CVE-2026-20191
published 2026-07-01CVE-2026-20191: A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container. This…
PriorityP357high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.65%
50.8th percentile
A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | catalyst_center | 2.3.7.0 – 2.3.7.11 | — |
| cisco | catalyst_center | >= 3.1.3 < 3.1.6-75524.200 | 3.1.6-75524.200 |
| cisco | catalyst_center_global_manager | < 1.4.1 | 1.4.1 |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
| cisco | cisco_catalyst_center | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Cisco Catalyst Center up to 3.1.6-VA-GSMU100 path traversal (cisco-sa-catc-file-read-wLH2vf8X)
vuldb·2026-07-01·CVSS 7.5
CVE-2026-20191 [HIGH] Cisco Catalyst Center up to 3.1.6-VA-GSMU100 path traversal (cisco-sa-catc-file-read-wLH2vf8X)
A vulnerability described as critical has been identified in Cisco Catalyst Center. Affected by this issue is some unknown functionality. The manipulation results in path traversal.
This vulnerability was named CVE-2026-20191. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is recommended.
GHSA
A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container. This vulnerability is due to insufficient validatio
ghsa_unreviewed·2026-07-01
CVE-2026-20191 [HIGH] CWE-22 A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container. This vulnerability is due to insufficient validatio
A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device.
No detection rules found.
No public exploits indexed.
2026-07-01
Published