Cisco Patched Multiple Critical Vulnerabilities in Catalyst SD-WAN – Update Now

Cisco has rolled out software hardening updates for its Catalyst SD-WAN Software after an internal security review uncovered multiple critical vulnerabilities affecting the platform.

The flaws were identified proactively by Cisco’s own engineering team rather than through external reports, and the company has confirmed there is no evidence of active exploitation in the wild.

Even so, given the severity of some of these issues, administrators running Catalyst SD-WAN in any deployment mode should prioritize patching immediately.

Rather than issuing separate advisories for each bug, Cisco grouped the vulnerabilities by their underlying Common Weakness Enumeration (CWE) category and assigned one CVE identifier per group, a move designed to simplify the disclosure and patching process for customers. The most severe issues carry a CVSS score of 9.9, just shy of the maximum possible rating.

CVE-2026-20303 stems from improper input validation and encompasses related…