CVE-2026-20191 - Cisco Catalyst Center Arbitrary File Read Vulnerability

Back Back to CVE browser

HIGH

Cisco Catalyst Center Arbitrary File Read Vulnerability

Published Jul 1, 2026

7.5

HIGH

CVSS 3.1

EPSS 0.65%

Description

A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.  This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device.

Affected products

Vendor Cisco Product Cisco Catalyst Center Default
n/a
- Version
  2.3.7.0-VA
  Status
  affected
  Constraints
  -
- Version
  2.3.7.10-VA
  Status
  affected
  Constraints
  -
- Version
  2.3.7.5-VA
  Status
  affected
  Constraints
  -
- Version
  2.3.7.6-VA
  Status
  affected
  Constraints
  -
- Version
  2.3.7.7-VA
  Status
  affected
  Constraints
  -
- Version
  2.3.7.9-VA
  Status
  affected
  Constraints
  -
- Version
  3.1.3
  Status
  affected
  Constraints
  -
- Version
  3.1.3-VA
  Status
  affected
  Constraints
  -
- Version
  3.1.5
  Status
  affected
  Constraints
  -
- Version
  3.1.5-RevUp
  Status
  affected
  Constraints
  -
- Version
  3.1.5-VA
  Status
  affected
  Constraints
  -
- Version
  3.1.5-VA on AWS
  Status
  affected
  Constraints
  -
- Version
  3.1.6
  Status
  affected
  Constraints
  -
- Version
  3.1.6-BETA
  Status
  affected
  Constraints
  -
- Version
  3.1.6-GSMU100
  Status
  affected
  Constraints
  -
- Version
  3.1.6-VA
  Status
  affected
  Constraints
  -
- Version
  3.1.6-VA-GSMU100
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cisco

Cisco Catalyst Center

n/a

Version	Status	Constraints
2.3.7.0-VA	affected	-
2.3.7.10-VA	affected	-
2.3.7.5-VA	affected	-
2.3.7.6-VA	affected	-
2.3.7.7-VA	affected	-
2.3.7.9-VA	affected	-
3.1.3	affected	-
3.1.3-VA	affected	-
3.1.5	affected	-
3.1.5-RevUp	affected	-
3.1.5-VA	affected	-
3.1.5-VA on AWS	affected	-
3.1.6	affected	-
3.1.6-BETA	affected	-
3.1.6-GSMU100	affected	-
3.1.6-VA	affected	-
3.1.6-VA-GSMU100	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (1)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X
Vendor Advisory

Link	Providers	Tags
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published Jul 1, 2026

Updated Jul 1, 2026

Reserved Oct 8, 2025

Link CVE-2026-20191

CISA Vulnrichment

Updated Jul 1, 2026

NVD

Status Analyzed

Modified Sep 17, 2026

Link CVE-2026-20191

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-20191