Vulnerability-Lookup

CVE-2026-20191 (GCVE-0-2026-20191)

Vulnerability from cvelistv5 – Published: 2026-07-01 16:27 – Updated: 2026-07-01 17:25

Title

Cisco Catalyst Center Arbitrary File Read Vulnerability

Summary

A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-01 17:18 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

cisco mitre root

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

1 product

Vendor	Product	Version	CPE status
Cisco	Cisco Catalyst Center	Affected: 2.3.7.0-VA Affected: 2.3.7.5-VA Affected: 2.3.7.6-VA Affected: 2.3.7.7-VA Affected: 2.3.7.9-VA Affected: 3.1.3 Affected: 3.1.3-VA Affected: 2.3.7.10-VA Affected: 3.1.5 Affected: 3.1.5-VA Affected: 3.1.5-VA on AWS Affected: 3.1.5-RevUp Affected: 3.1.6 Affected: 3.1.6-VA Affected: 3.1.6-BETA Affected: 3.1.6-GSMU100 Affected: 3.1.6-VA-GSMU100	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20191",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-01T17:18:27.744122Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T17:25:09.294Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Catalyst Center",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "2.3.7.0-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.5-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.6-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.7-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.9-VA"
            },
            {
              "status": "affected",
              "version": "3.1.3"
            },
            {
              "status": "affected",
              "version": "3.1.3-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.10-VA"
            },
            {
              "status": "affected",
              "version": "3.1.5"
            },
            {
              "status": "affected",
              "version": "3.1.5-VA"
            },
            {
              "status": "affected",
              "version": "3.1.5-VA on AWS"
            },
            {
              "status": "affected",
              "version": "3.1.5-RevUp"
            },
            {
              "status": "affected",
              "version": "3.1.6"
            },
            {
              "status": "affected",
              "version": "3.1.6-VA"
            },
            {
              "status": "affected",
              "version": "3.1.6-BETA"
            },
            {
              "status": "affected",
              "version": "3.1.6-GSMU100"
            },
            {
              "status": "affected",
              "version": "3.1.6-VA-GSMU100"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.\u0026nbsp;\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T16:27:32.642Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-catc-file-read-wLH2vf8X",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X"
        }
      ],
      "source": {
        "advisory": "cisco-sa-catc-file-read-wLH2vf8X",
        "defects": [
          "CSCwt73509"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Catalyst Center Arbitrary File Read Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20191",
    "datePublished": "2026-07-01T16:27:32.642Z",
    "dateReserved": "2025-10-08T11:59:15.395Z",
    "dateUpdated": "2026-07-01T17:25:09.294Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-20191",
      "date": "2026-09-16",
      "epss": "0.00909",
      "percentile": "0.58198"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-20191\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2026-07-01T17:16:29.330\",\"lastModified\":\"2026-07-01T18:16:30.850\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.\u0026nbsp;\\r\\n\\r\\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device.\"}],\"affected\":[{\"source\":\"psirt@cisco.com\",\"affectedData\":[{\"vendor\":\"Cisco\",\"product\":\"Cisco Catalyst Center\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"2.3.7.0-VA\",\"status\":\"affected\"},{\"version\":\"2.3.7.5-VA\",\"status\":\"affected\"},{\"version\":\"2.3.7.6-VA\",\"status\":\"affected\"},{\"version\":\"2.3.7.7-VA\",\"status\":\"affected\"},{\"version\":\"2.3.7.9-VA\",\"status\":\"affected\"},{\"version\":\"3.1.3\",\"status\":\"affected\"},{\"version\":\"3.1.3-VA\",\"status\":\"affected\"},{\"version\":\"2.3.7.10-VA\",\"status\":\"affected\"},{\"version\":\"3.1.5\",\"status\":\"affected\"},{\"version\":\"3.1.5-VA\",\"status\":\"affected\"},{\"version\":\"3.1.5-VA on AWS\",\"status\":\"affected\"},{\"version\":\"3.1.5-RevUp\",\"status\":\"affected\"},{\"version\":\"3.1.6\",\"status\":\"affected\"},{\"version\":\"3.1.6-VA\",\"status\":\"affected\"},{\"version\":\"3.1.6-BETA\",\"status\":\"affected\"},{\"version\":\"3.1.6-GSMU100\",\"status\":\"affected\"},{\"version\":\"3.1.6-VA-GSMU100\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-07-01T17:18:27.744122Z\",\"id\":\"CVE-2026-20191\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-22\"}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X\",\"source\":\"psirt@cisco.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-20191\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-07-01T17:18:27.744122Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-01T17:21:08.775Z\"}}], \"cna\": {\"title\": \"Cisco Catalyst Center Arbitrary File Read Vulnerability\", \"source\": {\"defects\": [\"CSCwt73509\"], \"advisory\": \"cisco-sa-catc-file-read-wLH2vf8X\", \"discovery\": \"INTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco Catalyst Center\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.3.7.0-VA\"}, {\"status\": \"affected\", \"version\": \"2.3.7.5-VA\"}, {\"status\": \"affected\", \"version\": \"2.3.7.6-VA\"}, {\"status\": \"affected\", \"version\": \"2.3.7.7-VA\"}, {\"status\": \"affected\", \"version\": \"2.3.7.9-VA\"}, {\"status\": \"affected\", \"version\": \"3.1.3\"}, {\"status\": \"affected\", \"version\": \"3.1.3-VA\"}, {\"status\": \"affected\", \"version\": \"2.3.7.10-VA\"}, {\"status\": \"affected\", \"version\": \"3.1.5\"}, {\"status\": \"affected\", \"version\": \"3.1.5-VA\"}, {\"status\": \"affected\", \"version\": \"3.1.5-VA on AWS\"}, {\"status\": \"affected\", \"version\": \"3.1.5-RevUp\"}, {\"status\": \"affected\", \"version\": \"3.1.6\"}, {\"status\": \"affected\", \"version\": \"3.1.6-VA\"}, {\"status\": \"affected\", \"version\": \"3.1.6-BETA\"}, {\"status\": \"affected\", \"version\": \"3.1.6-GSMU100\"}, {\"status\": \"affected\", \"version\": \"3.1.6-VA-GSMU100\"}], \"defaultStatus\": \"unknown\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X\", \"name\": \"cisco-sa-catc-file-read-wLH2vf8X\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.\u0026nbsp;\\r\\n\\r\\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-22\", \"description\": \"Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2026-07-01T16:27:32.642Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-20191\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-01T17:25:09.294Z\", \"dateReserved\": \"2025-10-08T11:59:15.395Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2026-07-01T16:27:32.642Z\", \"assignerShortName\": \"cisco\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-0825

Vulnerability from certfr_avis - Published: 2026-07-02 - Updated: 2026-07-02

De multiples vulnérabilités ont été découvertes dans les produits Cisco. Elles permettent à un attaquant de provoquer un déni de service à distance et une atteinte à la confidentialité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Cisco	Secure Endpoint	Secure Endpoint Private Cloud versions antérieures à 4.2.8
Cisco	Secure Endpoint	Secure Endpoint Connector versions antérieures à 1.27.21 pour Mac
Cisco	Secure Endpoint	Secure Endpoint Connector versions antérieures à 1.29.01 pour Linux
Cisco	N/A	Catalyst Center versions 2.3.7 antérieures à 2.3.7.11-VA GSMU100
Cisco	Secure Endpoint	Secure Endpoint Connector versions antérieures à 8.6.21 pour Windows
Cisco	N/A	Catalyst Center versions 3.1 antérieures à 3.1.6 GSMU200

References

Title

Publication Time

CISCO-SA-CATC-FILE-READ-WLH2VF8X

Vulnerability from csaf_cisco - Published: 2026-07-01 16:00 - Updated: 2026-07-06 12:00

Summary

Cisco Catalyst Center Arbitrary File Read Vulnerability

Scope

1 vulnerability in this advisory, including CVE-2026-20191.

CVE-2026-20191

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Known affected: 1 product

https://software.cisco.com

Open the full advisory

CNVD-2026-27673

Vulnerability from cnvd - Published: 2026-07-13

Title

Cisco Catalyst Center路径遍历漏洞（CNVD-2026-27673）

Description

Cisco Catalyst Center是美国Cisco公司的一款网络管理平台。 Cisco Catalyst Center存在路径遍历漏洞。该漏洞源于程序未能正确地过滤资源或文件路径中的特殊元素，攻击者可利用该漏洞通过发送特制HTTP请求读取受限容器中的任意文件。

Severity

高

Patch Name

Cisco Catalyst Center路径遍历漏洞（CNVD-2026-27673）的补丁

Patch Description

Cisco Catalyst Center是美国Cisco公司的一款网络管理平台。 Cisco Catalyst Center存在路径遍历漏洞。该漏洞源于程序未能正确地过滤资源或文件路径中的特殊元素，攻击者可利用该漏洞通过发送特制HTTP请求读取受限容器中的任意文件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X

Reference

https://nvd.nist.gov/vuln/detail/CVE-2026-20191

Impacted products

Name
['Cisco Catalyst Center 2.3.7.0-VA', 'Cisco Catalyst Center 2.3.7.5-VA', 'Cisco Catalyst Center 2.3.7.6-VA', 'Cisco Catalyst Center 2.3.7.7-VA', 'Cisco Catalyst Center 2.3.7.9-VA', 'Cisco Catalyst Center 3.1.3', 'Cisco Catalyst Center 3.1.3-VA', 'Cisco Catalyst Center 2.3.7.10-VA', 'Cisco Catalyst Center 3.1.5', 'Cisco Catalyst Center 3.1.5-VA', 'Cisco Catalyst Center 3.1.5-VA on AWS', 'Cisco Catalyst Center 3.1.5-RevUp', 'Cisco Catalyst Center 3.1.6', 'Cisco Catalyst Center 3.1.6-VA', 'Cisco Catalyst Center 3.1.6-BETA', 'Cisco Catalyst Center 3.1.6-GSMU100', 'Cisco Catalyst Center 3.1.6-VA-GSMU100']

Name

['Cisco Catalyst Center 2.3.7.0-VA', 'Cisco Catalyst Center 2.3.7.5-VA', 'Cisco Catalyst Center 2.3.7.6-VA', 'Cisco Catalyst Center 2.3.7.7-VA', 'Cisco Catalyst Center 2.3.7.9-VA', 'Cisco Catalyst Center 3.1.3', 'Cisco Catalyst Center 3.1.3-VA', 'Cisco Catalyst Center 2.3.7.10-VA', 'Cisco Catalyst Center 3.1.5', 'Cisco Catalyst Center 3.1.5-VA', 'Cisco Catalyst Center 3.1.5-VA on AWS', 'Cisco Catalyst Center 3.1.5-RevUp', 'Cisco Catalyst Center 3.1.6', 'Cisco Catalyst Center 3.1.6-VA', 'Cisco Catalyst Center 3.1.6-BETA', 'Cisco Catalyst Center 3.1.6-GSMU100', 'Cisco Catalyst Center 3.1.6-VA-GSMU100']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2026-20191",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2026-20191"
    }
  },
  "description": "Cisco Catalyst Center\u662f\u7f8e\u56fdCisco\u516c\u53f8\u7684\u4e00\u6b3e\u7f51\u7edc\u7ba1\u7406\u5e73\u53f0\u3002\n\nCisco Catalyst Center\u5b58\u5728\u8def\u5f84\u904d\u5386\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u5730\u8fc7\u6ee4\u8d44\u6e90\u6216\u6587\u4ef6\u8def\u5f84\u4e2d\u7684\u7279\u6b8a\u5143\u7d20\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u53d1\u9001\u7279\u5236HTTP\u8bf7\u6c42\u8bfb\u53d6\u53d7\u9650\u5bb9\u5668\u4e2d\u7684\u4efb\u610f\u6587\u4ef6\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2026-27673",
  "openTime": "2026-07-13",
  "patchDescription": "Cisco Catalyst Center\u662f\u7f8e\u56fdCisco\u516c\u53f8\u7684\u4e00\u6b3e\u7f51\u7edc\u7ba1\u7406\u5e73\u53f0\u3002\r\n\r\nCisco Catalyst Center\u5b58\u5728\u8def\u5f84\u904d\u5386\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u5730\u8fc7\u6ee4\u8d44\u6e90\u6216\u6587\u4ef6\u8def\u5f84\u4e2d\u7684\u7279\u6b8a\u5143\u7d20\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u53d1\u9001\u7279\u5236HTTP\u8bf7\u6c42\u8bfb\u53d6\u53d7\u9650\u5bb9\u5668\u4e2d\u7684\u4efb\u610f\u6587\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Catalyst Center\u8def\u5f84\u904d\u5386\u6f0f\u6d1e\uff08CNVD-2026-27673\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco Catalyst Center 2.3.7.0-VA",
      "Cisco Catalyst Center 2.3.7.5-VA",
      "Cisco Catalyst Center 2.3.7.6-VA",
      "Cisco Catalyst Center 2.3.7.7-VA",
      "Cisco Catalyst Center 2.3.7.9-VA",
      "Cisco Catalyst Center 3.1.3",
      "Cisco Catalyst Center 3.1.3-VA",
      "Cisco Catalyst Center 2.3.7.10-VA",
      "Cisco Catalyst Center 3.1.5",
      "Cisco Catalyst Center 3.1.5-VA",
      "Cisco Catalyst Center 3.1.5-VA on AWS",
      "Cisco Catalyst Center 3.1.5-RevUp",
      "Cisco Catalyst Center 3.1.6",
      "Cisco Catalyst Center 3.1.6-VA",
      "Cisco Catalyst Center 3.1.6-BETA",
      "Cisco Catalyst Center 3.1.6-GSMU100",
      "Cisco Catalyst Center 3.1.6-VA-GSMU100"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2026-20191",
  "serverity": "\u9ad8",
  "submitTime": "2026-07-08",
  "title": "Cisco Catalyst Center\u8def\u5f84\u904d\u5386\u6f0f\u6d1e\uff08CNVD-2026-27673\uff09"
}

FKIE_CVE-2026-20191

Vulnerability from fkie_nvd - Published: 2026-07-01 17:16 - Updated: 2026-07-01 18:16

Severity

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

References

	URL	Tags
	psirt@cisco.com	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Catalyst Center",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "2.3.7.0-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.5-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.6-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.7-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.9-VA"
            },
            {
              "status": "affected",
              "version": "3.1.3"
            },
            {
              "status": "affected",
              "version": "3.1.3-VA"
            },
            {
              "status": "affected",
              "version": "2.3.7.10-VA"
            },
            {
              "status": "affected",
              "version": "3.1.5"
            },
            {
              "status": "affected",
              "version": "3.1.5-VA"
            },
            {
              "status": "affected",
              "version": "3.1.5-VA on AWS"
            },
            {
              "status": "affected",
              "version": "3.1.5-RevUp"
            },
            {
              "status": "affected",
              "version": "3.1.6"
            },
            {
              "status": "affected",
              "version": "3.1.6-VA"
            },
            {
              "status": "affected",
              "version": "3.1.6-BETA"
            },
            {
              "status": "affected",
              "version": "3.1.6-GSMU100"
            },
            {
              "status": "affected",
              "version": "3.1.6-VA-GSMU100"
            }
          ]
        }
      ],
      "source": "psirt@cisco.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.\u0026nbsp;\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device."
    }
  ],
  "id": "CVE-2026-20191",
  "lastModified": "2026-07-01T18:16:30.850",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "psirt@cisco.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-20191",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-07-01T17:18:27.744122Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-07-01T17:16:29.330",
  "references": [
    {
      "source": "psirt@cisco.com",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ],
      "source": "psirt@cisco.com",
      "type": "Secondary"
    }
  ]
}

GHSA-46P9-P299-PR9P

Vulnerability from github – Published: 2026-07-01 18:31 – Updated: 2026-07-01 18:31

Details

A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.

This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device.

Severity

7.5 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-20191"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-22"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-01T17:16:29Z",
    "severity": "HIGH"
  },
  "details": "A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.\u0026nbsp;\n\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device.",
  "id": "GHSA-46p9-p299-pr9p",
  "modified": "2026-07-01T18:31:51Z",
  "published": "2026-07-01T18:31:51Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20191"
    },
    {
      "type": "WEB",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2026-0218

Vulnerability from csaf_ncscnl - Published: 2026-07-02 12:39 - Updated: 2026-07-02 12:39

Summary

Kwetsbaarheid verholpen in Cisco Catalyst Center

Scope

1 vulnerability in this advisory, including CVE-2026-20191.

CVE-2026-20191

A vulnerability in Cisco Catalyst Center allows an unauthenticated remote attacker to read arbitrary files from a restricted container by exploiting insufficient validation of user-supplied input via crafted HTTP requests.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Known affected: 2 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-20191 (GCVE-0-2026-20191)

CERTFR-2026-AVI-0825

Solutions

CISCO-SA-CATC-FILE-READ-WLH2VF8X

CNVD-2026-27673

FKIE_CVE-2026-20191

GHSA-46P9-P299-PR9P

NCSC-2026-0218

Tags

Sightings

Nomenclature

Related by attack behaviour