Vulnerability Report

CVE-2026-20313

Title: Improper Link Resolution Before File Access in Cisco Catalyst SD-WAN

Other

Proof Of Concept

PoC Available for CVE-2026-20313

CWE Category CWE-1284

Published Date Aug 05, 2026

Modified Date Aug 14, 2026

Exploit Status Available

Score 7.7 CVSS v3.1

Exploit Probability (EPSS)

0.42%

Vulnerability Summary

CVE-2026-20313: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20313 are related to Improper link resolution before file access issues that are grouped under the Common Weakness Enumeration (CWE) CWE-1284.

Impacted Vendors

Analysis in Progress...

Reference Links

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-sdwan-faLcR3K

CVSS v3.1

Source Entity [email protected]

Severity HIGH

7.7

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

CHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2026-20313 Exploits & PoCs (Proof Of Concept)

GitHub https://github.com/HORKimhab/Cisco-CVE-2026-20303-More

View Code

August 14, 2026 MODIFIED

Vulnerability data updated via NVD.

August 06, 2026 MODIFIED

Vulnerability data updated via NVD.

August 05, 2026 MODIFIED

Vulnerability data updated via NVD.

August 05, 2026 MODIFIED

Vulnerability data updated via NVD.

Attack Vector Matrix

Access Vector NETWORK

Complexity LOW

Privileges N/A

Interaction NONE

CVSS Vector String


                                    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected Stack

No specific products linked.