Cisco Catalyst Center Arbitrary File Read Vulnerability
A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at
Read at Cisco PSIRT Security Advisories
- Vendor
- Cisco
- Product
- Meraki / Catalyst
- Fix
- available
- Exposure class
- Network management
Why it ranks 24 (Routine)
- Product class: network management
- Widely deployed vendor product (Cisco)
- Fix available
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Cisco PSIRT Security Advisories (sec.cloudapps.cisco.com)
- CVE-2026-20191 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.