Cisco Catalyst SD-WAN contains multiple internally discovered vulnerabilities related to the cleartext storage of sensitive information, tracked under CVE-2026-20312 and CWE-312. These vulnerabilities were identified during a comprehensive internal security review by Cisco's engineering team, leading to software hardening releases. The CVSS 3.1 score of 8.8 reflects a critical severity with network attack vector, low attack complexity, requiring privileges but no user interaction, and impacting confidentiality, integrity, and availability. No detailed version information or patch links have been provided in the available data.

The vulnerability allows sensitive information to be stored in cleartext, which could lead to unauthorized disclosure if an attacker gains access to the affected system. The CVSS score indicates that successful exploitation can have a high impact on confidentiality, integrity, and availability of the system. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Cisco has conducted internal security reviews and released software hardening updates, but no explicit patch or update information is provided. Users should monitor Cisco's official advisories for updates and apply any released patches promptly.