CVE-2026-20312
Received Received - Intake

Cleartext Credential Storage in Cisco Catalyst SD-WAN

Publication date: 2026-08-05

Last updated on: 2026-08-05

Assigner: Cisco Systems, Inc.

Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20312 are related to Cleartext storage of sensitive information issues that are grouped under the Common Weakness Enumeration (CWE) CWE-312.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-05
Last Modified
2026-08-05
Generated
2026-08-05
AI Q&A
2026-08-05
EPSS Evaluated
N/A
NVD
CVE-2026-20312
EUVD
EUVD-2026-53472

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
cisco catalyst_sd-wan *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-312 The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves Cisco Catalyst SD-WAN software storing sensitive information in cleartext, which means data is not encrypted and could be accessed by unauthorized parties. It is classified under CWE-312, a weakness related to improper protection of sensitive data.

Detection Guidance

Detection of CVE-2026-20312 requires checking for cleartext storage of sensitive information in Cisco Catalyst SD-WAN systems. Review system logs and configuration files for plaintext credentials or sensitive data. Use tools like grep to search for sensitive keywords in files. Ensure no sensitive information is stored in cleartext in configuration files or logs.

Impact Analysis

An attacker could exploit this to access sensitive data like credentials or configuration details, leading to unauthorized network access, data breaches, or further attacks on the system. The high CVSS score (8.8) indicates significant risk.

Compliance Impact

Storing sensitive data in cleartext violates requirements for data protection in GDPR and HIPAA, which mandate encryption for personal or health data. Non-compliance could result in legal penalties or loss of certification.

Mitigation Strategies

Apply the latest Cisco Catalyst SD-WAN software updates provided by Cisco to address the Cleartext storage vulnerabilities. Review and update security configurations to ensure sensitive information is not stored in cleartext.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-20312. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart