Cisco Catalyst SD-WAN Controller contains a vulnerability identified as CVE-2026-20310 related to improper link resolution before file access, classified under CWE-59. This issue was discovered during Cisco's internal security review and affects many specific versions of the product. The vulnerability has a CVSS 3.1 base score of 9.1, reflecting critical severity with network attack vector, low attack complexity, high privileges required, no user interaction, and impacts on confidentiality, integrity, and availability with scope changed. No vendor advisory or patch details are provided in the input data, and no known exploits in the wild are reported.

The vulnerability allows an attacker with high privileges to exploit improper link resolution before file access, potentially leading to unauthorized disclosure, modification, or disruption of system resources. The CVSS score of 9.1 indicates critical impact on confidentiality, integrity, and availability. However, no known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Cisco has conducted internal security reviews and released software hardening updates addressing multiple vulnerabilities, but no explicit patch or remediation level is provided for CVE-2026-20310 in the available data. Users should monitor Cisco advisories for updates and apply official fixes once available.