Critical Alert 3 Active Exploits Detected Today

CVE-2026-18556 N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability →
CVE-2026-34486 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability →
CVE-2026-9198 IBM Langflow Code Injection Vulnerability →
Powered by CVE Watchtower
×
August 5, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-20303NVD

Vulnerability Summary

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20303 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) CWE-20.
Severity Level
CRITICAL(9.9)
Published Date
Aug 5, 2026
Last Modified
Aug 5, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh