🛡️ tsecurity.de
Zur Startseite 🔖 Lesezeichen
🎯 CVE-2026-20303 CRITICAL 9.9 🔥 EPSS 31% 🇪🇺 EUVD
📄 .md Alle CVEs anzeigen ✕

CVE-2026-20303 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20303 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) CWE-20.

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20303 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) CWE-20.

Klassifikation & Betroffenheit:
CWE-20 Cisco Cisco Catalyst SD-WAN Controller 17.2.8Cisco Catalyst SD-WAN Controller 20.9.3Cisco Catalyst SD-WAN Manager 20.9.6Cisco Catalyst SD-WAN Manager 20.12.5.1Cisco Catalyst SD-WAN Manager 20.6.6Cisco Catalyst SD-WAN Manager 20.16.1Cisco Catalyst SD-WAN Manager 19.0.1aCisco Catalyst SD-WAN Controller 20.12.4.1
Improper Input Validation 🎯 High

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

🛡️ Empfohlene Mitigation: Consider using language-theoretic security (LangSec) techniques that characterize inputs using a formal language and build "recognizers" for that language. This effectively requires parsing to be a distinct layer that effectively enforces a boundary between raw input and internal data representations, instead of allowi…
Vollständige Definition bei MITRE ➔
⚔️ Typische Angriffsmuster (CAPEC):
CAPEC-10 · Buffer Overflow via Environment Variable… (High) CAPEC-13 · Subverting Environment Variable Values (Very High) CAPEC-101 · Server Side Include (SSI) Injection (High) CAPEC-104 · Cross Zone Scripting (High) CAPEC-108 · Command Line Execution through SQL Injec… (Very High) CAPEC-109 · Object Relational Mapping Injection (High) CAPEC-110 · SQL Injection through SOAP Parameter Tam… (Very High) CAPEC-120 · Double Encoding (Medium)
🎯 ATT&CK-Techniken (Kill-Chain-Verhalten):
T1562.003 · Impair Defenses:Impair Command His… T1574.006 · Hijack Execution Flow:Dynamic Link… T1574.007 · Hijack Execution Flow:Path Interce…
🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):
CVE-2026-20315 10.0 CVE-2026-20317 10.0 CVE-2026-20358 10.0 CVE-2026-20357 10.0 CVE-2026-20030 10.0
🧪 Exploit-Evidenz:
🐙 HORKimhab/Cisco-CVE-2026-20303-M
📚 Referenzen & Quellen:
🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag
Ausnutzungs-Zeitleiste:
CVSS-Vektor-Analyse: 9.9
AV · Angriffsvektor Netzwerk
AC · Komplexität Gering
PR · Privilegien Gering
UI · Interaktion Keine
S · Scope Verändert
C · Vertraulichkeit Hoch
I · Integrität Hoch
A · Verfügbarkeit Hoch
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Veröffentlicht:05.08.2026
Aktualisiert:14.08.2026 21:17
Assigner (CNA):cisco
EUVD-ID:EUVD-2026-53469
Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache
CWE-20 ✓ Offizieller Patch / Advisory verfügbar
💡 Gegenmaßnahme: Management-Interface vom Internet trennen und ACLs auf vertrauenswürdige IPs beschränken.
🔴 Live Security Advisory & EPSS Exploit Radar

Zero-Day & Vulnerability Intelligence Hub

Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.

🟢 SSE Realtime Synchronisiert ⚡ REST API (JSON) 📡 Digest (RSS) 📡 RSS Feed
354k+ 🇪🇺 EUVD-Datenbank
1 🔴 Critical im Radar
0 ⚠️ CISA KEV
0 🔓 Aktiv ausgenutzt
0 🧪 PoC verfügbar
21 🆕 Neu im KEV (7 T)
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
🔴 Criticals pro Monat (12 M) 2025-09: 271 2025-10: 316 2025-11: 257 2025-12: 426 2026-01: 431 2026-02: 418 2026-03: 652 2026-04: 574 2026-05: 683 2026-06: 942 2026-07: 1333 2026-08: 1329 7.632 Criticals gesamt
🏢 Top-Vendor-Veröffentlichungen (6 M) Adobe Apple Google Linux Microsoft Oracle Corporation
● Adobe ● Apple ● Google ● Linux ● Microsoft ● Oracle
📈 EPSS-Verteilung (Messungen)
Tier2026-08-292026-09-04
≥90 %40
≥50 %40
≥10 %30
<10 %304300
📈 EPSS-Riser (7 Tage) CVE-2018-16162 ↑ 0.2 % CVE-2018-7259 ↑ 0.2 % CVE-2018-14967 ↑ 0.1 %
Frühindikator · FIRST.org
Datenquellen & Methodik: Primärquelle ist die EUVD der ENISA (laufender Datenbank-Sync, alle 15 Minuten), abgeglichen mit dem CISA-KEV-Katalog und der NVD — Detail-Dossiers reichern fehlende Felder live per NVD an — mit Fallback auf CIRCL vulnerability-lookup (EU/Non-Profit, aggregiert CVE-, GitHub- und OSV-Advisories). Der CISA-KEV-Katalog (Known Exploited Vulnerabilities, ~1.700 aktiv ausgenutzte Schwachstellen) wird bei jedem Sync vollständig neu geladen und kreuzreferenziert — filterbar über die KEV-Pille. CVSS 3.1 wird nach Ampel-Logik aus Verteidigersicht dekodiert; EPSS bezeichnet die 30-Tage-Exploit-Wahrscheinlichkeit (FIRST.org).
🇪🇺 ENISA EUVD 🇺🇸 NVD ⚠️ CISA KEV ⚡ EPSS
Ökosystem & Hersteller Bedrohungs-Matrix:
Cisco 1
Schweregrad & Status:
Hersteller (Datenbank-weit, 90.597 Einträge):
EPSS-Schwelle:
Quelle:
Schwachstellen-Kategorie (CWE):
🔍
9.9 CRITICAL
🇪🇺 EUVD
EPSS 31%
CVE-2026-20303 🌐 Netzwerk (Remote) 🔑 Geringe Nutzerrechte nötig
Cisco

CVE-2026-20303 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20303 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) CWE-20.

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that add

CWE-20 ✓ Offizieller Patch / Advisory verfügbar
💡 Gegenmaßnahme: Management-Interface vom Internet trennen und ACLs auf vertrauenswürdige IPs beschränken.
05.08.2026
🛡️ Details ➔