WAN Software are affected.
- Urgency
- Critical severity; no active exploitation known but internal testing identified multiple vulnerability classes requiring immediate patching.
- Action
- Apply Cisco Catalyst SD-WAN Software updates immediately; no workarounds available.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Catalyst SD-WAN Software
Get an email when a new Catalyst SD-WAN Software advisory drops — max one per day, one-click unsubscribe.
Details
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-203030.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203040.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203100.37% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 30% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203120.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203130.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 16% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-20303 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20304 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20310 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20312 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20313 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEW] [high] Cisco Catalyst SD-WAN Manager: Multiple Vulnerabilitiescert-bund
- unknownNCSC-2026-0277 [1.00] [M/H] Vulnerabilities patched in Cisco Catalyst SD-WANncsc-nl
- unknownMultiple vulnerabilities in Cisco products (August 6, 2026)cert-fr-avis
- highCVE-2026-20313: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cat…nvd
- highCVE-2026-20312: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cat…nvd
- criticalCVE-2026-20310: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cat…nvd
- criticalCVE-2026-20304: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cat…nvd
- criticalCVE-2026-20303: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cat…nvd
- criticalCisco Advance Notification for Publication of August 5, 2026, Security Advisoriescisco-psirt
Recent advisories for Cisco Catalyst SD-WAN
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- high[NEW] [high] Cisco Catalyst SD-WAN Manager: Multiple Vulnerabilitiescert-bund · 2026-08-06
- unknownNCSC-2026-0277 [1.00] [M/H] Vulnerabilities patched in Cisco Catalyst SD-WANncsc-nl · 2026-08-06
- highCVE-2026-20313: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cat…nvd · 2026-08-05
- highCVE-2026-20312: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cat…nvd · 2026-08-05
- criticalCVE-2026-20310: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cat…nvd · 2026-08-05
- criticalCVE-2026-20304: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cat…nvd · 2026-08-05
More from Cisco Security Advisories
- criticalCisco Advance Notification for Publication of August 5, 2026, Security Advisories2026-08-05
- mediumCisco Catalyst SD-WAN Manager Information Disclosure Vulnerability2026-08-05
- highCisco Integrated Management Controller Argument Injection Vulnerabilities2026-08-05
- mediumCisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability2026-08-05
- mediumCisco RoomOS Logging Subsystem Information Disclosure Vulnerability2026-08-05