cisco-sa-catc-file-read-wLH2vf8XHighCVSS 7.5

Cisco Catalyst Center Arbitrary File Read Vulnerability

Published
July 1, 2026
Last Modified
July 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-20191 →

📋 Description

A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.

This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

CVE-2026-20191 — Cisco Catalyst Center Arbitrary File Read Vulnerability (CVSS 3.1 7.5, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

🎯 Affected products18

  • Cisco Catalyst Center
  • Cisco Catalyst Center 2.3.7.0-VA
  • Cisco Catalyst Center 2.3.7.10-VA
  • Cisco Catalyst Center 2.3.7.5-VA
  • Cisco Catalyst Center 2.3.7.6-VA
  • Cisco Catalyst Center 2.3.7.7-VA
  • Cisco Catalyst Center 2.3.7.9-VA
  • Cisco Catalyst Center 3.1.3
  • Cisco Catalyst Center 3.1.3-VA
  • Cisco Catalyst Center 3.1.5
  • Cisco Catalyst Center 3.1.5-RevUp
  • Cisco Catalyst Center 3.1.5-VA
  • Cisco Catalyst Center 3.1.5-VA on AWS
  • Cisco Catalyst Center 3.1.6
  • Cisco Catalyst Center 3.1.6-BETA
  • Cisco Catalyst Center 3.1.6-GSMU100
  • Cisco Catalyst Center 3.1.6-VA
  • Cisco Catalyst Center 3.1.6-VA-GSMU100

✅ Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com Workarounds: There are no workarounds that address this vulnerability.

🔗 References (2)